{"report_id":"4d8028cb-2f54-4dfd-8205-b5219023b880","version":0,"status":"done","tags":[],"date":"2026-06-28T12:32:03Z","url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"title":"Online Casino Games - Play Slots, Live Games \u0026 Big Bonuses","dom":{"size":1548686,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (30286)","md5":"1f56cd9c1ac4c76db3d885bc593eb9ed","sha1":"d5453a8c37ba8d8eb09b885dcc452a7138517577","sha256":"f79d993daf026723b4452c75717e3799f45cf5bd6c8019629767dfcd82cb0190","sha512":"2259112efaaa3bfc4e516492d76d5ca9f798513d91c173b96fcfe3962ee558c4c765f88df8ed3061317ec0d57c0c8d3f03a71428218b1c08d77068d986c0010c","ssdeep":"6144:5CcBTP9aJ+KyJYyoVeGol1zj1txeslOf5GV6j0YuhyeHduvU361RI6iwVEyG+8E1:oIBPjr7NgLz5FK8IH0LvcS5+7G","tlshash":"a0650b159500202fa413c8a8b738be19f25cf8c7fe2d64d4badd831857d7df2926e698","dom_hash":"domhash8e15a0ebbaafe83255e521652d1a8309","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T12:32:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"use.typekit.net","ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4054,"first_seen":"2012-07-05T01:42:39Z","last_seen":"2026-06-22T09:14:45.893163Z","alert_count":0,"request_count":6,"received_data":226027,"sent_data":3550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-22T07:36:22.266568Z","alert_count":0,"request_count":4,"received_data":48644,"sent_data":1865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdn.sanity.io","ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2015-01-07","domain_rank":67597,"first_seen":"2017-03-16T07:21:36Z","last_seen":"2026-06-26T02:04:44.364046Z","alert_count":0,"request_count":5,"received_data":45037,"sent_data":3238,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"web.kick.com","ip":{"addr":"172.64.235.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-05-01","domain_rank":499363,"first_seen":"2025-07-16T17:40:11.223743Z","last_seen":"2026-06-05T21:28:55.99837Z","alert_count":0,"request_count":1,"received_data":1266,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mediumrare.imgix.net","ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-06-23","domain_rank":815465,"first_seen":"2020-06-29T10:13:09Z","last_seen":"2026-06-24T08:01:37.503789Z","alert_count":0,"request_count":39,"received_data":419653,"sent_data":24484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stake.com","ip":{"addr":"104.18.37.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-31","domain_rank":7197,"first_seen":"2019-11-07T21:29:31Z","last_seen":"2026-06-28T03:23:21.860753Z","alert_count":0,"request_count":2,"received_data":4099,"sent_data":1239,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"p.typekit.net","ip":{"addr":"23.33.119.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4638,"first_seen":"2012-05-23T14:28:57Z","last_seen":"2026-06-22T07:35:55.721057Z","alert_count":0,"request_count":1,"received_data":338,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"stake1401.com","ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-06-28T12:17:59.850338Z","last_seen":"2026-06-28T12:17:59.850338Z","alert_count":88,"request_count":88,"received_data":6761182,"sent_data":43139,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/tippy.js@6","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be40939a1df8aa4cec53fb6ae572df26","sha1":"189159143337e0bc08ce30b8b8a59a5e935335fe","sha256":"3f0fe70eb26ccf28f6887a192e29d38dd7ef7c2f079a73304ad42ddc7bed37de","sha512":"81baeeb9cabf3a9c7d8e51dfaaa65e020d8b34add8e016e95c72838510bcf3fb4044bfe2ccf384e19b76c3a5fd4a7d547966866cbdfccd6ee790bda3767e4923","ssdeep":"768:m4OeYE0+LOdORk89IOlyOdh5+3W5FEounZt/2ozZ9+Hsyhp+JjOtkq8Ggrj9cFQP:tAVYem5s/2PHFhpa2XgF","tlshash":"dbb2d699f69171791b6b2176c06f9619727b396d244fc420f033f0c82c789ae629bf2d","size":25717,"data":"","first_seen":"2023-03-07T12:03:05Z","last_seen":"2026-06-29T19:28:55.907359Z","times_seen":3989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"facc68a8a9b4228e494a8bda89b759ba","sha1":"c8679028cdf1e22754d0df2a5288e08155ed0d58","sha256":"7243fb3c151403eefffa0d0cb86a18d1e2450d956a9e2dc38d6cbe8060c17a7d","sha512":"168207e023302ff8f4a4342d1bbdf85b1652c3c9049d66d00634bf9c55e7af3856948cad21890ca851a2aebd394b8f8c53c1e04d3dc9400e6473d550c9cc1a29","ssdeep":"","tlshash":"a1f08b5f4520153c13a7b439565f310c312b82279905bec97a1cc380cf82c93e8723e8","size":570,"data":"","first_seen":"2026-06-28T12:18:07.563037Z","last_seen":"2026-06-28T12:32:10.829339Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a45fb8b5ac5822d8e7f37c4b8dcd36e2","sha1":"16fb52b48c65fb786f45e5600adb81e896688a2a","sha256":"60d86e3ea314bfcabe5d97b507df4481f9005ad1f1e2026ab0d613619966742a","sha512":"bba44d386f2d724aa9d25aaf169a2ed114335d09b526ac4b00f8de67eb25ba02e90678292b7b0f34aa21d4b389b89160e34bc8d4d8e4919fde26e6faeaab584b","ssdeep":"","tlshash":"db2148266d712138921b602d574b3108b614f2678b01ee61f67cc7e0cfc0c0396b2bbd","size":1329,"data":"","first_seen":"2026-06-28T12:18:07.564345Z","last_seen":"2026-06-28T12:32:10.829944Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"64f654adfec5bcac68cb588c0f873c96","sha1":"65a99ff07b8bd642c1410878e4206d7f0ac66d03","sha256":"e89514d080e6914f9ddb217e3e3c1b933ac89c1d98b60518e208fc0dd665e17b","sha512":"7814cb3bfb1d9cec91e653f607106af9f9f53d94702848257c1d60b826414a278100c07e42ff239eb7fdd7e7b9088e38a63a1339c13a76f4c6d7cbd2e3f196e5","ssdeep":"","tlshash":"f041cd6da475267144bfa75fe38f912436e670132602dc603a8ccba62fc05284166dcc","size":2304,"data":"","first_seen":"2026-06-28T12:18:07.565646Z","last_seen":"2026-06-28T12:32:10.830484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c978b4998b9968a3faa8b53b3543606","sha1":"29fff601ed9b47285af5b839c4f4afb5ad11887b","sha256":"4a9a62f1fd8b4f0452adcdd11d5f791b3559ce34b530d9fc9e0e1b0fc555b84d","sha512":"d4db5e9b3c48f0bb75d4f88b30433b41b87c61911bd204dc23c20698de177ccd2efb6aa2415a99be74c8c44c7962d86b417ec9d50ccaecb1b951b17689df00c6","ssdeep":"","tlshash":"f0e0682f73b708244d6f2079055fad6a211310570906ad243d0c46c40f8c92952e1bc9","size":376,"data":"","first_seen":"2026-06-28T12:18:07.567034Z","last_seen":"2026-06-28T12:32:10.831032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c13b6524a8310c0f2553867d07d050b0","sha1":"13124f9edd937db21047a48c6c95b4783c4bf170","sha256":"60cb42577e374944a22f64731f351c86692de56f7717a2b11f9711f623ed12f5","sha512":"bb4eefc1e3fd7a5f651fd36eff40e727fb46f1a3db1c888e1b8421f3dfa24d44b5e7184b4ddc48e24dd8cfa4337a6525caa65db5acee8401ebef01fef3038037","ssdeep":"","tlshash":"68e0abef33b40628b87f612d0a0e9cba32131a07280259383d8c0c402f5dca832e5b95","size":420,"data":"","first_seen":"2026-06-28T12:18:07.568259Z","last_seen":"2026-06-28T12:32:10.831555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef2a61c500982888fc7d3dd74e2ed43f","sha1":"db6477f515493f3aceed1841d6613e9c8608ca01","sha256":"3ca92ec669fc401547ac06d8c2bfd965f1a9814b2812dc8ac01a5db7f5049fe9","sha512":"558399d2e3a6f4993f3aa159cc77a1d78557d2fc9f2855e3e0c53fa4c0c549e2778163eac1a45dd1ebf81546e36a01b710c3941dbb6dd9bc33cf403814dc70fa","ssdeep":"","tlshash":"94f055fb6bb216286b3b5038058e7a393113148b080aa8183ead0d842f9983865f87d9","size":438,"data":"","first_seen":"2026-06-28T12:18:07.569539Z","last_seen":"2026-06-28T12:32:10.832146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a92c4eceb13a848e46505f829a6a4e26","sha1":"d6e3600d96867d593f86fe15e7e413928a94bfae","sha256":"58f217cd3ceaa4fd5bf427775eda080f2467932664cedec90243923f7b543c09","sha512":"5f26238d32a648495893a4c7d41b6f58f6d97963c71cd5c8bdc6b57a59352010d80512dd99b097e5460daf360816c5bf591fe26fc4f0194e6c42e06bfa2b7f24","ssdeep":"","tlshash":"3a418a1610b2153642a308b783db56e53558acc7e50989793eedc78c0fc1bc1d6b6be3","size":2056,"data":"","first_seen":"2026-06-28T12:18:07.570807Z","last_seen":"2026-06-28T12:32:10.832842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7d01deb1a941245435e72a4ba00da6b","sha1":"9a7c86bdf22ed3266f5bb0790dcf93460e0b2c77","sha256":"c0ab25c2d0ed5e525012b21e84745d33ae783de26d7c4af8ab585bdde0f25834","sha512":"fc4faf7bb201a431beb274471320cb0a1250b113a4002d37c6fe2bce3ca0803f543ee65eb71a9a21f3de06f3289ca298f37dffb3d5c1ff708d34c0a1a814447d","ssdeep":"","tlshash":"81418e18907218b749e70ab793d755e53e1458cbe088c4b6396e8b4d0f82be1d4b52fe","size":1922,"data":"","first_seen":"2026-06-28T12:18:07.572143Z","last_seen":"2026-06-28T12:32:10.83342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b44cad3bee25ea2ecbafa9d5ca2c785","sha1":"8119c8d7c6782c94183488904d938d027ba9d7a9","sha256":"770743d824309db15c669fced99f83afe68a71ae89c796c7d0045c38901534fa","sha512":"81231f0d7ff4f2396a72cf7febd260d72224a88e2a13f87903bced9df792f066e282757d1e9949c0abd18dbb6f25acfa4f37239c111a2afeaf11d972fada5b3b","ssdeep":"","tlshash":"7c118004a1e952750cab45d95acb4bceb568204ba164a86f3b4fd58e1fc10a0cee87e6","size":995,"data":"","first_seen":"2026-06-28T12:18:07.573574Z","last_seen":"2026-06-28T12:32:10.834017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb3ef827886584c213e4807b045f71bf","sha1":"787301435a0f112f5017302ceb94ef6649f6258f","sha256":"5f2bd8f718d8a2e33342c1ce3b53fa1fdc59c9ffdfd760159f7a4db71dd91f15","sha512":"3ea8879b9b81368afd8a3a49d89a5123ecaba7d154c81ed8772ff92f495ec023864c85896a896991b04a1636f1f86939732245a532259c61e66295073b981a8a","ssdeep":"","tlshash":"87e07d1544f00639412308c367cb48f53158bc97d3a81ae87e5c95580ffaac080b5bd3","size":329,"data":"","first_seen":"2026-06-28T12:18:07.574919Z","last_seen":"2026-06-28T12:32:10.834632Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ccef6c6ca60676352b3812e7cda95ab","sha1":"2392989ad4b3b7f9aa14f22745fd5734d4d992c7","sha256":"d5645077a4fb3b99eef3dcca00c7b03f122086c201fb2950e1d567c9a1de4828","sha512":"8374abd2bf7041bdb0914108c5d6399d03d5922b022a30ba110b50635214b95bed3cf5e531349ff62411faab644224fa46b5b5c863c0e7bfcabe27a1e0a1c9cc","ssdeep":"","tlshash":"a9e0263958e04a394123088312ca5de632546897d3a859a4796c96580feaec081b1bd3","size":336,"data":"","first_seen":"2026-06-28T12:18:07.576326Z","last_seen":"2026-06-28T12:32:10.835208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"204b587cbb5a7523fec2941fe03deb6f","sha1":"1f896b034dce787de0d171083b3a5e67cecdcba0","sha256":"ff8acc2d4f5f61a0982daf97f190ecb4895699bc4ead3b0104d988b8ab463723","sha512":"8304680d7f860659f434dfb591d615cbdf1985334c8561cef5b16129975d35c68815ed3c328c8e65539f538d49b9367f4f435cce3e4d273c699e97c7ff4a58dc","ssdeep":"","tlshash":"b3e02b0b35b4357605eb19737fd85544259241f759c4c5903d3d55100f44a24a7f5ec3","size":296,"data":"","first_seen":"2026-06-28T12:18:07.577902Z","last_seen":"2026-06-28T12:32:10.835807Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"74bc3c44a220e9fe896a434629779a3c","sha1":"32fdde2cc36f777e57556f8dd935bdcc6ee9e713","sha256":"be0e384b89474876dddb62d19667a5f8149659c8cc60ba17ee380ed58bfb19c6","sha512":"a4176ea4988b86957f9c5682694a2a8cd921d984191d6326eb3194ed9c6bcecb46288f76da7181f0094fc9f907237c6b7df5361a3cb58be11f1cd57685c272e5","ssdeep":"","tlshash":"4f41224b007720276033b979dfa726497536160be145fd807e1d83481f859266af5bec","size":1899,"data":"","first_seen":"2026-06-28T12:18:07.579641Z","last_seen":"2026-06-28T12:32:10.836378Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"17d586736001f5a21ca84092332541b8","sha1":"97e46b47dbe390087ce97851112d574b76670fcc","sha256":"90f16912bf68cc8fccac3716f6e508930144427d8640c488ed2a8cf9b355cd26","sha512":"17c1013a74e7796766f2d94c08fd31491f3ec684bcd139023404f57d04d64e33024978b007d64177a3596c9c5d16e7cef582096feb212d6eb9ab33b922ec3b0d","ssdeep":"","tlshash":"db01241048b901300677c88283db2f96b030705bb208994e3a4ee78d2fc14918ac93ea","size":776,"data":"","first_seen":"2026-06-28T12:18:07.580883Z","last_seen":"2026-06-28T12:32:10.836909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf098ffa90bb5f189d50d3843d171e9","sha1":"f824b7528d4036faa596d637b43a92ecef48f8b3","sha256":"205dc7f9b93287158a256db8a4a85a76acee319c94f025ab6bf1fa9a17cf7166","sha512":"744e7940534ef01d7b08250fb3464077b3b16b3df3277b60c11320ad653e092638fc5ef49cc2774b5a403cac7fd979c277f4276ad0b43c6bf0443613f2188f3a","ssdeep":"","tlshash":"a6019c2aa8b20450516b70b70f5fe605743328034046f9097e0c4a88efd18394bdbfdd","size":790,"data":"","first_seen":"2026-06-28T12:18:07.582127Z","last_seen":"2026-06-28T12:32:10.837448Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/bonus.js","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0e990098c63be3372b4bcaa2650d552","sha1":"08d9d458438e0c6e62cd18d7a34224df2aa5d69f","sha256":"c70f664fe2dd3c939b24f097313b3667d908283d23758751538f905c05f4d45c","sha512":"edd867f942afc086dd3bc471ddf459dbd184d40957a0b330348c38d5aa2a9662d7b58b194e4fd5bd1eec0c5099de53a7fe301f29c8eaeb25e7d62d5b3a0992fe","ssdeep":"","tlshash":"6c410e5a4a9c2a9817822fefbb3741e2c32ce94338f114850c2e85b17a52d65d3f6e75","size":1892,"data":"","first_seen":"2026-04-21T04:13:56.547679Z","last_seen":"2026-06-28T12:32:10.821294Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/obfuscated.js","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"77b4949b45fe7d213236d44f896e4dd6","sha1":"bc665ea2bdcdfda8de65a39292464aadb12e37dd","sha256":"c206b034d7d0b1b2e3e77f4197e0ff7712d03fbde4128f3a320ca6e82dfd4406","sha512":"642af25b8b922a1df1038340553f1b56d15da82d8b0dbbaad6bd2c244ab58e9754a00a1e86f99eca41b0dbe67ede58a1a8261a9fc49d1bd59887c66450a40339","ssdeep":"1536:unbcfmNZ88l6sywC7EgNq3y9d8vmE9RR8qjmxk7rp:uY7JWp","tlshash":"81934f96c250f7dcb699cd6a6f3ddf8c806601c9d09dc4ca596ef90c4a89947ba0ccbc","size":97007,"data":"","first_seen":"2026-06-28T12:18:07.538323Z","last_seen":"2026-06-28T12:32:10.763586Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@popperjs/core@2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-06-29T16:51:02.184033Z","times_seen":11544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj41 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.03651668321727164] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://stake1401.com/","line_number":10419,"column_number":15},{"level":"error","text":"Failed to initialize CryptoDepositForm:can't access property \"style\", this[_0x468b96(...)] is null","filename":"https://stake1401.com/obfuscated.js","line_number":1,"column_number":82434}]},"http":[{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.Dx4aolSc.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.593Z","timestamp":1782649883593,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.Dx4aolSc.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":509,"mime_type":"text/css","magic":"ASCII text","md5":"d584eac440ed0c81f771d78afbb9b7a1","sha1":"b4432952bae7105442db65f08996143d18c0b177","sha256":"ef72dd8ae27905d2873e47bd3a2b73ba520f4ffed9c998db74ed34111097d939","sha512":"242805333ab8299fafe9f4f1c9669b17b24ae1161b1eca648d456ea67c21d91787cc3cb66a56af29a706a9f819e7f5828dcdae98c52659fe5c398c99f4de6d32","ssdeep":"","tlshash":"fa21f4406032387f99b2536eb3ef0285b5eee6f26d189571bb9502130fc1b78572894f","first_seen":"2025-11-02T11:26:19.604984Z","last_seen":"2026-06-28T12:32:10.739503Z","times_seen":11,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.Bgmgmx06.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.632Z","timestamp":1782649883632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.Bgmgmx06.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 56\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56,"size_decoded":263,"mime_type":"text/css","magic":"ASCII text","md5":"a437a6b810b3d72444245e5e8236b83b","sha1":"b95bb10ff5f4c78eb9897ccad928acb17f85ddfe","sha256":"5bdc9348f4baa5454ca8917d8d96b692b7b50e085702aac2bed101282b2d6f16","sha512":"6e0a02d32184e6012c2995de6b65ac9fb471fbaeb8130a469ba5af65fe0040d300fb5ce1a9b873d4ba30b75545dc242434d46c14452eb1482d3a9ee0026f2c6a","ssdeep":"","tlshash":"2b900251f417243f562256312d1134889148d47dcdb6418c2104244521d5ca12221560","first_seen":"2025-11-02T11:26:19.618957Z","last_seen":"2026-06-28T12:32:10.74013Z","times_seen":14,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":328,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.BhNiE_GF.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.588Z","timestamp":1782649883588,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.BhNiE_GF.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4027,"size_decoded":853,"mime_type":"text/css","magic":"ASCII text, with very long lines (4026)","md5":"9dd0e833df216773da634bd07862f5f4","sha1":"e305f74fc3b9dc9f08662480113afb8c1285a41d","sha256":"e14e06fba60a01da0c54e0483ae1ae9bbb7205a703809dc3f66821dee09caa3d","sha512":"5eea77ca396a5b97d876783d1c0e2882e74b92536726873231a90f4ceae3596c1501ce96806687df744556f598202ba251f86f3edd3858e4152860cc9e5170ed","ssdeep":"","tlshash":"7c8163813a809a1e753b9aabf2f6b1acd3cd94a6ed501dc683b114461ee7e6902d090d","first_seen":"2025-10-05T12:06:46.815667Z","last_seen":"2026-06-28T12:32:10.7408Z","times_seen":17,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.D9HINTIz.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.617Z","timestamp":1782649883617,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.D9HINTIz.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":438,"size_decoded":509,"mime_type":"text/css","magic":"ASCII text, with very long lines (437)","md5":"bee9d0cab49a5a1fcd8be244ed3f7e6c","sha1":"0eaee73f512e7d351b4e3b2fabf8980f568b4fba","sha256":"1d63a990bd7ade498c1a0e2638165e6a48383dc194b0af9000d2d0850b0ee543","sha512":"b3deb89ba78dac4ebf7480de10aa81a4259878cdfde5235bb13d2d6a45618246b29012740efc66dcdd99bcf250963473030f5ffc64d4bbf18786fd9a6bdbab97","ssdeep":"","tlshash":"7cf027112a50b23c8c36e2a17061b28ee1f9d089ef6713dcd638622542cfe801731a98","first_seen":"2025-11-02T11:26:19.646348Z","last_seen":"2026-06-28T12:32:10.741367Z","times_seen":13,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.bbtoqomi.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.622Z","timestamp":1782649883622,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.bbtoqomi.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 43\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":250,"mime_type":"text/css","magic":"ASCII text","md5":"efd3aefa0c6544f24eda3406f1b806cb","sha1":"8a629500304981ea2db489fbc9c721e733b6bc0a","sha256":"c3cdab3787031fc24db96004985c505f5ed687f8e35f63d67518d6a290d719e9","sha512":"1fa13044356fcb45dbd7e46ec0133379820d50fbcd90ec48c076ff7c330bdb85dc787b90bd14eff481d4d401d780adb04f4e84ac5a5cba1f60338c1cd8313aaa","ssdeep":"","tlshash":"28900205131036044502806d34d4c2034ae505641b9341482af21015260b4029600d84","first_seen":"2025-10-05T12:06:46.461478Z","last_seen":"2026-06-28T12:32:10.741902Z","times_seen":16,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n7\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.462Z","timestamp":1782649884462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/2555e1/00000000000000007735e603/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n7\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stake1401.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 45288\r\netag: \"169d2d16f6b4b65dcaf58363207d6e004c4e3ddd\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 28 Jun 2026 12:31:24 GMT\r\nakamai-grn: 0.0f772117.1782649884.cfa1749\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45288,"size_decoded":45670,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 45288, version 1.0","md5":"4eacdd57c2f0d31336168d40481c7748","sha1":"9c5c1ca12ddd44f0875ecd55f52a883df6783867","sha256":"c3783a49f4af28eeeb3fc1d88b165e579d9ed111a95877279ffabc5d813e9e46","sha512":"f3c5457dd05068b7e519cd918165b1da75a056b7457c6910da0abb089553301aaa234606ce95daf93ece8e3603e607de45f5ce204f669b8685c881b30ca9344b","ssdeep":"768:6vi4AeRHrJiFpdDARAdu1lfv3aHQgHc8k0T8v11gLI5SY1I/3f8se2aGEGTQMnk4:6qbgiFp9ARllHPIc8gv1GcNI3Re2aGLP","tlshash":"7a130283edbfc737fc340676dc596879aebbcc403924281972ca6f08454d59b4962a81","first_seen":"2026-04-21T04:28:07.140009Z","last_seen":"2026-06-29T09:37:23.3125Z","times_seen":161,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Stack.CcbastPI.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.592Z","timestamp":1782649883592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Stack.CcbastPI.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4601,"size_decoded":881,"mime_type":"text/css","magic":"ASCII text","md5":"7c60a105521d8e8d12f3bb2ec1f25dbd","sha1":"46afb789fa9b3938fc87b86607574c7905012283","sha256":"197fb1d2ad3a297deaf5ba215cdc8df2c8710defdafb56ab30273b75230420a8","sha512":"1ca2d35fe4d7ff7e0d044cf3f21f01fb9215e86175411fd55f8bb4336cbc4e1202b2954294ba1ce9e5d7ea7fa8efefe3726e263617671137ef2044382cb86043","ssdeep":"48:LnDPo8gt1gFmogPkJKvQaOiJ1zPcKNSbkiJEivqXim1uz5i9:Ln2zKKoembkiJEivqSm1uz5K","tlshash":"1691b1312aa15e6cb97d56a5f1fe786cf3cc30c65c142ec4e7a210863f859ef6258d08","first_seen":"2026-04-21T04:13:56.624885Z","last_seen":"2026-06-28T12:32:10.742961Z","times_seen":10,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.BbxCpUtF.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.594Z","timestamp":1782649883594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.BbxCpUtF.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":968,"size_decoded":544,"mime_type":"text/css","magic":"ASCII text","md5":"3ea2e981ec34691ef34d4ceae59c776f","sha1":"8857f433a77d1fde25f460854821f268728819fa","sha256":"9d9894d108071d272baefdcdd30ed5cfeb2ba590db621f6c79601ccc1bf4f59b","sha512":"b9c7a2378746a1994ed34dc3e1681337e627ec847def36ddc31a91c0d1f1d58b5c6c4bd93d920021f52904c456a59df37f708cc0081349404a38608aa2fd0ae2","ssdeep":"","tlshash":"a111b2402b728d6e15f950addb3e915cea8d10c36f090cd8b754605b2f087f54673a5e","first_seen":"2026-03-31T19:47:29.470746Z","last_seen":"2026-06-28T12:32:10.743461Z","times_seen":15,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.KN1xna-B.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.598Z","timestamp":1782649883598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.KN1xna-B.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1405,"size_decoded":712,"mime_type":"text/css","magic":"ASCII text, with very long lines (1404)","md5":"0cea9cda36bb71789b805fdfe9aeb0f3","sha1":"c20c9ef36c58a3dbb4148def9ebcebd25971ccf1","sha256":"66f6f26f8a076c1cd53cc26ae9cbabdebd8f65b729b82703c7443f6684ff8830","sha512":"fafce0abb202338bafcc7f0264116caec24d1469bc47c9dae2ed6b9facd1420bdf9e8b9f792eebc56fc9e2a1bbfc155a582a9c47851a934ced668611883294cd","ssdeep":"","tlshash":"a9216858db58b43c1862d115b6f60bdcc6ad92a0fe33048e73b9a16516d7ee107f5488","first_seen":"2025-11-02T11:26:19.651516Z","last_seen":"2026-06-28T12:32:10.744017Z","times_seen":13,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/2.BMWsPgQ5.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.609Z","timestamp":1782649883609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/2.BMWsPgQ5.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 11 May 2026 08:34:26 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32314,"size_decoded":5734,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (395)","md5":"635ab8fffc0658118a6f2217baf9d53f","sha1":"12bd73228b7bda0bc6a244cb87fa8b4f0c3dc148","sha256":"5df2ed1badf1d975cecb64ae11f982e1e7f0de396c9320ac46d6c0d2af90e3f1","sha512":"1dfb7c882dae2ea4890eb9a788c6caf757440cbe5f331945690b5f4eabfebf54b96d1e0e320b1f0a27d40c818ce2ae578dbf0647f2e6518dabd906214830f9b7","ssdeep":"384:+EPrikKDHzAsDNDS4sgkaDIoQRG/2jqu0BW:+EjLUc4SiI9MY","tlshash":"3ae28340b57369bc1c37923e2fbe560cf16c60c3ad2a98ec7b9922050fc57f96681e94","first_seen":"2026-04-21T04:13:56.313276Z","last_seen":"2026-06-28T12:32:10.744536Z","times_seen":10,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/13.ulMZLrqz.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.630Z","timestamp":1782649883630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/13.ulMZLrqz.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 152\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152,"size_decoded":360,"mime_type":"text/css","magic":"ASCII text","md5":"80a1e3b94b4e3601105e611d35a6be8a","sha1":"daed0779fee28faca211e4f2f87d439d006b837c","sha256":"e7c00bd95a27de0e9098e1cda026c8cab4ada055404b2a935296c2be5d35caef","sha512":"a17933da5c2089c9f74c62e349f2b9620b97b8b9a663945d6c2864b8dda6503bb9799486d093a12de371a96a2dd22c878c0b81ddc494c0f62ffbf8f2f1eb0aa9","ssdeep":"","tlshash":"2dc08c6a102c0c8a10a70c7cb9fba31e4ad601623fa708cc77e1ce587f0ab260320c12","first_seen":"2025-11-02T11:26:19.693502Z","last_seen":"2026-06-28T12:32:10.745077Z","times_seen":14,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/tippy.js@6","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.713Z","timestamp":1782649883713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /tippy.js@6 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 59\r\nlocation: /tippy.js@6.3.7/dist/tippy-bundle.umd.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a12cb54d4ff756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/trust_wallet.31XE8zce.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.739Z","timestamp":1782649883739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/trust_wallet.31XE8zce.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":764,"size_decoded":638,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"517421098f89fff62c784fdd4dd650e1","sha1":"70e8dc6ce06675521e7bb6e1f00dec538cd536e4","sha256":"11d87e612deeff624ddd4b77f827bf857cb7a4d981783523854efee98a870943","sha512":"ddf39642aac96ff073b19e5f0534ca4d78366714b8441963a832dbe25375cb375030cefa5d21e0612427a1a0f688e7d6cb8721ba8378abb4501eade5ef785206","ssdeep":"","tlshash":"840110e7720add17d10ac61dc418b072315280bbadc98391e2a4bf5f2d29ac32c0e7ec","first_seen":"2025-08-14T23:01:38.878145Z","last_seen":"2026-06-28T12:32:10.746107Z","times_seen":12,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sanity.io/images/tdrhge4k/stake-com-production/ab8625d1dafda62c2ff9f0fe55b2948e20cee612-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format","fqdn":"cdn.sanity.io","domain":"sanity.io","tld":"io"},"ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.823Z","timestamp":1782649884823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanity.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:8E:04:FA:7A:E8:3C:E3:65:0C:EF:9B:20:BE:E0:B7:35:28:DF:31","sha256":"EC:EA:80:B1:76:4D:5A:2A:21:4D:14:C2:69:9B:19:A6:58:1F:CD:AD:62:43:D5:66:C9:8C:AA:47:AB:3B:F9:AB"}}},"request":{"raw":"GET /images/tdrhge4k/stake-com-production/ab8625d1dafda62c2ff9f0fe55b2948e20cee612-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: cdn.sanity.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 6890\r\nsanity-inflight-current: 0\r\nsanity-inflight-limit: 200\r\nx-sanity-asset-storage: gcs-default\r\ncontent-security-policy: script-src 'none'\r\nx-content-type-options: nosniff\r\ncache-tag: dataset-tdrhge4k-stake-com-production,dataset-tdrhge4k-stake-com-production-asset-ab8625d1dafda62c2ff9f0fe55b2948e20cee612\r\ntraceparent: 00-7001e9159e61bea4e3825100b736e33f-4f3d21c67f3c46dc-01\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nxkey: project-tdrhge4k-stake-com-production\r\nx-varnish-age: 0\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ndate: Thu, 25 Jun 2026 06:39:22 GMT\r\ncache-control: public, max-age=31536000, s-maxage=2592000\r\nlast-modified: Wed, 31 Dec 1969 23:59:59 GMT\r\ncontent-type: image/avif\r\nvary: origin, accept\r\nage: 280323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6890,"size_decoded":7780,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3aab8fbc9b6ab3f5b7997929777cd0fa","sha1":"0656b678ed8ced0c4680aadb7fa6e187f36838f0","sha256":"7969c4a8266294e83afd1f9fa845b2ab5ab0ca63df0191029e5df6c46e06ad23","sha512":"899e1a7f8a540f3c7d7b6ce77f1036255fe70236209d82e535631e7d6d6920bbd35a28f972d28dca84c2642d921fb0c118f609834a5a879c8752be605723ec00","ssdeep":"192:rGs6pXWdlYu6JgB1pG/mbOrjv9erTDhg/B389VlINYJPR9q2:r+JOiJCZbMv3/BsTsYJPW2","tlshash":"97e19e70f3840635dc59dc3a0d954f161470f27139a29221eaa77eaa04d1b3afffe811","first_seen":"2026-02-01T22:37:35.802182Z","last_seen":"2026-06-29T09:37:23.338696Z","times_seen":78,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":15,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.QazOg0qX.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.608Z","timestamp":1782649883608,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.QazOg0qX.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756,"size_decoded":491,"mime_type":"text/css","magic":"ASCII text","md5":"55827c23c2fa9db8c5f8da3a2872e881","sha1":"db36b118198caed6919a659ced7a3bd547528470","sha256":"259d0c0fd2bf22aba29b3d73d06a93620e728f17e4c16bdac94b46d5a94e5fde","sha512":"7a2fb9c8711e849423096b2945772e6ee84c357bae56f762e61181450d4cd3a300cb040a1fdb94d721612a4c72e0c6928d78cf8f9c4c8d419f04648e140fbb37","ssdeep":"","tlshash":"64016d543ba62aac6039d43e4f782958bb3d55c35e1988d13fb075410f4e8ba7742ac5","first_seen":"2026-04-21T04:13:56.554794Z","last_seen":"2026-06-28T12:32:10.747154Z","times_seen":10,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/DetailedCurrency.DY2yVi7S.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.614Z","timestamp":1782649883614,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/DetailedCurrency.DY2yVi7S.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1071,"size_decoded":611,"mime_type":"text/css","magic":"ASCII text","md5":"5ad9ee7475f885b705f3089611158adc","sha1":"f55ff00f5973fbee4a243449feac58d7ffe0e931","sha256":"b62527c635cd81878a2c37a8be70a1c02cee2ab197419443804c530e8acebbdd","sha512":"1c99be22e37a850b05b558de648a57adc5a1bed6c1ea4d01d52209a34e88759a296f6dffbd56a447f9537af1d5d3366abe8d4887963af38bf9e6833665c93e1e","ssdeep":"","tlshash":"f111c00125332ebcda33892c6fed1108a45857cbce95f9c87b60460d4fce4556b52fa4","first_seen":"2026-04-21T04:13:56.351775Z","last_seen":"2026-06-28T12:32:10.747628Z","times_seen":10,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Racing.BHrOmdXk.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.618Z","timestamp":1782649883618,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Racing.BHrOmdXk.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":438,"size_decoded":507,"mime_type":"text/css","magic":"ASCII text, with very long lines (437)","md5":"88ad443a62ebb9298c27dd375c4e15be","sha1":"a4182948e27e604bfe95691996b4042134713c74","sha256":"daa27b1cddd10edf9d508b59c4b6a37a5e951c992c57a8bb5bb99678899f955b","sha512":"9d6e24533a4dc36ef03bb9a5e3b90bd2d1d6be16f4cd8d5167390e1171a38e74af631e6ea479707542013e89f3fd09beb74e15da50ab4e365bf564c0cebcbdc8","ssdeep":"","tlshash":"f6f05c212dc0b63c4c26e2e1f061a78da1bec0c9ef6712cc96386256cbdf94207318dc","first_seen":"2025-11-02T11:26:19.689114Z","last_seen":"2026-06-28T12:32:10.748082Z","times_seen":13,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/active-casino-mini.C2xccerq.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.744Z","timestamp":1782649883744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/active-casino-mini.C2xccerq.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1352,"size_decoded":915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7fc597f92a408b02fb807b58ed338ca","sha1":"ff9e99864f60791ac3e259df0792a49bf02c70e6","sha256":"9220abaa52cdde048313fd75250aad2e7752cfbd5c1dd2bbe75e4aa1da832263","sha512":"80202593a0681ca3afae44d11db0a75e36c327f667154dd1e56cd7a8c3b478ac42678739ad7bafc5dd52e53f910ee4d387455226b0d80d0d3cf3f8a5ce9df4a4","ssdeep":"","tlshash":"3821353682ee5816f169d3c89f6c1a467770a443c550d590b8ed7e6edf395c1080e7b4","first_seen":"2025-10-05T12:06:46.633554Z","last_seen":"2026-06-29T09:37:23.381426Z","times_seen":149,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sanity.io/images/tdrhge4k/stake-com-production/0b91c0f66eb9f58a4de9ac42851c4251a1cd1f6e-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format","fqdn":"cdn.sanity.io","domain":"sanity.io","tld":"io"},"ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.839Z","timestamp":1782649884839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanity.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:8E:04:FA:7A:E8:3C:E3:65:0C:EF:9B:20:BE:E0:B7:35:28:DF:31","sha256":"EC:EA:80:B1:76:4D:5A:2A:21:4D:14:C2:69:9B:19:A6:58:1F:CD:AD:62:43:D5:66:C9:8C:AA:47:AB:3B:F9:AB"}}},"request":{"raw":"GET /images/tdrhge4k/stake-com-production/0b91c0f66eb9f58a4de9ac42851c4251a1cd1f6e-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: cdn.sanity.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 5624\r\nsanity-inflight-current: 0\r\nsanity-inflight-limit: 200\r\nx-sanity-asset-storage: gcs-default\r\ncontent-security-policy: script-src 'none'\r\nx-content-type-options: nosniff\r\ncache-tag: dataset-tdrhge4k-stake-com-production,dataset-tdrhge4k-stake-com-production-asset-0b91c0f66eb9f58a4de9ac42851c4251a1cd1f6e\r\ntraceparent: 00-796c55f623cac1dd671bb6a56d8df8f8-c156a69443d59a95-01\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nxkey: project-tdrhge4k-stake-com-production\r\nx-varnish-age: 0\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ndate: Sat, 27 Jun 2026 13:05:21 GMT\r\ncache-control: public, max-age=31536000, s-maxage=2592000\r\nlast-modified: Wed, 31 Dec 1969 23:59:59 GMT\r\ncontent-type: image/avif\r\nvary: origin, accept\r\nage: 84363\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5624,"size_decoded":6533,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"96ad7c6f197287023058095867af3efe","sha1":"0fe12a77042b7315273b1f346b6a51a652d69976","sha256":"1aaf5f49ff6250d189763b37007c9ec856a1928a65fed387c84058f80d574872","sha512":"d3cc6500752489230d4e7496cbae8d2ee02c1e34fee3330b65bcade637646102948c23d7906e3f1e1cb99b28324bc7c2f5ca63432d53ba964b9c261c2f9c76c4","ssdeep":"96:rGAAUlzpn6gAu4O/1mD4OlXJwXjRE/O+FgFDbWu/C6YW5HtTciFNZbCG0LpVkEwJ:rGnUFWwcD9XJwXjREjIWqR5lciFN1CLK","tlshash":"01c17f5621a53c1afc4cc270c69537caf352ed16bbb2ba5ac3191139c694bd1e0c34b6","first_seen":"2026-06-25T05:49:42.978073Z","last_seen":"2026-06-28T12:32:10.749006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":16,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/73318f9e220e1637c4b11338d10f377cd997d0232636f5f5a1940167ad0451cd?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.866Z","timestamp":1782649884866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /73318f9e220e1637c4b11338d10f377cd997d0232636f5f5a1940167ad0451cd?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 7dcc3d88f57f989fb75892fce63a28f560e05b09\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Jun 2026 09:39:21 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1565522\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230144-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15412,"size_decoded":16043,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b116df57f901e90ecdff7b41871b6cf8","sha1":"911cbe354c5224b1debe0a7aed80478bcccb56ac","sha256":"d722a3e787c2dd005c583db09c7d22419cdac19d45e418d5422c3cd04f5d58fe","sha512":"f14efa1d58791c9874b0530e7dafa7b24f8fb9b64132e44f957042a3f1cbb6d9407be0e63601d06ed95d5ce2d657a81f8f9fba6732da7aa9d9c521bf6bc87f00","ssdeep":"384:wYNg7QkqYp7/RHupYebiIHlIXT+pdeNgqwH79:wYyiYB/RO3xQodeNyJ","tlshash":"d562d0741ddf9272e55bdb3890f42ba43662b9216a113e412fbd977c0cd42d16ec432b","first_seen":"2026-06-19T21:08:02.111156Z","last_seen":"2026-06-29T00:10:56.074469Z","times_seen":31,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/bbe0383f83f2e71badab4b10933267b48ea655c522873a74ca22059d36b44220?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.866Z","timestamp":1782649884866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /bbe0383f83f2e71badab4b10933267b48ea655c522873a74ca22059d36b44220?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 05a887f68e742d058b6e76f468eec1dbcf442662\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Jun 2026 20:31:36 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1526388\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230213-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4911\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4911,"size_decoded":5541,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"439b6315613eb2149baf68ff5c20ae29","sha1":"2944dab6a2daa0ebdd3f03db1d724a044a75a63f","sha256":"f4365a8396bcc0d136623e5091a18ab22889d9274bef4f18714a04ea2eae6006","sha512":"479f33d3b7e1b8eda6ef92a80ea870c99ee73f00b4278f5a6221606446e2c9320ca96df2fd921625df505d1c35e06c9322c46131dc882c49b05fa57b288e3b85","ssdeep":"96:+NLv65N26MT0D5MdtbZPAVwzVEl4+WDCZN4YVU:+Bv6oYNMtKwQkDVMU","tlshash":"32a15c79ff9b9267fa61d77464f22bd5b2a1333cd33225982014b61601404d46f8f09d","first_seen":"2026-06-26T22:39:15.547218Z","last_seen":"2026-06-28T12:32:10.749996Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.BSrLgpgY.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.602Z","timestamp":1782649883602,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.BSrLgpgY.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9542,"size_decoded":1994,"mime_type":"text/css","magic":"ASCII text","md5":"25bcfb262e3be443dad795bc0f8cd98c","sha1":"f684a5483f95d576cde407b8dfe596561480a6b0","sha256":"389daa8212d9a5afad506fcd1ae4403b47ef80d6b1069a8d1b5aed29d857c6b0","sha512":"4c0494590b47b3b89a44b432e4b2fff9b77e29f2d1be69e3ac7125955ce059bed0cdb8364f3de53f7a66d6be036d2c2d0b5483cfe4ba6db0f96a00578ed0fcb4","ssdeep":"192:T2DZ7iL9zw49Y5sh0yprieoefvi4c4j3atxwJY:/D3TaH","tlshash":"5912df48f5629bf96c335b3c17feda497a8871d36c0647ec3b9842014fc66fa6360a85","first_seen":"2026-04-21T04:13:56.553513Z","last_seen":"2026-06-28T12:32:10.750496Z","times_seen":10,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.C_p7iP-M.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.646Z","timestamp":1782649883646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.C_p7iP-M.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":792,"size_decoded":522,"mime_type":"text/css","magic":"ASCII text","md5":"a8e68368e0b211d91287505a1e00c054","sha1":"8a0b7f89ce6e04ea3696e3f93a11d7885479c5ca","sha256":"64741a9647440d0990c320b020cdd304574e0c79316c2a89e53a6a428690babb","sha512":"f2bed8a8c4265b561502ca38fcabed313a312d2fa27965b0182f9f645c8b129ef8d0520858db52589ac25987fd011c8ab6e42f1d19c3853f6bd64bd354d0f62a","ssdeep":"","tlshash":"bf01db40a5b1faf81fa7a03c7fad460df65c10978e1ba6cda742e0085b8b7e05784db5","first_seen":"2026-04-21T04:13:56.354391Z","last_seen":"2026-06-28T12:32:10.751074Z","times_seen":10,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/0.QusslWcE.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.568Z","timestamp":1782649883568,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/0.QusslWcE.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 02 Jun 2026 22:45:24 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155457,"size_decoded":26704,"mime_type":"text/css","magic":"ASCII text, with very long lines (826)","md5":"fb34772804a568fa34c0b2fd82e44c25","sha1":"525f05df5a1a2fee1aaea45940e678cab03279d0","sha256":"1d3e0714abf30d78bb3d7a73fe04bfadb6aebb663055e7dc4cb6503bd1a5ad34","sha512":"fc47744deb322154eab552738fec435a26d240d08183ae07a38f4610d83457a5244d9cc2fe9d94526c47658c6f5d640cf29248b811a0e9abe144afceead087cb","ssdeep":"1536:sfy4fY8DkEMw+M24CNlfi9GkxpVjYQdEgEEX7zQPkxmAAKqGY2D1Te35ISw80Sri:8jZ6M24Ilfi9GkxpVjnTH8xri","tlshash":"4ce36098b1b281b57c37327e5bdea54e3224a087dc1ddeda7ac960308fc83b65ce2554","first_seen":"2026-06-28T12:18:07.350293Z","last_seen":"2026-06-28T12:32:10.751664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":85,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Bubble.DN9vKE42.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.587Z","timestamp":1782649883587,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Bubble.DN9vKE42.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1059,"size_decoded":637,"mime_type":"text/css","magic":"ASCII text","md5":"91c31c54b3fdc6585433a633c2cec6ff","sha1":"9a1b4be6c1bf197046a6354970a486abccc1fdcd","sha256":"380dcb4b1290c0dbbe7a82871edd3b2221f6781397af43970c401454e2188184","sha512":"86bd610145c7540b2a1f64fc4d24b08e20f8de79c97a468dff7d6bd022391dafe024b1bec84cd84073c64b2ac4a9e7513d90a518ad4cb40b06d07b6c5ab5a8a8","ssdeep":"","tlshash":"16118036ec56049d487bb9262bed424963bd51832e3b0e6ebf1dc6099fe04f95241908","first_seen":"2026-04-21T04:13:56.521371Z","last_seen":"2026-06-28T12:32:10.752327Z","times_seen":10,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.kick.com/api/v1/static/images/d1ab9e4b-f335-46ad-a085-0fe564f8b9f5/icon.svg","fqdn":"web.kick.com","domain":"kick.com","tld":"com"},"ip":{"addr":"172.64.235.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.703Z","timestamp":1782649883703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 May 2026 01:58:22 GMT","end":"Sun, 09 Aug 2026 02:58:20 GMT"},"fingerprint":{"sha1":"D1:09:BE:12:68:8A:5F:37:0D:54:23:49:58:46:EA:35:EF:B4:A1:22","sha256":"62:AE:C0:D0:B9:1E:61:C7:FC:58:96:60:DC:DA:AD:CB:85:E7:D2:A5:5F:C1:AA:C3:70:C4:55:4D:C5:C0:BB:BB"}}},"request":{"raw":"GET /api/v1/static/images/d1ab9e4b-f335-46ad-a085-0fe564f8b9f5/icon.svg HTTP/1.1\r\nHost: web.kick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qx3c8xTcz4%2F%2B7USslwsasDMjwUehNW3%2FeQlqUUTEjZ09ab8SlfZCXZawmUSV7JQY1R%2BJ5TM435JKN43YO0WaFIRWZ2ibMmWDYJ1Z1SNlTNE7KCAwwtkEg%2BhXTVo6Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4589\r\nlast-modified: Sun, 28 Jun 2026 12:01:20 GMT\r\nexpires: Sun, 28 Jun 2026 16:31:23 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=pwJps6nix8_FJ2D.IdFyuTbph4kvYOapcYDlOy8L2J4-1782649883.7691786-1.0.1.1-tPhwz9DbLtotmiIP8my2UR43nAIYNYP__yBxR7Lr5FEhgKmpijafGBIo6pALg7dPcTMwkakQ.eFRLdGTn9WZhh7DGNC9fe5NJ1HgpYZXRBfJbV4htUJPtxOdnYTEi8uA; HttpOnly; SameSite=None; Secure; Path=/; Domain=kick.com; Expires=Sun, 28 Jun 2026 13:01:23 GMT\n_cfuvid=pd4hKc.HN3Yy.TE4NNGrgRVqfd0M_ht1RGKyPJFX704-1782649883.7691786-1.0.1.1-iRfRqBnmTBJ3i.2gj3sFhdicxPKo0vpRggvB444IPJM; HttpOnly; SameSite=None; Secure; Path=/; Domain=kick.com\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12cb54d8a7a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":1257,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d193308c52dd8d039ddbc4a471feeff","sha1":"56e81920b3ef98349a8f5658815fab2ee4037fd9","sha256":"60d20c34efdd7103c273f54369cfc42c6d0a39126ce22298f2d31924b4ca5a56","sha512":"2212dc9951842158e6745c3d17fb752387a1108c4f20ea39cce510830c4e598f2dbfa6ad994770a178413993b2d7f8482ca7e04af2ee2eda90849f259fd7153c","ssdeep":"","tlshash":"e0a0223ce00c8800c308c23028b00802000fa003c280008fcac0303a3008ce33c2023c","first_seen":"2025-11-02T11:26:19.657443Z","last_seen":"2026-06-28T12:32:10.752901Z","times_seen":18,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":37,"dns":0,"connect":1,"send":0,"wait":12,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/active-sports.CxIU50TW.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.741Z","timestamp":1782649883741,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/active-sports.CxIU50TW.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1036,"size_decoded":823,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6c9d74b11362d52713c2e33141b1b8e","sha1":"51bcd009ef2cf5abce26e3ddc3d85d7e278032bc","sha256":"15f02881fde7a5a360d224942c291346282c937cbaf810dc9315d9b057d0857f","sha512":"ad96453dc6fe1e87ba8b9c371ed74b8207a9a54fb6f857c39cc2838d6696b1f4376ea39a35b5dd7a7ad09b36ca383e89eae93fc2497e51cd7f9038a856356e50","ssdeep":"","tlshash":"d111253ac3995476f4258385977896813730d043c240d5c0f9ed7e58df249c1180f7f4","first_seen":"2025-10-05T12:06:47.140978Z","last_seen":"2026-06-29T09:37:23.470608Z","times_seen":148,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/tippy.js@6.3.7/dist/tippy-bundle.umd.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.814Z","timestamp":1782649883814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /tippy.js@6.3.7/dist/tippy-bundle.umd.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a12cb54dd88156a3-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 65237\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 28 Jun 2027 12:31:23 GMT\r\nlast-modified: Sat, 23 May 2026 04:39:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:Pw/nDrJszyj2iHoZLinTjdfvfC8HmnMwStQt3HvtN94=:\r\nfly-request-id: 01KQK9JW2N036RT8BZPAZ3EPD0-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25717,"size_decoded":9445,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25667)","md5":"be40939a1df8aa4cec53fb6ae572df26","sha1":"189159143337e0bc08ce30b8b8a59a5e935335fe","sha256":"3f0fe70eb26ccf28f6887a192e29d38dd7ef7c2f079a73304ad42ddc7bed37de","sha512":"81baeeb9cabf3a9c7d8e51dfaaa65e020d8b34add8e016e95c72838510bcf3fb4044bfe2ccf384e19b76c3a5fd4a7d547966866cbdfccd6ee790bda3767e4923","ssdeep":"768:m4OeYE0+LOdORk89IOlyOdh5+3W5FEounZt/2ozZ9+Hsyhp+JjOtkq8Ggrj9cFQP:tAVYem5s/2PHFhpa2XgF","tlshash":"dbb2d699f69171791b6b2176c06f9619727b396d244fc420f033f0c82c789ae629bf2d","first_seen":"2023-03-07T12:03:05Z","last_seen":"2026-06-29T19:28:55.907359Z","times_seen":3989,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/DetailedCurrency.-EBrAbqF.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.589Z","timestamp":1782649883589,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/DetailedCurrency.-EBrAbqF.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":728,"size_decoded":526,"mime_type":"text/css","magic":"ASCII text","md5":"417b1ecc153de86097f0b4ad84bd8c39","sha1":"56befb9bdfa8fb235e9cf938a6dcdcf66b6704d2","sha256":"1e5100af0ba66daba85313c86a24fdbd17dd64bdf62e2c7c81af9c5e44554008","sha512":"f209dab0ac2b078e111b61612adcaa050a5a2f082f6f2e6d81425b99089c3e51f231d739e22bf4433cf2073e65ac9725a145dc38d92cdb1e3050e576360c5425","ssdeep":"","tlshash":"d0017084123356bccd33490c1f791509916d5ac7694cf5d43ae1d20e0fce5dabe52faa","first_seen":"2026-04-21T04:13:56.566083Z","last_seen":"2026-06-28T12:32:10.754504Z","times_seen":10,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.DALjiuqV.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.626Z","timestamp":1782649883626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.DALjiuqV.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1607,"size_decoded":735,"mime_type":"text/css","magic":"ASCII text, with very long lines (1606)","md5":"163d19904cba0f3d5c35ebe841bd62dd","sha1":"69f37ad396769083a70673ac5ab9e8b6a5f57c02","sha256":"fa2bb8da31419d03a4c694c67ea9eb11117d4f2a6785bc5daa554433a19c1488","sha512":"bd84390ee498ef478b8ebc75619cdc7e60cbe2fa665261aa4a127d88d58a4619cccd794a1f1be133278561b089bf9ca51ba847b178c9cc08a97138345a52884f","ssdeep":"","tlshash":"0b31f0749e0999fce731517e22a43408945ac8d1efd30dcc6b20d1a6fdc9ecb0ea156c","first_seen":"2025-11-02T11:26:19.593811Z","last_seen":"2026-06-28T12:32:10.755002Z","times_seen":13,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/323d8b0ff8f6749a76c49f2cccd09cab6db7da6510e51296fee2da086bcfb926?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.880Z","timestamp":1782649884880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /323d8b0ff8f6749a76c49f2cccd09cab6db7da6510e51296fee2da086bcfb926?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 2b2c41850e64446e9ed6e2dadf3cf3ed207c6b12\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 16:48:39 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1107765\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230131-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11391\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11391,"size_decoded":12022,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2dd91a20708d3fcda88f0660a2e50587","sha1":"8405fc50a6cd3050546f7f60db789804164f659b","sha256":"71bcb6c93f9fbb6433300bd53c87e3931c744d33789623777f5ac01d776f8d41","sha512":"4f624b5508587657809d2e3041bd1af61749c8e97671ed9edb234649dbed300c000b49a1c428b2b076592b563187da04168a6db3f0c349d5f19a0e8a50edaf4e","ssdeep":"192:+PUoYNMtKwQ89X0XC5k5ympJ8/r80T7bRioOuDwCD8kPaSkBfb:oYNg7Q89X0XO9mpyz5D0BHwPaSq","tlshash":"ff32bf3df277dba1f86489b528d1ab6143b2a73873117e43242d432c035169b4b9fc9b","first_seen":"2026-06-26T22:39:15.530507Z","last_seen":"2026-06-28T12:32:10.755569Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/d7fcd187d0b2dfe2686d1044255d745ef45fbdf0aa34d13e70d9b59b12e51c57?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.883Z","timestamp":1782649884883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /d7fcd187d0b2dfe2686d1044255d745ef45fbdf0aa34d13e70d9b59b12e51c57?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 9ad1a4698f53c8ea1d0aa38f8ddf91fc325fc9d4\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Jun 2026 23:20:00 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 911485\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230146-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12958\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12958,"size_decoded":13588,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e177b3009f5401a78dfad8878e0c08ca","sha1":"7eda99f5e0f10df555cdb26b5e62ac7633c5bb38","sha256":"3f3882bf1555702026f2c3d075822993840dc532e4671ae61b02e508d85d74b3","sha512":"7499a04c5417292f1e4181cc8506e621dda9688f237c0832f5c8abde4480b62cf4ab451fc9a4127f82ef22a44bb4ced41459ba62fab320fb07212855c0e14edc","ssdeep":"384:9YNg7QU5e2QAf0BcFcKE/XDqRF3jHIJFwC29WFA:9YyddvmK0TGFzHIJFwdYS","tlshash":"f242d1b62d31b3eaddd6c3bc3d809bf8b1a1762ee71205424c9d753452805e4e6482af","first_seen":"2026-06-26T22:39:15.506277Z","last_seen":"2026-06-28T12:32:10.756106Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/fced988e1628e3f05479dc6c9ee92bea34e003f6ad7eebb25b8e2fc7f46b3042?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.857Z","timestamp":1782649884857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /fced988e1628e3f05479dc6c9ee92bea34e003f6ad7eebb25b8e2fc7f46b3042?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 5036cfc10a7dc8853a31992f5c705369e542328d\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 29 May 2026 12:11:24 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2593201\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230187-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7746\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7746,"size_decoded":8376,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c1353f91a2a0ea9d74a0990a637ba219","sha1":"13fb5da7d8b6a1bd009a2716b5767b11ca54cfab","sha256":"13e7eccebbb2978b6dbd93ffad4b2253e4cf8b86991c1c3c14e00ae7873d9d3d","sha512":"9f8b476b1e85ff7fb295de562144c66afd80c97a0a581dd13251ca2ec29716686949f78353f1404d361d4c05a5ac8580c38974e30de1e939148d06b1de2a94a2","ssdeep":"192:+/UoYNMtKwQv10DoVVBOZA8VJNzC8NFxuYk5G:8YNg7Qv10DoMY8oi","tlshash":"faf19f5e7b3fcba2e416d63461f057aba1c32634373179443771b952e5047408b59199","first_seen":"2026-06-26T22:39:15.680876Z","last_seen":"2026-06-28T12:32:10.756587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/meta_mask.MidYxXzy.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.738Z","timestamp":1782649883738,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/meta_mask.MidYxXzy.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6163,"size_decoded":1559,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"faa5ce6e287dfbc8ec5844690ecd66d5","sha1":"d80d85f466eaafc6c5a0d346829452f836bd7d68","sha256":"1de8e03198a7956d80af9d491d2f3e6875657f64d78fba442d01bd13f4680f90","sha512":"c3c725204a6f36b301a013ecc2b43f522733f36921217dc1c9fea102b25517076bcaa5bac342414a6ee41c5763127ac14ea51236afd2df8c7c11d31c9087dbb2","ssdeep":"48:vVCLvNzAgiv+QIULbm8D8ir6ltwKuk+HhUNxvRB/NQksO/O/Gr/pACt/uvFdoNWv:twIvBL8aqUiQaRFWDWdIGTtvO","tlshash":"7fd19f9633442d7cfb374735f3063235902e2dd7269b6148ce322638465519eaa7fec8","first_seen":"2025-08-14T23:01:38.868255Z","last_seen":"2026-06-28T12:32:10.757103Z","times_seen":12,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/default-sports-mini.BJ4yNOA9.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.750Z","timestamp":1782649883750,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/default-sports-mini.BJ4yNOA9.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1351,"size_decoded":924,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ec88f73e89fc47b9068e424c78de4c1","sha1":"999e78314130f239d2f2ede373b47d5b040d700b","sha256":"297f82bbceab804b68b20dbc6f3dbec7a8aadfe1214c5a55e8fafed1af528ec9","sha512":"80d0622347c24014eea7a3c0c01066a3764970454a4cd3904cddbd42c12a045d83be690af2d66a2cab654754c7ef2230f9497b43bf3ca392099b5ff4633c4466","ssdeep":"","tlshash":"e521423682aa1426f02993c89f6c56813b70e443d150d490b5ed6a1def384c1080ebb4","first_seen":"2025-10-05T12:06:47.201607Z","last_seen":"2026-06-29T09:37:23.512427Z","times_seen":147,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":515,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/78aca8/00000000000000007735e60d/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n6\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.328Z","timestamp":1782649884328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/78aca8/00000000000000007735e60d/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n6\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stake1401.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 43644\r\netag: \"7041ec2613c91fc960d303818771b11489b1d187\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 28 Jun 2026 12:31:24 GMT\r\nakamai-grn: 0.0f772117.1782649884.cfa16d8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43644,"size_decoded":44026,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 43644, version 1.0","md5":"9aa99563d6db4bf349441e70596ef33c","sha1":"53e8c6c8b390d0aa5f8accac9c4faece4494944a","sha256":"ace9eecdeaed41ed36b0bbf92568eec2766b15cb4d1f7df87db87ca68a025d9f","sha512":"879dc3206f0161810ba6571d06e590a3ae9039a712d31be51cb32b638fd0c06047b5aaf5a21e069f214f63ac9fa177b2859822541bcbdc34d28ac946ade15303","ssdeep":"768:Eb8dZJJEBQOh9l43Qz9TuKyi+cYKyLwzZZ4HPNj903eiskCw3doDLgdg:EgjJSQ2Bz9ki+cY9H1K3eDktOz","tlshash":"c513f15858047937bab52bb946c4cdc41968f9f22d30a763c45661ecb1cb2aec7e3d30","first_seen":"2025-08-14T23:01:38.806009Z","last_seen":"2026-06-29T09:37:23.448904Z","times_seen":206,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":2,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/fbf4038ed2862c3503a5d39263d1321e8d9361d730eacfbb2403fd1e5894525c?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.853Z","timestamp":1782649884853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /fbf4038ed2862c3503a5d39263d1321e8d9361d730eacfbb2403fd1e5894525c?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 8153\r\nx-imgix-id: 773aedf5f84db3b406538d828139cdb9bd634eb6\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 18:30:02 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1101682\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230219-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8153,"size_decoded":8763,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3f7c8720270bc00187caeadb01b9d899","sha1":"f4d4d28bb743b8211fa9d30ee6c1b1aa32b12b41","sha256":"b05f988ef945c4888c64bd82ec48346a66dc80de57866204855a1cfb0c899714","sha512":"149a9ccdea29461fac78a75129c5e37a45db997f7f8ba09e835f3bc1b03af3629273e026961b002c8b23c607814d702696ee0d7a2e0c7aaba56ede9a8981d64d","ssdeep":"96:+NUU5N26MT0D5MdtbZPAVwzVEl3VuxMH+8kvmBnSE7MeVs+GOxpE+Fdu1NHsjA8Y:+6UoYNMtKwQYMrkvmcE7MEpb7uQQ8Wf","tlshash":"4af17d61fa1e7b71c866da7c95f85f5ab3d27a24c7526a033498fa0444521c0dfce48e","first_seen":"2026-06-24T21:09:52.191201Z","last_seen":"2026-06-29T09:37:23.444926Z","times_seen":6,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T12:31:22.862Z","timestamp":1782649882862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:22 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 19 Jun 2026 20:58:04 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]}],"data":{"size":1693468,"size_decoded":275557,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (30752)","md5":"49153782c6e188a8b808178934ea8544","sha1":"67b65d54cbf15e18b42344e0d3e5919ecc8998f4","sha256":"cea2ab18d1566f64caedd33f14af83b038a28521894b51f37bc5a7213873880b","sha512":"7d7d39802a645b175bd4f22e31321a37741462a16221e995ac98d9f8e53891363a23971ddf97b8e350680afa489cf9eca4f762c87371ece87c4206f635adf866","ssdeep":"6144:7MHS4sWBq9LJqbJr+d1tkeYI4GCdXGr821+7CxbtyJd02tMPkheHVYwVEyG+8Ei6:pWPjr7NgLz5FiUK0r3","tlshash":"38254c169500501f5013c4a8fa39791af25df8c7fe6e5488bedd83182fdacf2d26e698","first_seen":"2026-06-28T12:18:07.320134Z","last_seen":"2026-06-28T12:32:10.75912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":3,"connect":43,"send":0,"wait":85,"receive":134,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/0.CWn268MF.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.591Z","timestamp":1782649883591,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/0.CWn268MF.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 02 Jun 2026 22:45:04 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":322704,"size_decoded":40574,"mime_type":"text/css","magic":"ASCII text","md5":"35517909391bab1ac76b62046da11d7e","sha1":"ca332c0b0283f3195289ecf7af9da75ee7af2ef9","sha256":"add9fdba5feccfc06ba634b25f1ed658e5a42fe420329e39064253ac0507083e","sha512":"b6a8166301eccf35d3014a84d824b94e6411fa0c4d3896f6c41b699e96456a1a74ec435552394b0e214f36c38b65c1f2da5788bdac4b3407e17c911e43108fed","ssdeep":"1536:95o/KZJlfjGDDjr7P1KSW0QsWDHifmHz8VOzjqcbqmWrf2GamUJ4pFC71bEcd7VB:v0KSW0PaYOvqcbqZrf2GamUJ441t","tlshash":"6e64ff56e1b286f62d63707e1ade9a1e3278e0c3de2d9fd87d8c61008fc82f75961644","first_seen":"2026-06-28T12:18:07.412416Z","last_seen":"2026-06-28T12:32:10.759701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":98,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/active-casino.D98ZVQ96.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.741Z","timestamp":1782649883741,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/active-casino.D98ZVQ96.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1027,"size_decoded":824,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d41912628a01b929a9c1e3ebb6238b8e","sha1":"7d6e8f9b1083f3b4d5dfb76aaa827b755dc31732","sha256":"18e7f8047125f395997c5ed7f6f163b76f4bce516745b6b12ad7b958aeab4272","sha512":"b6ad711adc16e1147ce178f94bc1b404c3c6ab20e294b73bcdddaab4bb9b92a29da6ff58648de47ef08b994b68c7e05d3bf4f4ee71fd3de82656faf7d24efa94","ssdeep":"","tlshash":"23111825c3de542af465c288dbb85e817734d043c2549580b5fe7e59df349c51c4e7b4","first_seen":"2025-10-05T12:06:46.464903Z","last_seen":"2026-06-29T09:37:23.311595Z","times_seen":151,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/78aca8/00000000000000007735e60d/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n6\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.706Z","timestamp":1782649884706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/78aca8/00000000000000007735e60d/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n6\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stake1401.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/aba0ebl.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 43644\r\netag: \"7041ec2613c91fc960d303818771b11489b1d187\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 28 Jun 2026 12:31:24 GMT\r\nakamai-grn: 0.0f772117.1782649884.cfa182a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43644,"size_decoded":44026,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 43644, version 1.0","md5":"9aa99563d6db4bf349441e70596ef33c","sha1":"53e8c6c8b390d0aa5f8accac9c4faece4494944a","sha256":"ace9eecdeaed41ed36b0bbf92568eec2766b15cb4d1f7df87db87ca68a025d9f","sha512":"879dc3206f0161810ba6571d06e590a3ae9039a712d31be51cb32b638fd0c06047b5aaf5a21e069f214f63ac9fa177b2859822541bcbdc34d28ac946ade15303","ssdeep":"768:Eb8dZJJEBQOh9l43Qz9TuKyi+cYKyLwzZZ4HPNj903eiskCw3doDLgdg:EgjJSQ2Bz9ki+cY9H1K3eDktOz","tlshash":"c513f15858047937bab52bb946c4cdc41968f9f22d30a763c45661ecb1cb2aec7e3d30","first_seen":"2025-08-14T23:01:38.806009Z","last_seen":"2026-06-29T09:37:23.448904Z","times_seen":206,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/604e3c43ad800b29409cdab7a9914f81aa84bdb2e05e04c3cf8f797d8dce2cc9?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.861Z","timestamp":1782649884861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /604e3c43ad800b29409cdab7a9914f81aa84bdb2e05e04c3cf8f797d8dce2cc9?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: da5d39182cb837608e78c46ed8d45e4f40dd9c6e\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Jun 2026 19:02:45 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 926920\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220162-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15446\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15446,"size_decoded":16076,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2811d6d105f2d9c1680e0369176ffe3b","sha1":"84e50f92a8b1b623da0aa659f787544125168fde","sha256":"0cfb0190eda2f45fa567c9ed30199c513c6a3c8e974a92c6d802d96a68c6de78","sha512":"c3e9e69153df2aa8ba0ffc7d6c6a123e013a23a827510e2aae574e17b3cc30c3f3c26ba5badd3ceb66698acf8b0cf81e85fc26ee5d1d458a986cccb121e44a1b","ssdeep":"384:2YNg7Qr3/gmkKZpBm0mdh1DkpbgZhjEqnMka:2YyqKvseZaqnva","tlshash":"6462d0b4f3a9e9b9fd599231cc6223d6ada2f7dcffd02d805535a62c5d805406c8501f","first_seen":"2026-06-15T02:39:36.602166Z","last_seen":"2026-06-28T12:32:10.760743Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.BnPA9Q_H.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.604Z","timestamp":1782649883604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.BnPA9Q_H.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":481,"size_decoded":482,"mime_type":"text/css","magic":"ASCII text, with very long lines (480)","md5":"5da7a296c805e646f4baceed24bc6c3a","sha1":"01c89229f713a181f6e8a1d9383316b01e640d4b","sha256":"267659be1cda65e782bf62e3b66d706310dcf240eb2342c66b7c3a9fc4160d45","sha512":"c22f58f9c7148286bb9fedf26a86932604aa3041c01dd338bb66e258588a2edbf6d5cbe8b8c5213d2245346519eb0192d25e820095c9523f05eaed11ad87a9c2","ssdeep":"","tlshash":"f2f05e942b80ff2c49366866a29bb0ac9158654faf471dd94a1136571fcaff70b60404","first_seen":"2025-11-02T11:26:19.674166Z","last_seen":"2026-06-28T12:32:10.761205Z","times_seen":13,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/Content.BDpTp1Yd.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.637Z","timestamp":1782649883637,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/Content.BDpTp1Yd.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277,"size_decoded":398,"mime_type":"text/css","magic":"ASCII text","md5":"e078353ad7b1c29a6373e4d3d87c62db","sha1":"888ed6e40601cbfb3e916e27600afbc1605bd539","sha256":"23b4d55f1b9a95a7de47a7019010d70a265de8eb5f19e959e7ccf7d4bf4b827d","sha512":"9ea9316de175abd63505d6f6276ecbe5dc86f0c7ac430946ae550d3d261dd37560b790da9d451fe5e9b56b1392dc94f953f4c6382ab734cfc05c79960e8df5bf","ssdeep":"","tlshash":"20d0c2782e08fa3d8c3ed456d21636b980589208af0308d299003c060ac7eb30d83c98","first_seen":"2025-06-15T14:46:41.150426Z","last_seen":"2026-06-28T12:32:10.76168Z","times_seen":18,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/73754d4bf421b78fbd3895bbc7890d379797588cb699d6cbe47f3656aa93613b?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.858Z","timestamp":1782649884858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /73754d4bf421b78fbd3895bbc7890d379797588cb699d6cbe47f3656aa93613b?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 84182cbb1c168ac45e6fc2ef6b87023c017c8e8e\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 21:23:28 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1091278\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220043-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11921\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11921,"size_decoded":12552,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9a45dc3b8c7a282eae4f15e9cbbb5478","sha1":"121213f93f8c7b275186e52516af96bf277053b8","sha256":"658ae850a54ada334477dc95fa90bfccc00d77dba615bfdf34d6aa28815ac082","sha512":"132928495f75e06883145731e7f6b34c07d34d20d6e2f779daa3f6335d819500adeb01580b0d9b38ba8fe30ea0b708f5c4bb3ecc0962439d74765659ac1c5e45","ssdeep":"192:+zUoYNMtKwQya4Zh8Xmo29FVer7BzQCux1/mI62M:oYNg7QjU8XmoVo1/Y","tlshash":"1d32cf583748f696ec87cf388e958fc02c55fb69a3302ce47024b83346681e52b8a46b","first_seen":"2026-06-07T21:34:39.182698Z","last_seen":"2026-06-28T19:40:50.018346Z","times_seen":77,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/0.CvmmwAo2.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.583Z","timestamp":1782649883583,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/0.CvmmwAo2.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":206,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/SearchACP.FdMfCbXU.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.626Z","timestamp":1782649883626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/SearchACP.FdMfCbXU.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2053,"size_decoded":891,"mime_type":"text/css","magic":"ASCII text, with very long lines (2052)","md5":"3d4a198bb461e5913a65df135b71bfe4","sha1":"f3c49e2dae68551b8156478290f972776adf7a92","sha256":"488a7123b990602ea5c15ff1dcadebe9a7588090d3d0da241731c5e6f03e0fd0","sha512":"4508d1610aa8c33351e1d38887445407b05a5b409c1ebca8d5d83a3eb31c7afb3b2e15c5d8a8719fda0bf172e545e96b78a0d1b42747409595b351c8ffe61baf","ssdeep":"","tlshash":"2b41cb626a84d63c6c36b5377a393a9cf80ca197de2706d89771b53646cbfd20760444","first_seen":"2025-11-02T11:26:19.678727Z","last_seen":"2026-06-28T12:32:10.762999Z","times_seen":13,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake.com/modal.css","fqdn":"stake.com","domain":"stake.com","tld":"com"},"ip":{"addr":"104.18.37.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.636Z","timestamp":1782649883636,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /modal.css HTTP/1.1\r\nHost: stake.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Z2e79kKkML693oeMYpy5iH' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12cb54cdcf332fa\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; preload\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=i7AgBGQSYSCmU3Ip2C6wasnTHsElNKzwzkP26S2PdVs-1782649883.6580698-1.0.1.1-NLG30ywGg3C9EPS41YO53PfyJn25n4T2qo97dqkErJai9K0QuwngBKQyKhbHYBar7bkNa9AEHWIKL8K_Tsjs5pl4c4kTtikk8Oz1g.FDciSI_AT93_yTlKx_WkKyUF4K; HttpOnly; SameSite=None; Secure; Path=/; Domain=stake.com; Expires=Sun, 28 Jun 2026 13:01:23 GMT\r\ncontent-encoding: br\r\ncf-ray: a12cb54cdcf332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/obfuscated.js","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.709Z","timestamp":1782649883709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /obfuscated.js HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 19 Jun 2026 20:08:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97007,"size_decoded":29545,"mime_type":"application/javascript","magic":"exported SGML document, ASCII text, with very long lines (65536), with no line terminators","md5":"77b4949b45fe7d213236d44f896e4dd6","sha1":"bc665ea2bdcdfda8de65a39292464aadb12e37dd","sha256":"c206b034d7d0b1b2e3e77f4197e0ff7712d03fbde4128f3a320ca6e82dfd4406","sha512":"642af25b8b922a1df1038340553f1b56d15da82d8b0dbbaad6bd2c244ab58e9754a00a1e86f99eca41b0dbe67ede58a1a8261a9fc49d1bd59887c66450a40339","ssdeep":"1536:unbcfmNZ88l6sywC7EgNq3y9d8vmE9RR8qjmxk7rp:uY7JWp","tlshash":"81934f96c250f7dcb699cd6a6f3ddf8c806601c9d09dc4ca596ef90c4a89947ba0ccbc","first_seen":"2026-06-28T12:18:07.538323Z","last_seen":"2026-06-28T12:32:10.763586Z","times_seen":2,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/game-check.Bb3P0l5j.png","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.755Z","timestamp":1782649883755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/game-check.Bb3P0l5j.png HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 19 Jun 2026 20:58:04 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]}],"data":{"size":132288,"size_decoded":81890,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (30752)","md5":"fb49a9e4dc82b04c1ec9b19dd660badb","sha1":"b6a4cacfaf7a419fa1019bc0f76367bea3d10943","sha256":"42a04ac94e582d0424c7490611d706f6ace2392d2fedcb191fdfd4f6556a624e","sha512":"b3cdfb4b98c4f8d71d5d0ea2aa7d5ae02ac205370e8bb03c2cbef9970de95d72589e26237392ce183ce38aec66beccac3b5b03706a9d3d1a1e52cb6789ee889f","ssdeep":"3072:7MHS4sWBq9LJqbcSr+d1tkeYI4GCdXGr821+7CxbtyJd02tMPkheHLh7n6w5zYfZ:7MHS4sWBq9LJqbJr+d1tkeYI4GCdXGr8","tlshash":"13d3d001ca531019e61359387b7a3608c245d187ee1dd878baed531d9fceee081bfba9","first_seen":"2026-06-28T12:32:10.764084Z","last_seen":"2026-06-28T12:32:10.764084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":565,"dns":0,"connect":0,"send":0,"wait":76,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=aba0ebl\u0026ht=tk\u0026f=139.173.175.176.10296\u0026a=6570577\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.767Z","timestamp":1782649883767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /p.css?s=1\u0026k=aba0ebl\u0026ht=tk\u0026f=139.173.175.176.10296\u0026a=6570577\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Sun, 24 Nov 2024 12:45:53 GMT\r\netag: \"67432001-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":338,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-06-29T19:32:53.343903Z","times_seen":164831,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":2,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/30688668d7d2d48d472edd0f1e2bca0758e7ec51cbab8c04d8b7f157848640e0?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.846Z","timestamp":1782649884846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /30688668d7d2d48d472edd0f1e2bca0758e7ec51cbab8c04d8b7f157848640e0?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: bba40f97be761009a7c1e8d5c0358b427757fc7e\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 11 Jun 2026 22:25:05 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1433180\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220053-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6493,"size_decoded":7123,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"16f6ad2a49dd885efa5a39461a4f2bec","sha1":"8eaa8961b966e4b8c2c87a355a0543cae71d43fb","sha256":"61815792078431273fa518dc6462253944a74d07e8403ea37d00093368da271e","sha512":"d0350a8164463061840ac637c4dff38fdfc090c925a4f6664f5cd51a76b20d9c1564fc4bbf5a2b4506def52de240192277cff404f2478066d0796e41a0b8eda0","ssdeep":"192:+8deV0t+Te5f4vrm5oEykZzqymdQaGCHpF7Jzef5fjY:Veg+65wm7ZrBC/BM9jY","tlshash":"68d18d2bb355e848e15c0b3356902c2aa7246b69e47d1bbbc2979300b52f5c5981cbfb","first_seen":"2026-06-24T21:09:52.014705Z","last_seen":"2026-06-29T09:37:23.489463Z","times_seen":5,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":23,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/c5996d604ffd3f6e1e34d94425948d29f78bbd0a96c9611a78b12de8b4ff7677?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.886Z","timestamp":1782649884886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /c5996d604ffd3f6e1e34d94425948d29f78bbd0a96c9611a78b12de8b4ff7677?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: cf4c18ea6b81b3970dd6dcdc527a8019ec394683\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 May 2026 21:35:01 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 3336984\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230206-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13318\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13318,"size_decoded":13949,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3db1407e0c12c400dc297921cba42d1a","sha1":"fd8f6390dce9063e5c1c14d8c1598730374f47a3","sha256":"a3c74e37ed13de99e7ba0e2246fc89995dd5b5627c5460bbb51015a71a9ad803","sha512":"3f44285756979408ed2c295a5ef8987f227be38e68ecda28ec5f1c240a1562fc05e01dff6abcd1688121be77929d8d22fbaba19fd7e5ed3b161bf0370c04039a","ssdeep":"192:+VUoYNMtKw/rOpR2reSblq2jV5HQIGFSvAHID2DPuUqtOi8UBS/9wQlE:OYNg7/Sp0QIGFYlDSuUqt78UB82yE","tlshash":"5052ce1df311a197eed1557028713b21b376b73a8b1539713f24be2a4a8ccc41c1d2ae","first_seen":"2026-06-26T22:39:15.556113Z","last_seen":"2026-06-28T12:32:10.76649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/HoverTooltip.BETiR27C.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.575Z","timestamp":1782649883575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/HoverTooltip.BETiR27C.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 151\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":359,"mime_type":"text/css","magic":"ASCII text","md5":"f40738bca0d25f20617805ef1545564a","sha1":"034a69c1835a88ded38a984886d9037bb3204267","sha256":"30ce96ddd09e7abb3f9a95f787dcb89555cd60a6141ca210e23ad924b720906c","sha512":"5f5dc80d2b3add220cefdf4ad26a00d1b5e31e7bffb2a1d0547ebaa37b4f73e96d9d8504cd71361fc2fc9f3da0eece6ae1733956c5bd584257f0d8c77fd8c873","ssdeep":"","tlshash":"7cc08c0622213a0d48028a2c1ba52302623290c388554ae83b6342205e4bea8db00ab2","first_seen":"2026-04-21T04:13:56.564381Z","last_seen":"2026-06-28T12:32:10.767191Z","times_seen":10,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.D57ZWi11.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.596Z","timestamp":1782649883596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.D57ZWi11.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280,"size_decoded":416,"mime_type":"text/css","magic":"ASCII text","md5":"98832dbc63e2db2357fc525795239aef","sha1":"4c803d87b4d604a861bc4c3092d2db1f9064cc17","sha256":"05f39315fb5659146327b21e0c316911efb805b344a3dc0234aa35f046134197","sha512":"f1648a9000c03412cf6ff39812a7a238efb88b082f4df7f721c657ad371529a90111a47b92d3b321f41cc6d4921b2e51bd50caea03f368a1936b52f1824093e8","ssdeep":"","tlshash":"2bd012af35c111594bfb0130f194410aa31d3bfac53382ca7666c4782b86df463e1dab","first_seen":"2025-10-05T12:06:47.238337Z","last_seen":"2026-06-28T12:32:10.767767Z","times_seen":19,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.zqUojbqh.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.602Z","timestamp":1782649883602,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.zqUojbqh.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7406,"size_decoded":1880,"mime_type":"text/css","magic":"ASCII text","md5":"eb541e1652ad72b63b5765ac38cf071c","sha1":"e41542f346c843dd36e8352c661076010528ef6d","sha256":"b4f60ebe1fa5fa95ad438fedac37165d7a536a8b40b07950e548a51674cda2f5","sha512":"87b6eac7fd32d96ce116545af0d4c14116ad4e762cd391a160ad5f1eb2e43d3f4703f5a92048bfd489139a59d30634bf811aa4498e442e8fcc5b4ebadd7fa021","ssdeep":"192:gL/hd2nHmEzXnxDxXf34AJ/+vZy605qsCZN+sm:IgXf3rA0iG","tlshash":"ece1f084a1638afdfd77a23e1b7f4148a0af50c79e5999c93bc226110fccbf99352540","first_seen":"2026-04-21T04:13:56.416991Z","last_seen":"2026-06-28T12:32:10.768526Z","times_seen":10,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.t_s9HkzF.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.629Z","timestamp":1782649883629,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.t_s9HkzF.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2369,"size_decoded":1018,"mime_type":"text/css","magic":"ASCII text","md5":"4c23ec8ff3a9400e81e500146cba3297","sha1":"72c770fdea779a039d33ba26b4ad3f736e7c75c1","sha256":"6f2acf2427e3deaecc765726fba39173b654cc84d1f2641f5200a77042cfa3d2","sha512":"e93d21334c44268fcd1bf20cdd16468e3b1a62ab37962c9726b3d0daa1be808ac2cad0a89afec721a1d8e8510d6c7303084b3f0d18ddf9b1e1bf0e73d531e185","ssdeep":"","tlshash":"7e41df482763472d493ba43d57be6a1cf26d219b6f0a9cec3bcd33830fc96b66210950","first_seen":"2026-04-21T04:13:56.42558Z","last_seen":"2026-06-28T12:32:10.769188Z","times_seen":10,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.ZZVYB3Wh.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.634Z","timestamp":1782649883634,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.ZZVYB3Wh.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3955,"size_decoded":849,"mime_type":"text/css","magic":"ASCII text, with very long lines (3954)","md5":"1de5fbacc40c548139e1165cf085fb7b","sha1":"7b6cecb88a9b9bdf6959c7ee87475e8be204b922","sha256":"8c4901ceb5f69439154df8c98149a40a114b9e084724a407f1dea51e50cf8e41","sha512":"d71094b675c2cc7845a258910a2c2dbef33b46d635fc11c7112aba2746dd3ccbddaaedc167750cbe0671ff97c5a72806742f0b3c573dea67ceda17b06ae3c088","ssdeep":"","tlshash":"408194412ac07d3c393d97baf1a6f1b4d3cd94a4ae7825c38bb254961ac3fb9135250e","first_seen":"2025-06-15T14:46:41.158089Z","last_seen":"2026-06-28T12:32:10.769793Z","times_seen":18,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":340,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.ayWF5GOF.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.597Z","timestamp":1782649883597,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.ayWF5GOF.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":396,"size_decoded":440,"mime_type":"text/css","magic":"ASCII text","md5":"b1dde8794fb0119ce7e3a1d24d2e1d37","sha1":"25dfd096c9e9902997b287699a058e288d9edce2","sha256":"bacf3e85bc0d131db9cbdd7286612868af83398c8d340504104a3e19aed60904","sha512":"a1862bf9045bb4d4476bb66890ccd57291ecb3d1ca5321b755a6464459906fac1f2f06937dc0c82b73c9eb016a9fb12ba1c92ee90e8f37d65d8099383ce22ff7","ssdeep":"","tlshash":"d1e09205e0b106be09025138bb785168f1ddd0e39f1e2fdd7bd8a2a48fc59da62316a9","first_seen":"2025-11-02T11:26:19.59147Z","last_seen":"2026-06-28T12:32:10.770378Z","times_seen":11,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.DI-zN_md.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.598Z","timestamp":1782649883598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.DI-zN_md.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":650,"size_decoded":565,"mime_type":"text/css","magic":"ASCII text, with very long lines (649)","md5":"0f5d754f1d159883956d05bff9679e9c","sha1":"16a602bcf43c1d099fe60b801ef94ebae1f125da","sha256":"0c07b98a94b0166a02cf681ab7e41fd3a79330a4f5bf0aadcabcd5083ce58fab","sha512":"927a74eef6e61551c6ff072f79d764e967ae00fc38d85ec0ad1e7024e5b7d59a15a821b86a29ac043dbd8f3247b8219a40509c7529d2a2dc7189464c970db4c4","ssdeep":"","tlshash":"eaf09e646b35004d94996f146be413d4d56e494379230dd91b2fd379f3d3dd923a7500","first_seen":"2025-11-02T11:26:19.53804Z","last_seen":"2026-06-28T12:32:10.771089Z","times_seen":13,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/default-sports.KM8Zs5_U.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.743Z","timestamp":1782649883743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/default-sports.KM8Zs5_U.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":911,"size_decoded":768,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd3ac4ef4bdc3f0e36dfa52c1e56c963","sha1":"7173b84b402b2e81c1e4ee2cad59f0a5d0d4b83e","sha256":"1aa107e5ae5aaf9d333e234d73ec1762bb4eb575ce8b5cc06635d78c670030ad","sha512":"418e7d6176f83fd02d13719770f5ab0d9f761b3590be28ed2ef905dc97891886777361419aec63146745ded258cc9513f7f6e8ad37b1abd58cda110c6faa70bb","ssdeep":"","tlshash":"5511232bd2595471f864c384ebbc65413734e047c140e180b6ee6f55db284d2080ebf8","first_seen":"2025-10-05T12:06:46.856331Z","last_seen":"2026-06-29T09:37:23.379763Z","times_seen":153,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/logo/stake-full.tLL7usOz.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.751Z","timestamp":1782649883751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/logo/stake-full.tLL7usOz.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4420,"size_decoded":2239,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a4a9c17641b6bfdbd04f5788e0bd320","sha1":"d217292ea761dfd094fafea5e46fe5e4ee5ae9d0","sha256":"a77f92318dfbcd1667c09cba992bcfdb774e8baf29af72546c3c49ddf04c6120","sha512":"8fad2499d1f7f5c02d493ac8638e9f1198886878ead1371e9e26f54690e2f335cc16096484f214dd08100d332fb9ec4f7221614747cc191a9f026fd28106d8fe","ssdeep":"96:pRXLh1bZTh54cYW4/aqhChTa19SAzIi2VdC:91ba3DyqhMONUm","tlshash":"fc9175eae3ba52acf048e3fc2b218439bb1178f256528c9593e81802ef6104d555dd47","first_seen":"2026-04-21T04:13:56.613732Z","last_seen":"2026-06-28T12:32:10.772318Z","times_seen":10,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":555,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.BAr8AQ3F.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.638Z","timestamp":1782649883638,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.BAr8AQ3F.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9583,"size_decoded":1885,"mime_type":"text/css","magic":"ASCII text","md5":"5a3ffd15c0276bc31963b210f1298db2","sha1":"63ad3e881e93b48cb29fff45d4f9e9542e642e90","sha256":"a032f92e96a2918230ab7e91c7d81b148b8915bfc7100406176ffea8e398271d","sha512":"a9b2f6ca108fb4bd4bcec1930dc9dc4d91a55a566adb8a61bb41fff32cc9a03c90947f72ae892688887c219a0d53606a356e28a4bb107cfe949a0d579009f4a1","ssdeep":"96:gk/KmnsIBQA+EQ35jpaP2V4H9U6DI690LotBDCu8uM8wko/tk/0NUAX92:XZ0A+EO5FZS9Nr90LotBDCu8uRwkoGUE","tlshash":"bf12f3cd76628abc286f873c76ba4347b6dc22f36ca958c537e50c044f91ea8471d94e","first_seen":"2026-04-21T04:13:56.367078Z","last_seen":"2026-06-28T12:32:10.773001Z","times_seen":8,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/11caec5df20098884ae9071848e1951b8b34e5ec84a7241f2e7c5afd4b323dfd?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.856Z","timestamp":1782649884856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /11caec5df20098884ae9071848e1951b8b34e5ec84a7241f2e7c5afd4b323dfd?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 706b2edb143175752c38a6fa11f63a4aa4264a64\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Jun 2026 10:28:51 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1044154\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230099-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3832,"size_decoded":4462,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d9fec25c5c7b6860a8e6b69de9671918","sha1":"1b7286432d8f52bfbcccfcf493b792acde8c8dda","sha256":"46c3f000479bfb30f2d123c72fdd2f5f2fd54c2748fdfb23539fdd0dc54b138d","sha512":"b5d0678dc84e1cfe83d7bb6fadb7748809000a9ab4c0b875707554abc45d2422f36f2f23f443d4b8b6480d52fea101eb20f0fbb0051cd6da3a73cc9bb0c19ba6","ssdeep":"","tlshash":"6f811a25b6e8d365d6ccc73854beaf3c675c7222df76ab3f4242766b16088d44421e0e","first_seen":"2026-06-10T08:44:21.532691Z","last_seen":"2026-06-29T09:37:23.513396Z","times_seen":11,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/fdf333e96a5e21555bbb4e9e04a3ee4e1986c9cca9aa75141597041cc8334d23?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.860Z","timestamp":1782649884860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /fdf333e96a5e21555bbb4e9e04a3ee4e1986c9cca9aa75141597041cc8334d23?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 6a481f19ce2dc66d6952f3544cd41ac0d8effb51\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 18 Jun 2026 11:43:50 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 866855\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220082-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15855,"size_decoded":16485,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2de6e6729dfd01e11ad325644942961a","sha1":"243cbdb13577390231f46375bb6dcb50e5e6b758","sha256":"389784e599a5558454cd5ee028ea02a6168465123dacdc5dbb56f57709c39497","sha512":"801ff39432798366054bc29df65f88fd9fc81daf31b2f9555730cf73789406387045db6b1426bfa4268441caaef8919b8497bb64c633f9841d1d73ecf89dffdb","ssdeep":"384:PYNg7Q8sWNYAQJXngmq2Vq27NCDH07NBctYGYpg3KVSA:PYyG6BQNngp2T7NsUp6YG+g3KVB","tlshash":"2c62c138fdafbb4bc9158bf459b9a7ac89cac33ad791ac5bb614910400066e2c73508d","first_seen":"2026-06-07T21:34:39.224468Z","last_seen":"2026-06-28T19:40:49.999087Z","times_seen":79,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/modal.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.566Z","timestamp":1782649883566,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /modal.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 02 Jun 2026 22:45:06 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":381460,"size_decoded":51293,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4b1bfb6c479f6ff5ce61965d64978e91","sha1":"d3378243288a3557d6dd518f7cd1d2fdfc6819b3","sha256":"659c32c831654c57b8a2b5022bece206c426aba0113a5fdc17ee6465d8a86371","sha512":"09119d00f64293f2e68efa43ac2f64847fb205166b31b4a09520becc7ab5257f650747cd1676410c67c480570390f8394ffc5e88e85825183f53fb0973e3d85c","ssdeep":"1536:IdY5QHDK1o/KZxlfjGDDjr7P1KSW0QsWDHifmHz8VOzjqcbqmW7f2GamUJ4pFC7x:zp0KSW0PaYOvqcbqZ7f2GamUJ441zvjD","tlshash":"e1841155e1b286f62d23617e1bde9a1e7278e0c3de2d9fd83e8c61008fc82f75961644","first_seen":"2026-06-28T12:18:07.548231Z","last_seen":"2026-06-28T12:32:10.774648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Slide.BoLNbaSt.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.573Z","timestamp":1782649883573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Slide.BoLNbaSt.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3586,"size_decoded":1179,"mime_type":"text/css","magic":"ASCII text","md5":"76edc6829b702994ea1512d159e690a3","sha1":"82752ec8b64e7bf2f83317c7ab9159e0c299a653","sha256":"ffab2a99ace724711f744f7fc156b34d024793e14569a0f6827738e148255db1","sha512":"83ddd53441f8712a7321fbc0b9a742233e50aa8b632be72babde07d19f6e6db6882ab7358be6893b8ddfdc3cd44ea0b223e38223d8a29e91c6b498df98bd3d0f","ssdeep":"","tlshash":"9f7102107853a518190f82e83b669715f29d35e3af66c5ac378153803fc3af97714ec8","first_seen":"2026-04-21T04:13:56.595219Z","last_seen":"2026-06-28T12:32:10.775176Z","times_seen":10,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":39,"send":0,"wait":45,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Slide.Dbme0AiT.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.601Z","timestamp":1782649883601,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Slide.Dbme0AiT.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2178,"size_decoded":941,"mime_type":"text/css","magic":"ASCII text","md5":"a6b3dbb75a962529f71db83376e638e9","sha1":"21791e0e5e46f73e990e0ee05622003e248dcf3d","sha256":"fadbfe5a266063a533276d9ae2315126e0030c9e441b6c1822e2e4f30f0e177f","sha512":"838bf498da79af43ed0055555365b0e4963802120793a9b29876b38ed000819f7b620e4f7ef1eb33cc5e65969540672efd6b28631b02188a1213e5c4d6befbe2","ssdeep":"","tlshash":"8741ed206173646c9e3bb5255bbe7508f57a80835e1ca9ea7b8062054fcb6fa7242e1c","first_seen":"2026-04-21T04:13:56.361638Z","last_seen":"2026-06-28T12:32:10.775907Z","times_seen":10,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/logo/stake-mini.BEyzWhug.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.752Z","timestamp":1782649883752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/logo/stake-mini.BEyzWhug.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":909,"size_decoded":757,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c41e78198cb32f7ff7d9bb05a706bc76","sha1":"ba659aaaa230bf362079be6cab28bbdde16ae640","sha256":"e2058f2bdce1c22d615f3c4d43f612ac3718464acfa1be4cd322c630acc12d68","sha512":"a120edb99ced7c0acffbe8c9ab1176654270df2affba71af5d60b7adeee901294cee6cb4c319ac3238799447b84b357a3c792197900a7d425008fe65f2a6edae","ssdeep":"","tlshash":"ce1144ffc3ede2d0828ae3b49e250a3065d6b8f2095358ee026378a4d06448e8d098cd","first_seen":"2026-04-21T04:13:56.557016Z","last_seen":"2026-06-28T12:32:10.776471Z","times_seen":11,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":559,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/b3ffdd5dc155ad6fa917cd1e9911d253774e6beaef55af010bd3cff6ef89cbd4?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.875Z","timestamp":1782649884875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /b3ffdd5dc155ad6fa917cd1e9911d253774e6beaef55af010bd3cff6ef89cbd4?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: b84e0a486cb17e89d244bbd3d402e34c088e6b11\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 05 Jun 2026 00:12:08 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2031557\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230140-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11493,"size_decoded":12124,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bdd509841488bba9aaf92147594aa15f","sha1":"3845e8f15cbedd25e85245172998cd026a6306db","sha256":"ffd9c88264a9a86961b43ae4bc147aa5ec7a8ade4c4d839bde55a90659882d02","sha512":"b0eafa6b0854c5356125b2b15427347cc0b98e6b0648e0ca04eaf7ee4508783b1bf9129d676699f01a07b9c6961e3ac7058a6bbd1330611cd5be3c12008c250d","ssdeep":"192:+dUoYNMtKwQivP/xsyJi54Nw7o+2WLV7MVvI2CElfyHNAnn3k:mYNg7QivSyTy7MVvIIM43k","tlshash":"6232c0adaf5227a2feedf2b428615f96a250c33bd750b10d60a4ba1c72027c5198d1bc","first_seen":"2026-06-26T22:39:15.620708Z","last_seen":"2026-06-28T12:32:10.777083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.BieTXhTT.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.604Z","timestamp":1782649883604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.BieTXhTT.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4057,"size_decoded":1021,"mime_type":"text/css","magic":"ASCII text","md5":"46d3d15e5b23d838fc2b1a9ec6b29990","sha1":"fb6459cfd8ddc5f115d37e0e8b2ee2a8552f78ef","sha256":"ed889d30d74c5b8f946a91add237ec519e806caccf6496b4fa8d575d33ac0118","sha512":"c9de50624f6363b312f9869bbf52e1275edc3a732238f0e4269eabf4846dfd217664af10de0a22c9fcae7b3d366cf0fd48083105c379d07f0ae0e3ad3681f9f0","ssdeep":"","tlshash":"b4817750e86790be2e37a33e2fef5a0ab35c70c39c0557de378555080fc82fa61a1a85","first_seen":"2026-04-21T04:13:56.347855Z","last_seen":"2026-06-28T12:32:10.777684Z","times_seen":10,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.D-siYVDr.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.620Z","timestamp":1782649883620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.D-siYVDr.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5870,"size_decoded":1568,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (5869)","md5":"b074dcc8de6290b77e71318a8433990b","sha1":"dfb0d3d2b987e972a5f846d670aa5c3f1d8340ec","sha256":"894c66148252c34eae88ad1be9e234859155872a682a013aa5962a26359e3d50","sha512":"8da7168d22ea235dbc0d147c277d175af498c01e26abd6eea6a8ef9b763515d13150ef08a20533f01ea0981a8f3dad3e0bf5cda0901a5fc57f01a62f9e52f2c0","ssdeep":"96:tfi3isFdzni+CNipi2iAiNipdihni9ioiwx0sivwGAiXfTAiEinfLffLuidiPafS:+2rPrYSSejSSCDX","tlshash":"6bc1ad9e7370e23c8d239e3c22ac8759d79970d2bc921adef285ca1197c3ee60753542","first_seen":"2025-11-02T11:26:19.653315Z","last_seen":"2026-06-28T12:32:10.778237Z","times_seen":13,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/default-casino-mini.CQlEkEv9.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.749Z","timestamp":1782649883749,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/default-casino-mini.CQlEkEv9.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1299,"size_decoded":936,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac3bbb807223c0134f6186b1d7fd0cdd","sha1":"def3cd245fb706fa18b22376997ddecdb1ccfa7a","sha256":"51c11290d35e0c61842b7f7fce9cd953de24f73281d724b71c6864b6b86f392d","sha512":"871483d77fcc6e6b05f8af360a8551a09046033732fc3ce90cb7103da821718cca42aad6815f010fde395acfe07b4af845e851431ca0db87231eaeb99a7ef0c5","ssdeep":"","tlshash":"c3214725c1fb9537f725839887b859403774e483c150c494b5ee6a98df249d1584f7bc","first_seen":"2025-10-05T12:06:47.100566Z","last_seen":"2026-06-29T09:37:23.331957Z","times_seen":148,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sanity.io/images/tdrhge4k/stake-com-production/8d7fe57f53c2af55842f6037d372642bf3f6f2c6-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format","fqdn":"cdn.sanity.io","domain":"sanity.io","tld":"io"},"ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.828Z","timestamp":1782649884828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanity.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:8E:04:FA:7A:E8:3C:E3:65:0C:EF:9B:20:BE:E0:B7:35:28:DF:31","sha256":"EC:EA:80:B1:76:4D:5A:2A:21:4D:14:C2:69:9B:19:A6:58:1F:CD:AD:62:43:D5:66:C9:8C:AA:47:AB:3B:F9:AB"}}},"request":{"raw":"GET /images/tdrhge4k/stake-com-production/8d7fe57f53c2af55842f6037d372642bf3f6f2c6-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: cdn.sanity.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 8900\r\nx-sanity-asset-storage: gcs-default\r\ncontent-security-policy: script-src 'none'\r\nx-content-type-options: nosniff\r\ncache-tag: dataset-tdrhge4k-stake-com-production,dataset-tdrhge4k-stake-com-production-asset-8d7fe57f53c2af55842f6037d372642bf3f6f2c6\r\ntraceparent: 00-6c1db6456b17be0eb0bad889e551f8f4-5ec0f6ae750d6283-01\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nxkey: project-tdrhge4k-stake-com-production\r\nx-varnish-age: 409\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ndate: Sat, 27 Jun 2026 11:32:54 GMT\r\ncache-control: public, max-age=31536000, s-maxage=2592000\r\nage: 89910\r\nlast-modified: Wed, 31 Dec 1969 23:59:59 GMT\r\ncontent-type: image/avif\r\nvary: origin, accept\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8900,"size_decoded":9755,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3438fc7b688620ad27ce34607a267a46","sha1":"73af60d65320957a161905e7c8aecfee0bc2ba68","sha256":"7b772b772160c391264cf204002dff4c5e7a92c5eb1aea277050df97d9f61dd2","sha512":"f3493e6699f7428835a46d3151e72f45fab0608d6424327d5d89e646c9652dae15c135a77e3ec8a9fa62ed1ec416b867e930852ab19da71861f2e95855dcbf56","ssdeep":"192:rGtfMMlvJt9JdNCLA1PJCTUoWcmchxjijCFiWTdL:ryD3F+9hxp","tlshash":"9902ad048d190c7afb49cb711f460d684333d5a60614a7ea6e09f586bb5ca369f31b5c","first_seen":"2026-04-21T04:13:56.551748Z","last_seen":"2026-06-28T12:32:10.779555Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":16,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/fe8a138599e05331809e86bc4b7856e930ab799d08ba3fe3a982d0c4920e64a2?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.877Z","timestamp":1782649884877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /fe8a138599e05331809e86bc4b7856e930ab799d08ba3fe3a982d0c4920e64a2?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 274d9c8606b10bc620612b8feebed0283b140d05\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 02 Jun 2026 12:42:11 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2245754\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230085-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11045\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11045,"size_decoded":11676,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b7a929eefa3828d8aeb2c0e0bab7ae87","sha1":"135e0bec1fae22a7747fe1e8796c1eef5b7afcd7","sha256":"041bfcdd660269d909d84ee14e8da088d37936634219f358d265a8708e3f8f05","sha512":"bc597635d19bb290a56a632a507b67fa24bd412f4b969dce51a52d4c4e20e5b5c522b38de8d1cc160b00a7317780150bcc30f20feeee2df5bb1b06fc73b5ff14","ssdeep":"192:+LUoYNMtKwQ/qEOukHkW8m7KZZxZBmGsWAnWgw5DhHmF21:oYNg7Q/qExlW8m+Z+NWAnWg+1mo","tlshash":"6232bf78ef22ff65e9b8d63826b4274030d1b318d30634f757b0ab860690152da8e28f","first_seen":"2026-06-28T12:18:07.470238Z","last_seen":"2026-06-28T12:32:10.780516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.ChSAPqm3.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.623Z","timestamp":1782649883623,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.ChSAPqm3.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":372,"size_decoded":462,"mime_type":"text/css","magic":"ASCII text, with very long lines (371)","md5":"ec6f1fae1c3dabc1e211a6a7d0696a17","sha1":"aefd1496f6b5f6eb9cddee3dd80c86e071f02e8b","sha256":"5c910f0c6d7649a802c558c58dca5db36df0ff3472f6303d067f9c97dded3554","sha512":"0f629265ab7340421970062f7810a2a2c65dc6444e4dd3f480225fd1363dc4b85dd0cbd00bd6835852f5e52e3a63f08d743aa13442681aa3538a4233c2ec096e","ssdeep":"","tlshash":"07e068242211a77c7433903368280a8bd08ee4a4da6750c90a0633168def5c31b740e4","first_seen":"2025-11-02T11:26:19.518033Z","last_seen":"2026-06-28T12:32:10.781271Z","times_seen":13,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Hero.C8lD8jO-.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.628Z","timestamp":1782649883628,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Hero.C8lD8jO-.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1994,"size_decoded":848,"mime_type":"text/css","magic":"ASCII text, with very long lines (1993)","md5":"54c3d9ddb0f1bd7c5f4122db11056383","sha1":"83348c3d416e346fa2a72c56be9196ef49295937","sha256":"4e7bbe564f36c96cf7441e1702a5a9bcf67bfa414e882e0978c7d0c56039244a","sha512":"9188bd490bc10580769e2c4fe64077cac93e89d911ff8ed1a849e25447d3ca04fd02bce79f914a1f84eeeb219fb3d1eba23106b276dd7902e28d4c04473aaf86","ssdeep":"","tlshash":"b3417b913560f338f5a1507efda9b4e89d3c9095ef030dcaa789625da3c6f920b2c458","first_seen":"2025-11-02T11:26:19.679582Z","last_seen":"2026-06-28T12:32:10.781734Z","times_seen":13,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/qrcodes/eth.png","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.736Z","timestamp":1782649883736,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/qrcodes/eth.png HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 668\r\nConnection: keep-alive\r\nLast-Modified: Fri, 19 Jun 2026 20:03:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":668,"size_decoded":877,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 1-bit colormap, non-interlaced","md5":"47d1b9f37e02a64c63fbb0262bc11d48","sha1":"2333283a23c2f70d094749876824546f990a8f56","sha256":"e91d6b4eaa2464c0a534d37e22c6510fa8b9a7ba8df7045161c09c2b34a4a1bc","sha512":"c11cc908260a346c0b5803b235b5e2a895665bb955966cd1e4c452c770b77bb7bc7f099a5e63cc7196f380ff8798f2ae6f7d9faea3e0b7c64800a854640e4f2c","ssdeep":"","tlshash":"8601c8c3f111f41e0d02ca1a11563391090112f4ccd032ed743699e1d7992d4bc90ec3","first_seen":"2026-06-28T12:18:07.346671Z","last_seen":"2026-06-28T12:32:10.782277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/game-check.webp","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.753Z","timestamp":1782649883753,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/game-check.webp HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10874\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10874,"size_decoded":11086,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea51abaef40f4dcd8a1cae738784160b","sha1":"dd778ac417086a254480948915b7c78bdf774711","sha256":"cf42623829b3a5ee7285553c284905baab84c08dc6debed4873025233f6aa5d7","sha512":"f5221101598062b1a5bb81481207298c2b7a344e4bbeb0da30b06bc7da808f8f4790d647823155814c3cc0797b1a895da5c23f2291583f349834aba8933e2e6a","ssdeep":"192:3c77WzhbckKV5DuoepGTeaOFGOWKM6KVtFwjm10c7XMVn:37hbc5VkoeITjO0r6atFwm1X8Vn","tlshash":"ed22cf0e74ffa1222e0376f6e5bc34a7648fa16de211994c5dcca13d16be52a22dc607","first_seen":"2026-04-21T04:13:56.528732Z","last_seen":"2026-06-29T07:54:17.110309Z","times_seen":100,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/34ee5a63f09ad96cd4d92ba752de18ca210df5439723203c26f385bed7ee97f1?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.862Z","timestamp":1782649884862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /34ee5a63f09ad96cd4d92ba752de18ca210df5439723203c26f385bed7ee97f1?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: ecdae516dc9e5c11bcbc6a6f092a90dacc06a2af\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 18 Jun 2026 01:21:18 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 904207\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 14555\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14555,"size_decoded":15185,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"06c50fbcb96dc79dfe4f34aea460022d","sha1":"be88de14725cdb38eb5fa72f7cc2b9dd986e0c2d","sha256":"344dbfa485ff2fca1a6e5cd1c17b9f33fc8b8c9b8fc5cbf54ad8d755f01d00db","sha512":"ee79621d425f31bfe7134f8b23bb6ce16cddaec0bf5d049f4aaa149603b375e9268b4adf1e6a49951be40a3fc7e516e04831edd27dc9bdecb4351b06eebf231c","ssdeep":"192:+IGUoYNMtKwQLH4+SmknmD2fsF/caV/1Ip1fm5hhmsOqVMCILOupMY60lanKsr1j:AYNg7Q74+9X28opuwyuuYPl0r1wk","tlshash":"6862c021fdb47725fe46ee3124b587899aa2423bb7072756bc00da07264039462cf01e","first_seen":"2026-06-25T05:49:43.010931Z","last_seen":"2026-06-28T12:32:10.783312Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.BCfQ2Xt1.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.586Z","timestamp":1782649883586,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.BCfQ2Xt1.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8994,"size_decoded":1224,"mime_type":"text/css","magic":"ASCII text","md5":"6d2356662696ee43e84f98f8b6558e6e","sha1":"44c9f6c3197ae2beeb68d8facc99e593925c599a","sha256":"b9a3a6b9aa54b610c9d0965bcbff80124df4dcdc1c63e24ab4ac2e22f31d8bba","sha512":"26235e0c4204f38a035dc8d6a8acefa5252fcbbdbe0b1eeb2bf845f0f129aee7b03acb1c831fbc407fb93f5b7adfafca98118b00d230e23ded84db19b79cedd8","ssdeep":"48:vzp+lYV8RyzgbzM+zaz/zTz2lzIz2zAzZzFzVz5/z8zDztzrzSztzlz9zczPzVz9:tsE1erqSeQjtyDW","tlshash":"1b027986f7f6857d3a1f3576aa2e1728620d18c2db47cb74bb04a6101f81fbb0329759","first_seen":"2026-04-21T04:13:56.535447Z","last_seen":"2026-06-28T12:32:10.783842Z","times_seen":10,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/Chat.D9rGLW8X.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.621Z","timestamp":1782649883621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/Chat.D9rGLW8X.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7220,"size_decoded":1729,"mime_type":"text/css","magic":"ASCII text, with very long lines (7219)","md5":"fe7350dae33e21d5f2d8b0e2a871eef9","sha1":"e5a0eff8d1a8b1295692f7e1c957734e1ee5d0e3","sha256":"c3607d9b7b0c7df8113c9e2e404f300d292b48a88389efe62ddb7bc4de94fcea","sha512":"ceaf146fa5a8ee8f00f926fa843a90058e89eb9b2d49cd50873fc3095091df73c8554608cd8c2c22f054a5eae9b3f4a59666e8bbaa03b4cafc3617cdba911091","ssdeep":"48:QLyhWMgCOigTdza0z58lKGbp7J2oq/qiqnLryP0XqCrXPPWH2proPe80qernP22h:6LjigxBoZJ2DStL7nukyaOII9jXLD9o","tlshash":"36e191e02651e73c7d32b07eba7569ece458a286ad2717d897a0713546c7fe3173090c","first_seen":"2025-11-02T11:26:19.528856Z","last_seen":"2026-06-28T12:32:10.784386Z","times_seen":13,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/active-sports-mini.DzJgZyvU.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.748Z","timestamp":1782649883748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/active-sports-mini.DzJgZyvU.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1160,"size_decoded":896,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8d4952804a361b8e44da54be9aa4fa8","sha1":"905efedd3446a691999e090a556c7205138ba8f7","sha256":"aef2b5e3053d33a65d320c774189151fd0942b8e78143be7814f71022db72fa4","sha512":"072813c3389f468cdbfbbd56a5a5f92065ee9e675cb41b9dcbaea37762779d08d9e43e95fb9ad3c37e94fbdbd5a12b4ed09e57515e7bcb6e40f8bcea02bcfedc","ssdeep":"","tlshash":"ea212329c29a4936e656c398cbb89d507374e443c160d5d0f5ee7a99df20ad0188e3bc","first_seen":"2025-10-05T12:06:46.479261Z","last_seen":"2026-06-29T09:37:23.386806Z","times_seen":147,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":600,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/8c1768b783a43931a4ebc8784ce64085e39139d262e6bb50da242b9f3fda70da?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.850Z","timestamp":1782649884850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /8c1768b783a43931a4ebc8784ce64085e39139d262e6bb50da242b9f3fda70da?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 7947\r\nx-imgix-id: 2be28d17a3e910a307953ca065187cab2b8dd963\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 22 May 2026 08:33:53 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 3211052\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230094-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7947,"size_decoded":8557,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1b5c05ffd1a1191bcf7e5eff1732e8f0","sha1":"76296405a529d5ab3abb341d58bf6920a48e80e2","sha256":"a6331adbd0d6b94b93bad159df3028eef2fa787b63de35471c2543d2270d41d0","sha512":"66dda1f5555eb04aa6a5aa07d205ea58ed6513a718213ae53a7afc22d4eb7561ae473264e7393befe3a5ae571d069232d928a71f71642e6ad117268c55a80c16","ssdeep":"96:+NjU5N26MT0D5MdtbZPAVwzVEld6w1s3b8l0bYQ5ezmQbAVbEI2wOX9DjxKWbZ5B:+BUoYNMtKwQsPb8Gb9LQb092wOhsiZL","tlshash":"82f1aff42f92e692dc18e77848e13be655c27320d715758b3648ff2686882c12f8e16d","first_seen":"2026-06-10T08:44:21.530975Z","last_seen":"2026-06-29T09:37:23.520346Z","times_seen":11,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":11,"receive":3,"ssl":248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/stake-full.tLL7usOz.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.755Z","timestamp":1782649883755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/stake-full.tLL7usOz.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 19 Jun 2026 20:58:04 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]}],"data":{"size":1693468,"size_decoded":275557,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (30752)","md5":"49153782c6e188a8b808178934ea8544","sha1":"67b65d54cbf15e18b42344e0d3e5919ecc8998f4","sha256":"cea2ab18d1566f64caedd33f14af83b038a28521894b51f37bc5a7213873880b","sha512":"7d7d39802a645b175bd4f22e31321a37741462a16221e995ac98d9f8e53891363a23971ddf97b8e350680afa489cf9eca4f762c87371ece87c4206f635adf866","ssdeep":"6144:7MHS4sWBq9LJqbJr+d1tkeYI4GCdXGr821+7CxbtyJd02tMPkheHVYwVEyG+8Ei6:pWPjr7NgLz5FiUK0r3","tlshash":"38254c169500501f5013c4a8fa39791af25df8c7fe6e5488bedd83182fdacf2d26e698","first_seen":"2026-06-28T12:18:07.320134Z","last_seen":"2026-06-28T12:32:10.75912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":565,"dns":0,"connect":0,"send":0,"wait":52,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.C_6Zl8yc.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.570Z","timestamp":1782649883570,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.C_6Zl8yc.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2647,"size_decoded":947,"mime_type":"text/css","magic":"ASCII text","md5":"3486decdea8fb4e2861481cb7d160596","sha1":"c53176f304b731789081acf433f52f02e799fd41","sha256":"cb7f4df28b95fad5dbd7f9e52dcd16e3eabd03ae05427131a07e5d979c3c3a54","sha512":"5b8fc6645e2a02e422cbf1d3e53ca50bdb2851db3279a70a6940e2ac157b300a3355070988211b338fb40668ea74b9620bada84b12b0d41799387f888678be36","ssdeep":"","tlshash":"245110d036726afc1a32933c17ada36cf16c32cb9e078dd83f5021941fc8aa64720e81","first_seen":"2026-04-21T04:13:56.602525Z","last_seen":"2026-06-28T12:32:10.786389Z","times_seen":10,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":43,"send":0,"wait":49,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/DropdownContent.oek9RivN.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.644Z","timestamp":1782649883644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/DropdownContent.oek9RivN.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2809,"size_decoded":1055,"mime_type":"text/css","magic":"ASCII text, with very long lines (2808)","md5":"f608fba5d642a7c2bf3f80d690577423","sha1":"9572f3655cfa8e513a9aa3b21e50d47be480b45f","sha256":"79bb6599c32b65328cff20abaf5e256998e398107bd6a48afcdd80c2d39c87aa","sha512":"8af1aea44dc7b5a86a3909620f3d8fb921b972033b5eecba53c38aa75c6bf79af318d90152837e583385777739e9506693bca9e48f97cacf45746e7810f83436","ssdeep":"","tlshash":"9051fce1f1a0ba6c1922d33876f567ade12d9251ff9345bcbb91703502dbfe00769888","first_seen":"2025-08-14T23:01:38.885982Z","last_seen":"2026-06-28T12:32:10.786924Z","times_seen":17,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/binance.CZXcNQcr.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.737Z","timestamp":1782649883737,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/binance.CZXcNQcr.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":654,"size_decoded":578,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"904d6616b45f8f930cbf94cf69b8ac91","sha1":"ef5868a690df3edaf196618ea9bab0e0ccd2950f","sha256":"286e9eed4be953952dfaf25cf2059a8082019d366736d1faf4e2b7c3dde8c466","sha512":"89b97659ad4c9377dd0f569aad69a96fa74f1e96102ab7b77580b63f795d05d0487dbbde5a52cf65358764c6cfe7a41aa7db665c546abdab8132f948d202181b","ssdeep":"","tlshash":"d7f07df24901c3a6c408c73a65765c7530fda4f7fbcd4188c60063a1d56cad679192f8","first_seen":"2025-08-14T23:01:38.724434Z","last_seen":"2026-06-28T12:32:10.787389Z","times_seen":12,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n4\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.708Z","timestamp":1782649884708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/efe4a5/00000000000000007735e609/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n4\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stake1401.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/aba0ebl.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 43476\r\netag: \"51f819acbccff2699ecc685e06624834f7e6fabd\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 28 Jun 2026 12:31:24 GMT\r\nakamai-grn: 0.0f772117.1782649884.cfa182b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43476,"size_decoded":43858,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 43476, version 1.0","md5":"6f4d2c32ad623ebb06c8454972594424","sha1":"d2078a72234d13911cb430e0ee4cf8e7a6090b02","sha256":"63c7b752ddcfc751cc224faa483001fb2ac5265018ed9b426e3d8d30a85ea03e","sha512":"ce9aab56b5d62f21b333cb5c2f9c3ac82cfd8e96fa681922424ca2174c2762fdb2f33357eab92dcb5ce5bbcee080dd7e5433796130f62cea233cf76e4a35a649","ssdeep":"768:MqSK5iA+Ylccjc9mTm5OfUlFqsfyaUOv5bmJsD7A5LgktYqzSbjaG:15iA+YqcSkDKI4yapv5SJsn4EktzSXaG","tlshash":"bc13f238a4268624ae58f4a837a4453934fde8e04e949b3cdbe50cb7c7fad5480a3751","first_seen":"2025-04-24T13:55:33.541551Z","last_seen":"2026-06-29T09:37:23.329934Z","times_seen":208,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/9ff267150fab30e5f0cff7f09456fa2e5e966015c7fe65969104f4c4c442a746?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.859Z","timestamp":1782649884859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /9ff267150fab30e5f0cff7f09456fa2e5e966015c7fe65969104f4c4c442a746?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 3fe4c1d74ce7a5c4937889a1f8d45bcc5fa1a5d1\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 19 Jun 2026 04:51:27 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 805198\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220126-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 16476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16476,"size_decoded":17106,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"599d442439525fa4a421bff14b69e5bd","sha1":"827d25043507ff36528e0ba39626039586df3a42","sha256":"e5d39fb82b6e15b3f844e72d41f7f6267648874523de113d613af30a97003427","sha512":"ab443e02a2b13c6cc1fd8c86b22a523394b0ced814d533e07d4f6435acbdd59e77c180550d774d20f040d5b46349edd719c067bbc790ad0bca3cddacc5b24920","ssdeep":"384:kYNg7QqjBsweHci3HSjQGMuxQvDlaXP8PKNWX+MNEIbOMiB2:kYynBswrQG0UXP8yNOEQ20","tlshash":"b872c0bd776f4177ee63d57855a28e8932d3fb2c532512ca2878a3787124049374d05c","first_seen":"2026-06-16T06:38:27.678206Z","last_seen":"2026-06-29T09:37:23.314244Z","times_seen":39,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/9fa230f26ea1e9735e6cbc2b42749c67919d46f495af337cd83e2456d97f198a?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.874Z","timestamp":1782649884874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /9fa230f26ea1e9735e6cbc2b42749c67919d46f495af337cd83e2456d97f198a?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: c355b884363af0fc4f051f9e91c2e474960f5c40\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 02 Jun 2026 11:39:49 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2249496\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230053-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4628\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4628,"size_decoded":5258,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cd85d79b3ac4525d8000173067cf381a","sha1":"94ce9e4910b8dd2237af5740786ee6544c7fbb5c","sha256":"e00ab331f1c60067f2f6694611804b48815ed99a81cab0666b3213d3ac6179eb","sha512":"a92c00ea8e99e4a750fe7bb8d34b44752d8a02aa8ca4a89b98097dad8cc2c743c09c30e75dcd4c03be88730e83de4fbcb49881566109e76b0c2151f11c223055","ssdeep":"96:+NDv65N26MT0D5MdtbZPAVwzVElM9FHq9/4sWD9TPRLCc2:+dv6oYNMtKwQkFHqisWhTPt2","tlshash":"e2a139bdeb6be7a7f922e23414f13f95b2a6322cd36276867074e31401951c46b0e0dd","first_seen":"2026-06-28T12:18:07.394874Z","last_seen":"2026-06-28T12:32:10.789005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/messages.DPRnVV2x.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.577Z","timestamp":1782649883577,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/messages.DPRnVV2x.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310,"size_decoded":418,"mime_type":"text/css","magic":"ASCII text","md5":"98f98894831c33bcd16758ab5090da89","sha1":"100a03dbd9b481f0f3609672493902ec00afc238","sha256":"0ce7d6f284b0f51859f1f8196f7b5cdc6bad7cf3d0ec80eb817f266bab81327f","sha512":"24628ad0358dd3fe44cc1a7c3bf6df55cbf38a0e2554266b7c9807b5251a4b2f28d8a6cd4cd8f29e888509b578476ef36e5a18229054b661d0ecdbd52d3df050","ssdeep":"","tlshash":"bee02c041063aabe8e2298282ebd0200a088a58b8c428cca3281400e4f8e3fe72e1a50","first_seen":"2026-04-21T04:13:56.542752Z","last_seen":"2026-06-28T12:32:10.789549Z","times_seen":10,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.D7rf9k6C.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.631Z","timestamp":1782649883631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.D7rf9k6C.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1400,"size_decoded":696,"mime_type":"text/css","magic":"ASCII text, with very long lines (1399)","md5":"0c9232ff4b48379c29a0eef202e7adf9","sha1":"df4b233783b90be519756e6025f2c501ed51bd34","sha256":"f7b38c410d62d3de67d1ba25c57eab4d22526c9034880d324983511e0a90cfa2","sha512":"83ac1d292da18355b2df8c92b6e6e2295eee04ea6e84e74268f554e61a9ea892c5cc32d66df2bb08ae21b952c47d2c6aeb5900b5925ea90b09f53be8eca08610","ssdeep":"","tlshash":"0c21de00a610317d87e2912ebbd412d5dc7ed3a0ec33098dbf56e2150ecbae55399417","first_seen":"2025-11-02T11:26:19.610821Z","last_seen":"2026-06-28T12:32:10.790084Z","times_seen":13,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@popperjs/core@2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.712Z","timestamp":1782649883712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /@popperjs/core@2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 60\r\nlocation: /@popperjs/core@2.11.8/dist/umd/popper.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a12cb54d4ff656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.3LgWEyB4.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.610Z","timestamp":1782649883610,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.3LgWEyB4.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27143,"size_decoded":4032,"mime_type":"text/css","magic":"ASCII text","md5":"09b6539c0a5addeaf7ea1cb2c47960c2","sha1":"03cd0bc95b9fd55d85efe6e5dedb89070892fcf7","sha256":"334f5e9527e60440719fea82d1c17c413cab486d0ed24be59be405d62df819de","sha512":"09e02822de93b9d3dc5e69524ffdd72d41717e156b75d1dbf3b4bae48b53eabc0cd1624292667a60b49ae73186af5d7ab321575006bf3dbd7a61b4581723cbb3","ssdeep":"384:hpBOB+BuBEB5B3B1BnBqoco3z/NzjNzPNzf2s2Ff6yw6w6b666A97wXFCwXFPwXo:5FxPrmKOE","tlshash":"36c2ce40b5b2967c7836617c2bbd120cb2ec61c7bd9e8ad83bd035196fc5ba45731ac8","first_seen":"2026-04-21T04:13:56.442544Z","last_seen":"2026-06-28T12:32:10.790689Z","times_seen":10,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/Stake-preloader.ynQo6d0c.gif","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.702Z","timestamp":1782649883702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/Stake-preloader.ynQo6d0c.gif HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/gif\r\nContent-Length: 269825\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269825,"size_decoded":270037,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 512","md5":"f3aa4d971691ea58edd3c7046f87651e","sha1":"6f696718ce4ec96dc8551850c50742d509e45da8","sha256":"af426838bcfbea74649ade4f4285f1a126e1e082f5e79ec94687587d62249bb2","sha512":"fd6573a6acab20a1cbb2f7dfb9dc8469d489bcf565d3a275b655969c9600cc250d50e5254b70057696fb1b4a8bf8d36a0aa3cbf9eeb9846eee8f8e829e0abfb8","ssdeep":"6144:wlTBXZc5Eeq8ZywIJYt15OQTASvR4NGoFp0wI4rqnlVuh7N1YI:wvXZYhga5OQvR4NtI4rklVuZN1N","tlshash":"28441295645d8efcfe723d3072986ed260956dd17ce1f20f70eeb998d2a1788218438b","first_seen":"2024-08-28T21:53:05Z","last_seen":"2026-06-28T12:32:10.796677Z","times_seen":33,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":597,"dns":0,"connect":0,"send":0,"wait":82,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/default-casino.CqlOLRkM.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.742Z","timestamp":1782649883742,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/default-casino.CqlOLRkM.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":981,"size_decoded":801,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2787956281f9a10ef5b929bdb57c1101","sha1":"f3b4b04b8b356e9e6a7d57ad49662ef402ccb68c","sha256":"c4713b5f9e65413d2ee4246d7a66da14b23e84317a02e65ce31b5dc9a9118015","sha512":"fc6b44b1050865ebebb3bea4ed4256e13ac74215539e49a7b5464240619b931119dbb684aaaf4e1d0115d5e2b608656b8cde52ee04f6467ebd5203875d8415bf","ssdeep":"","tlshash":"1b11441a83da9426f02582889b7caa817770e043c2549490b5ff7e69ef24ac11c0bbf8","first_seen":"2025-10-05T12:06:47.194169Z","last_seen":"2026-06-29T09:37:23.274328Z","times_seen":152,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/6ca18ec1ea689aa57fc4f0bd11d3361dcb458ba4d13164e5415e203685e3355f?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.873Z","timestamp":1782649884873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /6ca18ec1ea689aa57fc4f0bd11d3361dcb458ba4d13164e5415e203685e3355f?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 1412a0fed32c34ace8c8b7392b5154c7ca7d3529\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 22 Jun 2026 21:10:17 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 487268\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230232-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4623\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4623,"size_decoded":5252,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b5c1c356f3ff2b1478b7c56263179567","sha1":"c82223df3c6e688f4f1f45ece5e5ad5700ce62f8","sha256":"88c0ef0c550da62a60d90b8c8d094a0d47942b19635b828a9a5f78e947a14f0f","sha512":"dd62d058223f3c6928074857b7c04373afdf0c882c5971738300d3d3ad4da91a96b7de1e53c1d8d021dcd9b3cab99e31beee5e874290e37465164b9c341ff9f6","ssdeep":"96:+NEv65N26MT0D5MdtbZPAVwzVElxCj7N6WYjD:+qv6oYNMtKwQo7oBjD","tlshash":"e2914df6ee379756e935d37808f55f96b6c27328d33133496018ab2e02415d4ae4e0de","first_seen":"2026-06-26T22:39:15.662253Z","last_seen":"2026-06-28T12:32:10.798581Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/5e3e937e6d0694a8dce0576719c3db0e66b126d5adf7c4096e4dfe1a39907fdf?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.881Z","timestamp":1782649884881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /5e3e937e6d0694a8dce0576719c3db0e66b126d5adf7c4096e4dfe1a39907fdf?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 2e41905f2a5faa8fc059569e309171b3e2452365\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 15:37:25 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1112039\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220055-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11323,"size_decoded":11954,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"40e0bd5e985960163547142362d0ced3","sha1":"fd6629ec3077ba3241cee31b34d147ba33b018b4","sha256":"cd105d610f336d8f0f4f235db941be6406b5b693819e1e8661fca8406a6a0896","sha512":"5ae91f3f7b5bf66a800dd0d92c139a2e6bc118e9236bcaa85539f0b23956f2745ed763fdc3013a2cfee82b0170f57a1c266735e00355f595ab646d998dc0da0f","ssdeep":"192:+EUoYNMtKwQihg5mbX8vnM958G1hmETSpsOBD14oLJQCcNvZdUVFgahl+Qm8:pYNg7QZmbXaM9xUETSCk14oOD8vtr+c","tlshash":"0932afbdf2b5e3e5cbb5e9fc08510b91c2e6311893a265fbe05d5d1319810c09e9e15e","first_seen":"2026-06-26T22:39:15.558983Z","last_seen":"2026-06-28T12:32:10.799095Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.8q9t8mR0.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.600Z","timestamp":1782649883600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.8q9t8mR0.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4752,"size_decoded":1401,"mime_type":"text/css","magic":"ASCII text","md5":"87f48af8c38e543be8223341dd25aab2","sha1":"2457ff9976f64f094b1d4f029ac30a97384837f8","sha256":"8cf6ab41cc69275da0f1ccb826101486eab7e5bc2da81c8a07082568201f323b","sha512":"5e3eb2182ddb0076a25b1bd4bd216c7e8ac7f5659a9496181312755494199f55f92ea359968c9c99b4f949372826280733c9dfa201e007721c8c2e1af5ab5e18","ssdeep":"96:GGQaAGH0mfe3m6buK3hPXPjHnN8NsQkPTJi3D96ErvS:G2zUmfe3m6buyvbHN8iQ2w3pLS","tlshash":"cfa100442a2318786d2fe1682fbe635ca36960c7dd16c8dc3bd563040fcb2fd5962b84","first_seen":"2026-04-23T03:17:36.136567Z","last_seen":"2026-06-28T12:32:10.799615Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@popperjs/core@2.11.8/dist/umd/popper.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.817Z","timestamp":1782649883817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a12cb54dd88456a3-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 58870\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 28 Jun 2027 12:31:23 GMT\r\nlast-modified: Wed, 17 Jun 2026 19:52:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:whL0tQWoY1Ku1iskqPFvmZ+CHsvmRWx/PIoEvIeWh4I=:\r\nfly-request-id: 01KS1Z8ZM2F60TJ22545W7A12F-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":20122,"size_decoded":8229,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-06-29T16:51:02.184033Z","times_seen":11544,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sanity.io/images/tdrhge4k/stake-com-production/71e15c9ccd041710ead4b0d1297d09a691b99f4c-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format","fqdn":"cdn.sanity.io","domain":"sanity.io","tld":"io"},"ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.836Z","timestamp":1782649884836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanity.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:8E:04:FA:7A:E8:3C:E3:65:0C:EF:9B:20:BE:E0:B7:35:28:DF:31","sha256":"EC:EA:80:B1:76:4D:5A:2A:21:4D:14:C2:69:9B:19:A6:58:1F:CD:AD:62:43:D5:66:C9:8C:AA:47:AB:3B:F9:AB"}}},"request":{"raw":"GET /images/tdrhge4k/stake-com-production/71e15c9ccd041710ead4b0d1297d09a691b99f4c-1080x1080.png?w=220\u0026h=220\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: cdn.sanity.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 7356\r\nsanity-inflight-limit: 200\r\nsanity-inflight-current: 0\r\nx-sanity-asset-storage: gcs-default\r\ncontent-security-policy: script-src 'none'\r\nx-content-type-options: nosniff\r\ncache-tag: dataset-tdrhge4k-stake-com-production,dataset-tdrhge4k-stake-com-production-asset-71e15c9ccd041710ead4b0d1297d09a691b99f4c\r\ntraceparent: 00-e3ca2eaddffb1c5882603dbf78f5dee8-52ddd3215d58782b-01\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nxkey: project-tdrhge4k-stake-com-production\r\nx-varnish-age: 0\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ndate: Sat, 27 Jun 2026 13:05:21 GMT\r\ncache-control: public, max-age=31536000, s-maxage=2592000\r\nlast-modified: Wed, 31 Dec 1969 23:59:59 GMT\r\ncontent-type: image/avif\r\nvary: origin, accept\r\nage: 84363\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7356,"size_decoded":8265,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ca7b6bda7582be138dcd785d82083d7a","sha1":"61a3d421c75df885ce84702a085c84efe13e139b","sha256":"12ff5bcb1cf410bae08e2322f913a7f2b9b2299a351487917cb898fc9a66ac9b","sha512":"59daf95e9b0f355ce80704fad315084c1035816ff5dc22c36246be004ceb71f97b040c07b0b9243d7e6f36e526825768b213104156be24282124384bef7f4c51","ssdeep":"192:rG/RjMnivMi7/2iUVBhHhp75HGYjY4qFGhstr:rw9vDUVBh9HGGY467","tlshash":"5ee17d316b510e13d869857938702e2e7376e226b56d06e2a923d60cc83e7d5d8db871","first_seen":"2026-06-26T22:39:15.520317Z","last_seen":"2026-06-28T12:32:10.800675Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":16,"receive":4,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/c96913931362bf3c7979b1118049bc427f30bbf8f73483fdb8f678e045613ec4?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.884Z","timestamp":1782649884884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /c96913931362bf3c7979b1118049bc427f30bbf8f73483fdb8f678e045613ec4?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 40cf7608bb0d0a1a4eb82207e6f7eb6a8daa7afa\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 18 Jun 2026 00:26:49 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 907476\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230050-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12724\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12724,"size_decoded":13354,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"49b77586a8a3013f577d06f06d5f29c6","sha1":"e6bf60c73b63ca5c22704c2d49423f66acf58c35","sha256":"4a32557c2d0f912aff180c3e9d444e001b8bbcac8333cb3eca0c365805fee1df","sha512":"2a3617d8949b6944bfaf18d0f2ff897555a69baf196c7596856252550f54d49846dd0d556b071041e24f1a9a5d9b23e49bbc29de327514f2b12ac607f2f3b6a2","ssdeep":"192:+dUoYNMtKwQytNjaIPy9tIlQv5DvCXxsDvfsKKuRcB7yaU7m2uh4aRBafmoJCoeG:SYNg7Qya75DvamrsgcByduTBWQG","tlshash":"b042cf7dbc32e9abe93ac9fc49fe17d583b0b32cd3626f1ea05c0a3640450825a4549e","first_seen":"2026-06-26T22:39:15.678642Z","last_seen":"2026-06-28T12:32:10.801173Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/7d2fa321829e2521d65be3e9670583280b2aaf8da238ade6dab5a4c839dc13d3?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.888Z","timestamp":1782649884888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /7d2fa321829e2521d65be3e9670583280b2aaf8da238ade6dab5a4c839dc13d3?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 1f7012ec5ed425c1e9baa5ec3ed51f3fbd03c71b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 25 May 2026 13:05:19 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2935566\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 9259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9259,"size_decoded":9889,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"91a5d0f9d060c26dcb209cc1e9b42fc4","sha1":"14ce34f1db123efab409ee5ea189a6586f6a7805","sha256":"74b56d4b98e4e7caee3d4d39fa5d737797381294f1da01f88637980bb895e62e","sha512":"6f858c5bce8a1010a1c1984bcd72f099cda64ceaaf026a5b0f9471c447b5cd0af530dca7ae811b02655e1bff75b7f8838cc170e3000a47504dcaa448abfc05f6","ssdeep":"192:+8UoYNMtKwQYLKdsuNumb00dP4YPi1Mi3hGpwJ:xYNg7Q/dDNt4YPxEwi","tlshash":"72127c396ff767a6d458e730abfb6f24a70b652cf76079423425b92602902d0fa42846","first_seen":"2026-06-26T22:39:15.67323Z","last_seen":"2026-06-28T12:32:10.801841Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/SportBetOutcome.DYRehc2F.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.574Z","timestamp":1782649883574,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/SportBetOutcome.DYRehc2F.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2738,"size_decoded":1032,"mime_type":"text/css","magic":"ASCII text","md5":"1ca8a85ffc124cfc11ba1b94743b745e","sha1":"1eb205b5d0dc1337f034627ffb5bd112aac9262b","sha256":"a52abab449c30002b4474386cecf8462a40099b4fbbdd5c41dff4a0dfcb9295b","sha512":"e69dfa7b5163a3b6f8c0bf95394f8c599e17684191321db8fc18e35e62aeed9f65b07451b8f63c66177acf8c9d6952bf5bdae94e55aa05e66e5bf797cb2600f6","ssdeep":"","tlshash":"1b51e30cd1a214fd2c13517c1f3d468afb99f0d7be244bde3e8455140fc95f622aa9a6","first_seen":"2026-04-21T04:13:56.623149Z","last_seen":"2026-06-28T12:32:10.802411Z","times_seen":10,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":47,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.DziR9ybL.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.581Z","timestamp":1782649883581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.DziR9ybL.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":573,"size_decoded":529,"mime_type":"text/css","magic":"ASCII text","md5":"ab73f4797e7bfa5764378f148f31741f","sha1":"7124bae81a682980c2809056bfbe7bea3e0e3eb6","sha256":"4ef50e77f1d296170c1ed096e934b8917af23925de7966abf432cf8cdb17d34a","sha512":"01e6586be744248082189600626813dcdcd01feda0654c03266e1df9934fed16c8ab043681b8e1b9f6de71077c6b938eb0cc85a256b0d2f898fb863d56306281","ssdeep":"","tlshash":"1ef0e1ae34d124184bba0030bd380505725d37d38b3785c5330290241fc9de863e0df6","first_seen":"2026-04-21T04:13:56.470151Z","last_seen":"2026-06-28T12:32:10.803205Z","times_seen":10,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/favicon-16x16.webp","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.541Z","timestamp":1782649884541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /favicon-16x16.webp HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/webp\r\nContent-Length: 436\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":436,"size_decoded":646,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c83c13415959b2647594b32139f8fcd9","sha1":"110af6ace33c96e782afa24db3af71d7b94c8148","sha256":"4c98ddaa5abed61b76fddb903e8e8d2d3e677178efc9d3f661df72e159199c9c","sha512":"f4535d089f57579b982fd895c62e52629c8d53d36b6d1a7d81a0212de1b266b48571b2fc9cbd51676e4f6833f90ebb1403d3d96553de4c92ee35c901c38bd122","ssdeep":"","tlshash":"3fe0236c2f21fc29684a398712b9b24940a053c16ac0c637ccbf60ae2ed52e335b4c91","first_seen":"2024-12-22T03:48:43.542814Z","last_seen":"2026-06-29T00:10:56.068827Z","times_seen":122,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/729642d5f4d120811b3ad9c8d0d62709c67085b0427e6b18160afd5eb6c7dcf0?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.865Z","timestamp":1782649884865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /729642d5f4d120811b3ad9c8d0d62709c67085b0427e6b18160afd5eb6c7dcf0?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 25b59ee9eb4bf7e6aa6e73dd7f433ef50a59e6d0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Jun 2026 02:47:28 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 467036\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220068-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 16458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16458,"size_decoded":17088,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ec80837b60b7ce6696ee291207370730","sha1":"bfd0b7c506cd473eee67d1d00dcd28389a8e2908","sha256":"37581f636eeccf11c282a4ceb8f56ba56ae299a8417dd58fa1afe4c2344faa76","sha512":"14aeff35c30c95edd5e2ddaae6c013ad792cd65cb13764d8a6748da3e74c56760effba93592d73c0b3a6b38b32856cce0022326189c759df4fe9a805ba016e0e","ssdeep":"384:OYNg7QYQ33vd8WrbvK/+8OsgLPAmWCKIx:OYyWnF8su/iFWFIx","tlshash":"d872cf7867cff4c1c2a1c23854f06ffd51c0a21ea621a6f6e788da2241e56c009dda77","first_seen":"2026-06-07T21:34:39.208591Z","last_seen":"2026-06-28T12:32:10.80663Z","times_seen":58,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.Dp5HXgCJ.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.584Z","timestamp":1782649883584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.Dp5HXgCJ.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2468,"size_decoded":926,"mime_type":"text/css","magic":"ASCII text","md5":"d10f4f3d49f77f3529e81b5ffd6d24cb","sha1":"796270b867f128399f8fd0b3476a44cb9497f766","sha256":"41dc3694abae7f6a73ba18913bae3a5421bc3d88c5a769d7249304a07e01c2ac","sha512":"a6a37b700a2efadf51fac8bb801eaa993ec47fcc273aa6d2df91cb5060a01ea4473feacc8bf91b5d694db9eb2b99331e5671648ba3d0e7ea2972ef4676da681b","ssdeep":"","tlshash":"2d5112602522396c9a6ac22c23fc2359b1e912cb6f0b9ce83fd171580fc6d909761f9d","first_seen":"2025-11-02T11:26:19.670924Z","last_seen":"2026-06-28T12:32:10.807338Z","times_seen":11,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/fffebb8ad954c1fdcaca444cf83308ef0226ea06f8aa7a8d0a4e5f50c1d433c7?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.870Z","timestamp":1782649884870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /fffebb8ad954c1fdcaca444cf83308ef0226ea06f8aa7a8d0a4e5f50c1d433c7?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 70adfc1db1452bdb03483e84ae86f0ac50ba08e7\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 20:39:21 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1093924\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230115-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4817\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4817,"size_decoded":5447,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f1e51fd28a660af12bd435949b1ced91","sha1":"a624d7538d6d3473d20c278c3c458a9d63d8725b","sha256":"28003d221ed6b3166b7e3aa4ec9971519f46e9a9a8ab73321d5c93dc145324bd","sha512":"951ae2c1017712b6ae047bd250514c0a9f478d2b45e242c265eda380922d3b02e5330d7ceca29c53bd328a33b772d601993b002560ca8c0a863113dc66ca2c39","ssdeep":"96:+Nxzv65N26MT0D5MdtbZPAVwzVElK/P1+glKLZI:+Hv6oYNMtKwQx0KLZI","tlshash":"d4a13a7deb629b57ed35db7828f1a7e0b3a77374e7617e5b20246b1102420c09ace08d","first_seen":"2026-06-26T22:39:15.56453Z","last_seen":"2026-06-28T12:32:10.808544Z","times_seen":3,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/d9500226f7b22d783516a7f53412f623030a1ffe4ee383b54d954c42a8c65b8d?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.876Z","timestamp":1782649884876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /d9500226f7b22d783516a7f53412f623030a1ffe4ee383b54d954c42a8c65b8d?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 8574fd52f464564968e86fdee78fb43ceb0ca7bb\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 21:24:32 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1091213\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220043-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15131\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15131,"size_decoded":15762,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"13856e7072d428ee928745782099f5c0","sha1":"a8cee2e457921a5df6ec790626d09ff58592c001","sha256":"881782c9d53f64d67fb28ad6c03916f1785a5049a3506fae88537c10aa4a0ba9","sha512":"eb255e5b7759abbce464e6f2ee5f21ea4ba83ebb7f399dc771ded2ed01131e0187ac17dc5b41cca8acafe34e771fc5b0349bce61694c9e092e57f21f5d0b12f4","ssdeep":"384:iYNg7QlX8uXymrYnU84GjLzxZHVb81FKv3nwLJ:iYymxrkU8DTHVb87u3c","tlshash":"1a62bfb4ef6e91a1e15aa27c54c4696c8bf3533ef7b57be7103c151c2460980a9cd14b","first_seen":"2026-06-26T22:39:15.623234Z","last_seen":"2026-06-28T12:32:10.8093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/31d384b25e3d6c8704f84b3db84e31bceacf2ff16279fbcc25ad9e1bf55a7564?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.882Z","timestamp":1782649884882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /31d384b25e3d6c8704f84b3db84e31bceacf2ff16279fbcc25ad9e1bf55a7564?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 1cd86232b5fd2fda5efab3fc71f80391bcdb035d\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Jun 2026 14:32:08 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1547957\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230029-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12785\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12785,"size_decoded":13416,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e91727376514599ef63787bee3456351","sha1":"12eb738ee9c80d19eb554c26ef078d68e8e23990","sha256":"73be8b8623dc62768bc0137b2a41bfd3dddd29f62ad8cc595cb32873b6ee7ed9","sha512":"808f01102e6fa3c0b693abf1e4cf4545d78a505f17294bde0520e07f0459af78966eab7c728c53d3dbd68b19e048ed3c7384ee56fa82263fe1c587f1f44c7b45","ssdeep":"192:+cUoYNMtKwQ9FU4IaUiZXotZQv7NeCzxlQ3ySwVP4sryNpWA:1YNg7Q7URWZXovQvp/Qf84IyN1","tlshash":"7742bf7dfa75aba3f425f8b80cd19bd0b28662a4e365be45268c797b53110c039050de","first_seen":"2026-06-26T22:39:15.46048Z","last_seen":"2026-06-28T12:32:10.810022Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.BScHSd8e.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.639Z","timestamp":1782649883639,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.BScHSd8e.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 174\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174,"size_decoded":382,"mime_type":"text/css","magic":"ASCII text","md5":"3e42231dd234b232cc2bcfbe5ee2f449","sha1":"14a4325ae57e21970a6ed6a3fdc89e1a4c12fb41","sha256":"b42b888f0d7790c750fc25270a0fefbe4340e12f17e03444aa47044c518987b2","sha512":"06e80f2f6fb01cbb367e5209859783e0779fc463669170d8a2c03572f5b86387f9a8e97d87cfc5f99979dcfecda1bde79e9b3c66d567b7e1df758db5f15c37be","ssdeep":"","tlshash":"46c012eced18b17cec64a04aaf1918dd504961804e1204c59966356017c7ff21e51608","first_seen":"2025-06-15T14:46:41.066115Z","last_seen":"2026-06-28T12:32:10.810556Z","times_seen":18,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.DA8wZHaN.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.640Z","timestamp":1782649883640,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.DA8wZHaN.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1082,"size_decoded":641,"mime_type":"text/css","magic":"ASCII text, with very long lines (1081)","md5":"fa6482057aec0fd5b1bc2d2e30575f64","sha1":"1681a9beca9a1c5c28920c93aae3b6c7ab75bae0","sha256":"2abc2803fc7549b4eb993aa5fd253686e3a97163ae04914c38345e76011e3322","sha512":"b2e5f548396c61c95d2ccd2987dfe2fe493f77e6173b233d3da9bc200ab1d2d153755525c3751e7b407133f5fd3cdd9790c1d5454322849309d873c859221d1e","ssdeep":"","tlshash":"a01176442c08507ed9a7a12be2ec2fe8d0efd1cdbd2208ee7385301955c2dd42b6a58f","first_seen":"2025-08-14T23:01:38.863596Z","last_seen":"2026-06-28T12:32:10.811379Z","times_seen":17,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":373,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/be6c453a8f450c2fbf5181abc844f080b537458061aeca3902575510acacdbea?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.871Z","timestamp":1782649884871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /be6c453a8f450c2fbf5181abc844f080b537458061aeca3902575510acacdbea?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 6e35b50a92791bcfc585473d4d21fba828b09d9e\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 12 Jun 2026 03:11:45 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1415980\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230153-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4805,"size_decoded":5435,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ef4234aa567dbc2c452d1c834f4d53ae","sha1":"613b42cfa0a5254bb0a2bcb26bedea864ff9b141","sha256":"e9c00b69be7c241099369496601026b0ebfa3e134c74d3cc9876a3b0eaaa31cb","sha512":"c6516a555a1b8bfad394e2f48f6de0d898dd3fab87b7e32043cad93e485cdeee761ed18e0666f8c04f2b3a81c34fba0a4372449e0fa6865964e2fce363dbadab","ssdeep":"96:+NJv65N26MT0D5MdtbZPAVwzVEl2+C4fImYB:+zv6oYNMtKwQZDs","tlshash":"e0a16c74ffa797d3e876db3454e65b9151a23339c3327686312cba2504485d0ae0e15d","first_seen":"2026-06-26T22:39:15.582755Z","last_seen":"2026-06-28T12:32:10.812435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/c316b233f4ee998d8c21f6bcbc4e8eb5e3b801dca6003061707904236ef71082?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.885Z","timestamp":1782649884885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /c316b233f4ee998d8c21f6bcbc4e8eb5e3b801dca6003061707904236ef71082?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: ffe5413c13e9e429baedda08fe9f5ef7c6bb413f\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 25 May 2026 23:31:16 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2898008\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220166-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13495\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13495,"size_decoded":14126,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b0c3c5136fa90fe6edff37ef5b500c22","sha1":"51e0c62617fce45dfe886579d709dbcbc31b8a70","sha256":"8e52ca871d977c275118d13d032603b45165ce39531fb3e050b9670e32b7b5b6","sha512":"d6eb0afe11d9cab743b0675f906ec0a94f8030d85bfafd60bd4cde4c1ebfd457cc99826d9efc110d1590307a5c9d0a188f6bb4667f032ddad73bf5c642a72da3","ssdeep":"384:oYNg7QT16sczslemFDkEct06oMvOkSQOZ:oYyxTkdcRomOkS7","tlshash":"1d52bf2eb223fa77cbf6d6b650f367a125737761c332bd25b850461141016c71e8b2b2","first_seen":"2026-06-26T22:39:15.477574Z","last_seen":"2026-06-28T12:32:10.813116Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.NU_6udQf.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.643Z","timestamp":1782649883643,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.NU_6udQf.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":731,"size_decoded":560,"mime_type":"text/css","magic":"ASCII text, with very long lines (730)","md5":"380ebe58560d01374074b0d4565e3014","sha1":"fb71ead32ac6e2c42fd96db283ef8e99920f3cd7","sha256":"d86e2238a152be93e704f2b7752aa48aad524ab460778c2985fc3b7cbd583ce9","sha512":"0aeafa1b502555d38aef0e6ee9cb9838271d47663e9b217fb8857dd18ce42126c389bd655e0bdc8350105d1cf5ae8b34432b356a9fd03024bae69d8aef45a036","ssdeep":"","tlshash":"8001641c7750b52cc873c02829f41599e3bdc484ff2612c99762271c08cff9b0b72aa8","first_seen":"2025-06-15T14:46:41.099956Z","last_seen":"2026-06-28T12:32:10.813608Z","times_seen":18,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/coin_base.CWKz-dIW.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.740Z","timestamp":1782649883740,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/coin_base.CWKz-dIW.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":839,"size_decoded":657,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bacc6df1c1f747dcf159bc94fa4ecf89","sha1":"05d34ecfd9703c822044cb4ea5950976554a6a37","sha256":"8fdb4995204a3265b06b99c50f81db77cf7e59a4a45351cd11f697a3ad0d89e5","sha512":"71dc3b452a9f8aa4c04a991f042d7a2c3e061f6c425edcda379424ab569b4efe61b0881f6b4968ba8b54d0662cd13b9eca992cc156fcf2acc99037143d20c64b","ssdeep":"","tlshash":"2c01abd9112ce6d0f6838b7bc4b8684124f760fe7fd652bcc4c7b6d198112de1809ad0","first_seen":"2025-08-14T23:01:38.7592Z","last_seen":"2026-06-28T12:32:10.814259Z","times_seen":12,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n4\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.326Z","timestamp":1782649884326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/efe4a5/00000000000000007735e609/30/l?primer=9e9145798bfc6b7954a6cb7abc2ead67980260945baf1d129a2d2e98d0352745\u0026fvd=n4\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stake1401.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 43476\r\netag: \"51f819acbccff2699ecc685e06624834f7e6fabd\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 28 Jun 2026 12:31:24 GMT\r\nakamai-grn: 0.0f772117.1782649884.cfa16d3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43476,"size_decoded":43858,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 43476, version 1.0","md5":"6f4d2c32ad623ebb06c8454972594424","sha1":"d2078a72234d13911cb430e0ee4cf8e7a6090b02","sha256":"63c7b752ddcfc751cc224faa483001fb2ac5265018ed9b426e3d8d30a85ea03e","sha512":"ce9aab56b5d62f21b333cb5c2f9c3ac82cfd8e96fa681922424ca2174c2762fdb2f33357eab92dcb5ce5bbcee080dd7e5433796130f62cea233cf76e4a35a649","ssdeep":"768:MqSK5iA+Ylccjc9mTm5OfUlFqsfyaUOv5bmJsD7A5LgktYqzSbjaG:15iA+YqcSkDKI4yapv5SJsn4EktzSXaG","tlshash":"bc13f238a4268624ae58f4a837a4453934fde8e04e949b3cdbe50cb7c7fad5480a3751","first_seen":"2025-04-24T13:55:33.541551Z","last_seen":"2026-06-29T09:37:23.329934Z","times_seen":208,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":3,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake.com/images/apple-touch-icon.webp","fqdn":"stake.com","domain":"stake.com","tld":"com"},"ip":{"addr":"104.18.37.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.538Z","timestamp":1782649884538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stake.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:57:58 GMT","end":"Thu, 30 Jul 2026 07:57:57 GMT"},"fingerprint":{"sha1":"EA:C8:B2:18:52:17:0A:96:14:61:C2:59:CE:B9:80:B7:E7:B2:51:5F","sha256":"EF:2F:DF:5E:5F:0E:3E:02:39:6B:DE:54:FA:00:FB:92:F0:0F:BD:28:A6:EC:5F:6B:C5:AE:73:9B:D4:4F:63:78"}}},"request":{"raw":"GET /images/apple-touch-icon.webp HTTP/1.1\r\nHost: stake.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nCookie: __cf_bm=i7AgBGQSYSCmU3Ip2C6wasnTHsElNKzwzkP26S2PdVs-1782649883.6580698-1.0.1.1-NLG30ywGg3C9EPS41YO53PfyJn25n4T2qo97dqkErJai9K0QuwngBKQyKhbHYBar7bkNa9AEHWIKL8K_Tsjs5pl4c4kTtikk8Oz1g.FDciSI_AT93_yTlKx_WkKyUF4K\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 28 Jun 2026 12:31:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-KsyRhvvc9dBeoNdw3t8pw2' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12cb552588032fa\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; preload\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a12cb552588032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/102cf3d7c840018b939cd787bf013e080b996d80e604f3008f21dddf1f1aa201?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.854Z","timestamp":1782649884854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /102cf3d7c840018b939cd787bf013e080b996d80e604f3008f21dddf1f1aa201?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 3858\r\nx-imgix-id: e3bf36203c33d71e467a410edde0e31d2d796757\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 13 Jun 2026 10:07:28 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1304637\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230205-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3858,"size_decoded":4468,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f8d908e4c3100f77f414b08d17be91c2","sha1":"8ce1a5eb49d7a714f69ad89ff91267e3bb421643","sha256":"4a69dbc43656897191eb0b099241293893cdb397e30a537aafaca73db1b1c728","sha512":"cc4e3bf7b9d67223db0087dd76ee344a966eaa309f32bd6d60885f0db024958ee36e568b620a051cea3fa5dbf37f497e5549f5b6a03c31e5a01366b740ac0c63","ssdeep":"","tlshash":"da816d36e2a4a708c65983fa50a75f3ca9b43827da3776196c527845d3cce8d4a00ae2","first_seen":"2026-06-10T08:44:21.240936Z","last_seen":"2026-06-29T09:37:23.361506Z","times_seen":11,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":3,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/ceb29aff91c7ba3033e44ee289d2eeb4e85088cdb56daac04d2e82a886542b05?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.875Z","timestamp":1782649884875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /ceb29aff91c7ba3033e44ee289d2eeb4e85088cdb56daac04d2e82a886542b05?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 6a89dbed205001dd547420f3f7dd67ef6512bc9b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Jun 2026 00:59:50 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1078295\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220039-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 10823\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":10823,"size_decoded":11454,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9da4aa92e1f7d4056002ef27e5512116","sha1":"20290345dd01fc2a938fee447fe43f04851977ca","sha256":"57d0a3d0a36d018b4274e355c01e62a9b37f7b046bc6e020286475935ce0f7ec","sha512":"e2f172dcefa5bc22a34308bd0d930d4f32554c682152e43d471b186484df75f8f781d40660014c5052f7da72c81bb46250a8d2ef831b048caa95a88e6f29e5b1","ssdeep":"192:+aUoYNMtKwQ2TLGiweH6ysbTTsUaeNTvRzlbqq2Cxj6oh/KR:bYNg7QoKYH3sbHrZzoq2CxSR","tlshash":"7a22c07eff17b68bee73c37524e1cbb062a4623067711407a9147f3b0405ac66b8e054","first_seen":"2026-06-26T22:39:15.56624Z","last_seen":"2026-06-28T12:32:10.815421Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/BetsListBoard.CRjHQI-V.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.624Z","timestamp":1782649883624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/BetsListBoard.CRjHQI-V.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":531,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"c682ec9c5d42825546944781a9419a99","sha1":"debfafed6ed941ebe743fdc89e16f55f91026c6c","sha256":"149812f6ff161e287f75d90e73e4875b0ebb9a6d00400cb17dc4d89e79efc795","sha512":"702bc9708da61b54b7c8af6f5bbe49913ed7bb766efced1c95857ba040a31018f93a4050d31020633c85b8f49a3b97497d4958c9f6a0aef191342ed61b126346","ssdeep":"","tlshash":"26f00e641120753cff72b036e3a5658ce0488143dc3308ddd2187d2502caff10361848","first_seen":"2025-11-02T11:26:19.677714Z","last_seen":"2026-06-28T12:32:10.816045Z","times_seen":13,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/DetailedCurrency.X-BMXZy5.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.648Z","timestamp":1782649883648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/DetailedCurrency.X-BMXZy5.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 19 Jun 2026 20:58:04 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]}],"data":{"size":1693468,"size_decoded":275557,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (30752)","md5":"49153782c6e188a8b808178934ea8544","sha1":"67b65d54cbf15e18b42344e0d3e5919ecc8998f4","sha256":"cea2ab18d1566f64caedd33f14af83b038a28521894b51f37bc5a7213873880b","sha512":"7d7d39802a645b175bd4f22e31321a37741462a16221e995ac98d9f8e53891363a23971ddf97b8e350680afa489cf9eca4f762c87371ece87c4206f635adf866","ssdeep":"6144:7MHS4sWBq9LJqbJr+d1tkeYI4GCdXGr821+7CxbtyJd02tMPkheHVYwVEyG+8Ei6:pWPjr7NgLz5FiUK0r3","tlshash":"38254c169500501f5013c4a8fa39791af25df8c7fe6e5488bedd83182fdacf2d26e698","first_seen":"2026-06-28T12:18:07.320134Z","last_seen":"2026-06-28T12:32:10.75912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":423,"dns":0,"connect":0,"send":0,"wait":56,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/images/seal.Dfnd6-1N.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.754Z","timestamp":1782649883754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /images/seal.Dfnd6-1N.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5021,"size_decoded":2080,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"017e6deb000262ce2c8e08d8db6e3076","sha1":"77bea7e552b081b1179ce4b948310dc98355961d","sha256":"e0ac17c002882a6251466c74f895e54c6a24e6d0b88c705c710a24ea669079c3","sha512":"0953d615f8c4a35e55c441b034be98fa08bc8cf9b7600b181daa0719bc4943eda52955d6a5e46b149bf121d7910a9707ec7bd421adc877c8b97cef2d3f242576","ssdeep":"96:PJ9OcDRo9twSxV784UJqH0x0u8BQDMlUioUr784p7/zaW784WAeul5qX:PJkcDRo9tNxd84eKncUv84Bf845L5K","tlshash":"fca13d6a4309ab7844c3a516cf399492354288cbe3b4e2dcfff3671d66439f6e831660","first_seen":"2024-10-16T14:43:27.087326Z","last_seen":"2026-06-29T01:03:46.123161Z","times_seen":911,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sanity.io/images/tdrhge4k/stake-com-production/a916e1b1393e0e8aa6dae4f17026984144f24037-436x440.png?w=220\u0026h=220\u0026fit=min\u0026auto=format","fqdn":"cdn.sanity.io","domain":"sanity.io","tld":"io"},"ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.819Z","timestamp":1782649884819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanity.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:8E:04:FA:7A:E8:3C:E3:65:0C:EF:9B:20:BE:E0:B7:35:28:DF:31","sha256":"EC:EA:80:B1:76:4D:5A:2A:21:4D:14:C2:69:9B:19:A6:58:1F:CD:AD:62:43:D5:66:C9:8C:AA:47:AB:3B:F9:AB"}}},"request":{"raw":"GET /images/tdrhge4k/stake-com-production/a916e1b1393e0e8aa6dae4f17026984144f24037-436x440.png?w=220\u0026h=220\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: cdn.sanity.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 11796\r\nsanity-inflight-current: 0\r\nsanity-inflight-limit: 200\r\nx-sanity-asset-storage: gcs-default\r\ncontent-security-policy: script-src 'none'\r\nx-content-type-options: nosniff\r\ncache-tag: dataset-tdrhge4k-stake-com-production,dataset-tdrhge4k-stake-com-production-asset-a916e1b1393e0e8aa6dae4f17026984144f24037\r\ntraceparent: 00-294076a360abd12f98c3338ef08d364c-c05893bcd94b7246-01\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nxkey: project-tdrhge4k-stake-com-production\r\nx-varnish-age: 0\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ndate: Sun, 28 Jun 2026 12:17:22 GMT\r\ncache-control: public, max-age=31536000, s-maxage=2592000\r\nlast-modified: Wed, 31 Dec 1969 23:59:59 GMT\r\ncontent-type: image/avif\r\nvary: origin, accept\r\nage: 842\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":11796,"size_decoded":12704,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9235d16f905555f12a2838d95641fd48","sha1":"9fa14ab153eba3a1d36708abf82adf68765c30bc","sha256":"3245cd40d268ae1ef06c6faf77521159a2f71ce7a4633129ed6ca769a1c5b0b2","sha512":"177fb2869035a94dcfd65131bd6bca66a672e7c46cb89effc283f801a547c34c191f0a8a8064e04d709e11c940a8835dcce6696ff42a2adcb1db8d6555088a1a","ssdeep":"192:rGHH484UVr9PK9+/R0OD6+6LHNTZ/SbwSHkXkFsoEsaMQmrzy2qwpWZuUWZo8tuZ:rNsVFK9eRnPYNTJtXkGo61mrzf1pkSaD","tlshash":"0c32c01999e12ce2e02d773a32e1e247a8770f57999bf5bf1622a1120977e5cc402370","first_seen":"2026-06-20T17:09:35.405285Z","last_seen":"2026-06-28T12:32:10.81719Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/b185f04c52096ac8798edb363111231056e4c17c0bfef6d565095a3ba400b755?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.868Z","timestamp":1782649884868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /b185f04c52096ac8798edb363111231056e4c17c0bfef6d565095a3ba400b755?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 65e3d25f3bf460a9de06a5d83035d9d514373fb1\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 19 Jun 2026 04:50:08 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 805276\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230162-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 5522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5522,"size_decoded":6151,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"154414bc800aed4b81b10256d58dbb18","sha1":"c2c40bdd14e5a9fa8e8c1ac80c955cac4bc0e256","sha256":"1d684033f0d5f5a1319e3727f6c141c37b691684887924759f809a4a9f0b5176","sha512":"cd5dbd3002031d3785694159c962720e7711f66eb2b9025dff504524cc3fdc1ee2dac05dc14605de8824f4c89b4c81c90c12d305d5cda4e828e3545a046b953f","ssdeep":"96:+NJv65N26MT0D5MdtbZPAVwzVElyNINrIiN5IRpmtA6Cxk:+nv6oYNMtKwQRfUd/k","tlshash":"38b15bb9bea5eb96e571d33c18e22390b2e2a22ef3237595342d6a1586041c05b4e0c9","first_seen":"2026-06-26T22:39:15.448055Z","last_seen":"2026-06-28T12:32:10.817686Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.GusufTg3.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.571Z","timestamp":1782649883571,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.GusufTg3.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8803,"size_decoded":1180,"mime_type":"text/css","magic":"ASCII text","md5":"b8495da165ca28f32096a7e37b82bfc0","sha1":"0eb779fb480c679b9172cde15daff34f5883d02a","sha256":"331f3168ca50ae267cd04dc1d4f5ebfbf81825fe9ef5f827d9da05debb45d081","sha512":"0a544fd71bed9805e2845b65972599baf1d05ef9aa4b0771cc36f8995d6367d723f13d93e068d40a8f5acdb8ff78b2418d1e430f9a38bd5a39c95f06d5e00a28","ssdeep":"48:5+lYV8RXg44ohvBlnrnrLrOX2XelNJAevHDCNFtgR4KRb6uR4KR5w7RuVVRf2RL:Rggp2XqieU/Qn2","tlshash":"340278c7f7e68d7d3a1e2575aa3e2748a10c15d3db0a8b747b0ca6101fc1bba4225b49","first_seen":"2025-11-02T11:26:19.588936Z","last_seen":"2026-06-28T12:32:10.818202Z","times_seen":11,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":45,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/LayoutSpacing.BNGVR4sN.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.616Z","timestamp":1782649883616,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/LayoutSpacing.BNGVR4sN.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":797,"size_decoded":494,"mime_type":"text/css","magic":"ASCII text, with very long lines (796)","md5":"d162a85163bc3920af5d3bc0025c2a8a","sha1":"97813a2a0bc787fb33b4fc0f47c4ddeb2354d529","sha256":"55e7903f70f3acb458143f54884b11e2c13a07fec7158d578a7d9698ad2e9197","sha512":"243e5802880b6a8e1b55fa14a538ca0e2620a7a447d6cee5a28a18277f98c9ed7d8871a300a489aa887e70d0d25cc0604a2321a0a0f9248fa20565fe8f81acbb","ssdeep":"","tlshash":"6201f9083bc0ee7c2c372137e169b96c942d146f0e1a589f8765750eaf9dbb75101424","first_seen":"2025-11-02T11:26:19.703945Z","last_seen":"2026-06-28T12:32:10.818793Z","times_seen":13,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/49a2201353bd06c3f89a9c5ff56d0efee785712e77786d4200d6fbc4ffc0e73d?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.869Z","timestamp":1782649884869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /49a2201353bd06c3f89a9c5ff56d0efee785712e77786d4200d6fbc4ffc0e73d?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: c8e7b1e5b512d9c20a4903722fa497909c7cc12f\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 12 Jun 2026 17:27:35 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1364629\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220037-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4982\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4982,"size_decoded":5612,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fc6c19ccd29c4cc52d474abc08893d10","sha1":"b19d101d240305a24bdae4f805e97fbef69b4db5","sha256":"e0f135b26b883e7e331c33adf8314afc49f341f0be4e86d877bbb364f2473f61","sha512":"100eaf6498ea1c10bc90a08b36b461e2e2ee366b2fb3c2124e028b01cc1e0eb75c8775908ebc332393a18eec1212c32bf9439f3a6fb57831ddb7ff6a3ffd59f5","ssdeep":"96:+N7v65N26MT0D5MdtbZPAVwzVElEoWoiKcSiL2D8+CCn:+Fv6oYNMtKwQZWoiKc7yCCn","tlshash":"dfa14c78ab76e387da28c3785cf42b99f2d3733cd351be952154ba0587850c0da8e05a","first_seen":"2026-06-26T22:39:15.537543Z","last_seen":"2026-06-28T12:32:10.819302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/671d6a21c12d9ddcc90b42373d4f30ac0acf61a718c3b649650bdd58a767d7b9?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.887Z","timestamp":1782649884887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /671d6a21c12d9ddcc90b42373d4f30ac0acf61a718c3b649650bdd58a767d7b9?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 4995484bfefcdcee4ce70c7e33f16facf6c4f174\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 23:53:47 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1082258\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220155-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12170\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12170,"size_decoded":12801,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"50dfa5eccd548ca2f7f94b3ef66508b8","sha1":"311fe8cce9572a1d0ddedc76bc0da343505eda16","sha256":"4a9ba30a28292de5cb26304737c0682254afd396a371df98d493632cd3a46789","sha512":"f50894eda65c467214a9de4bdb8b8b7db0b284226fb8e52421505cdf0d27235cfccfe4dd2c48e83b410d4494f1989d463575088a9b0bbf64fc772de6e64e387b","ssdeep":"192:+FUoYNMtKwQjc4KdKUoqUFMtCq70m8F9PJ6BhTsJwawVpKtt2mrnkAXEuUlDXQhp:+YNg7QjLMKEUuW/FvITsJuaXABu0Dip","tlshash":"2b42be7bb729e142f238d73425d637ba47a72a3c9fa1b34e34217a6690481c2d7cc249","first_seen":"2026-06-28T12:18:07.521319Z","last_seen":"2026-06-28T12:32:10.819776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/aba0ebl.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.633Z","timestamp":1782649883633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/aba0ebl.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4120,"size_decoded":1087,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"1e04197f5ab3b683a7e38323b243520c","sha1":"d891b0c05f4f46c94d8bc7ceca863c264c05c231","sha256":"ac48ced2b6338a2922bb0581c30108fb071754b757a605eb4ae058fe969529ac","sha512":"0ce018ee5da65fd2a2c1e84898cd03876f13ad1aac20d12e019bbe15d1f0a0348571755f538489038b9801d516923f16e872d29349b4fdcff40b94eb894a695d","ssdeep":"48:35Y2zQVh4UDEH+U/NMNJdhlIwMD8diMpHc/MbUAGrIGLTGkMhRU:pbzQPbU/NMNJdhlIwMD8diMpHc/MIM7U","tlshash":"0b81ff61c815c072d5c0ca65b0c9739d992a356ea6e498d5853a88f4fd79ee73303f2c","first_seen":"2025-01-03T19:27:01.433993Z","last_seen":"2026-06-28T12:32:10.820417Z","times_seen":29,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":335,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/bonus.js","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.710Z","timestamp":1782649883710,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /bonus.js HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1892,"size_decoded":1027,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1892), with no line terminators","md5":"b0e990098c63be3372b4bcaa2650d552","sha1":"08d9d458438e0c6e62cd18d7a34224df2aa5d69f","sha256":"c70f664fe2dd3c939b24f097313b3667d908283d23758751538f905c05f4d45c","sha512":"edd867f942afc086dd3bc471ddf459dbd184d40957a0b330348c38d5aa2a9662d7b58b194e4fd5bd1eec0c5099de53a7fe301f29c8eaeb25e7d62d5b3a0992fe","ssdeep":"","tlshash":"6c410e5a4a9c2a9817822fefbb3741e2c32ce94338f114850c2e85b17a52d65d3f6e75","first_seen":"2026-04-21T04:13:56.547679Z","last_seen":"2026-06-28T12:32:10.821294Z","times_seen":8,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/15a51a2ae2895872ae2b600fa6fe8d7f8d32c9814766b66ddea2b288d04ba89c?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.847Z","timestamp":1782649884847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /15a51a2ae2895872ae2b600fa6fe8d7f8d32c9814766b66ddea2b288d04ba89c?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 5922\r\nx-imgix-id: 34d0817eef567991d3dd7d1d6b6082ce6bc68b21\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 11 Jun 2026 08:50:21 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1482063\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230141-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5922,"size_decoded":6532,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f14ae80222ed50114fd0e6d7ee6333d7","sha1":"6d02f028e02b5f0f992307ff349d2e750ffdfadb","sha256":"ee63794f1aff8fae8b1cb65ff121c72b3ea8d2669d1acfcef2e7049c487c3267","sha512":"baafc884256e59a56d7a0f9334ef197a44bffb04a72b66e1e0ec26067038c7f1bc158a2aea00284e9b4203436a70bd76f0ce9c8c45a2f2931eaaa940178e224b","ssdeep":"96:+HFdNcXl0vl6tBHnvJtTt5C+atjd52SPPd8Q6OZ/560rJvlLJbB6lDLcGyTKFM96:+ldeV0t6tBPJtTtXW5Emd8Qx56YP99Gx","tlshash":"dac17d60b398631ae16f83b311e16b2abb66f6450e93539e944013de33544989526ea0","first_seen":"2026-06-24T21:09:52.001824Z","last_seen":"2026-06-29T09:37:23.50628Z","times_seen":6,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":11,"receive":3,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/a91aa468f459264d55fb9e2706c3684782cc5ecf716892c187122c611acf2773?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.852Z","timestamp":1782649884852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /a91aa468f459264d55fb9e2706c3684782cc5ecf716892c187122c611acf2773?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 8399\r\nx-imgix-id: da4af2706467719d051875c8bb4fa277a5f07b1c\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 12 Jun 2026 04:19:36 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1411909\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220140-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8399,"size_decoded":9009,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b2a979755c6e7138b6efd220b366265f","sha1":"e6dfeb51dc40078df6a5e904f9707e6638495385","sha256":"672ce8d462e99a337122e4c8abaf21ce6d56036ef6038137270d56665ca1738e","sha512":"e4f7c5f653a176402a4e1ab79a4db46c8925ea534fe117e0517225f4a1072e479797e11a5ca1ae8eba6cd05c199d2572bc38876aa6165880079333710df87997","ssdeep":"96:+NRU5N26MT0D5MdtbZPAVwzVElY9oe282V+vBem3BPa0EKLgZaiKEQPPnVUowe7D:+bUoYNMtKwQYR5omRSfZOPPnVqrZe","tlshash":"5f02ae78a62f7f83f49fca7800e54b146582ba7ed33234497514f92444405c8eb8e21e","first_seen":"2026-06-10T08:44:21.130793Z","last_seen":"2026-06-29T09:37:23.29106Z","times_seen":7,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/14d5410c6cf4c303d291262a10e949dc14b0ac2eca2a7a730b0401919c01358e?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.864Z","timestamp":1782649884864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /14d5410c6cf4c303d291262a10e949dc14b0ac2eca2a7a730b0401919c01358e?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: d7e56feb1d5c3f636ce575e4783736ce7e6e5309\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Jun 2026 21:58:23 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 2039582\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220108-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13184,"size_decoded":13815,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7ef549ee443d269bd2f741b88eb9be11","sha1":"b4d8b8ce1ce74537f70cc7ada9d87c370a21f1ac","sha256":"76417a6ddccaf19749feeff99aefff464129fcd1f093734270423b5e667676e1","sha512":"cd3176c9537e37eacaa3e2263ee2a7643fa496ad5b47520f84607ade564ce7cfd093bcbbdc3d771ec8414bf5933a35bcff74d2adf7b4732a866105db0178f36e","ssdeep":"192:+rUoYNMtKwQO6LsI4jqXx9RpjOb73JKuiEarIYz++zZYUIiaN8FP+JX:UYNg7QLZ4jyW738u7SK+zyBmGN","tlshash":"5c42bf2c67bdcb50eea0d73469308b2c7150721ce7997ac40964bf3b0f0669d9b4f099","first_seen":"2026-06-25T05:05:23.221616Z","last_seen":"2026-06-28T19:40:50.110132Z","times_seen":15,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/2a97a02dd2dafe4526f7f3427c8cbca3c51f29a57d4e89e2d4bc163d6e1d8a3c?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.889Z","timestamp":1782649884889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /2a97a02dd2dafe4526f7f3427c8cbca3c51f29a57d4e89e2d4bc163d6e1d8a3c?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: ccb6d21c996ceff0414978f0607c621bb5467b6b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 11 Jun 2026 13:49:15 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1464130\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230157-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13188\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13188,"size_decoded":13819,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2655040a878970ad09cde72dfa76ec21","sha1":"a5ffcd6753acc3e3798157950e167c5bfb06afa1","sha256":"8c6a677fa165843ee01f1f0917583c9a364b812b14154983d5ff66358d433717","sha512":"864ba0dd1ddc1df59ae380ea473fc6b5c3d9ab3ca342c84b0ba1885c2da18955cd77fdbced9e294a7acf8639011a3ab2752b6a7f6881dc3a761c5af97aa87567","ssdeep":"192:+vUoYNMtKwQNqM7yjBTEuTTnw80tT7nNvIZ5s8SIlEEXlbEGeLuPHf0Z9qE5tgX:IYNg7Q17kLEZ5u5sQlEElEoPWkE5Q","tlshash":"9a42bf74e673cc51d8aa9b3099ed2759b053b35cd35266eb26703e14304a3d1f8ab09e","first_seen":"2026-06-28T12:18:07.344826Z","last_seen":"2026-06-28T12:32:10.824562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/aba0ebl.css","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.563Z","timestamp":1782649883563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /aba0ebl.css HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: private, max-age=600, stale-while-revalidate=604800\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncontent-length: 847\r\ndate: Sun, 28 Jun 2026 12:31:23 GMT\r\nakamai-grn: 0.0f772117.1782649883.cfa143e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4120,"size_decoded":1316,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"faaf770c5c4eb233038954a4da33060a","sha1":"e9eff07fe9424a88d377af10d8c51336e752e89a","sha256":"a6fef0ed6395fd1e9ee7021a3e51f13fd22f4aee3b7ef1774a5135f58e1e308d","sha512":"53367b24c671852304bb42a575a81758ac3dbb05e7c5ab600420bb9e8427e3258ba3471fdc9e435aa5c995ecbffc88b55cb9238e01d0b8479d920d9db8dd5b83","ssdeep":"48:35Y2zQVk4UDEH+U/NMNJdhlIwMD8diMpHc/MbUAGrIGLTGkMhRU:pbzQabU/NMNJdhlIwMD8diMpHc/MIM7U","tlshash":"9881ff61c815c072d5c0ca65b0c9739d992a356ea6e498d5853a88f4fd79ee73303f2c","first_seen":"2026-02-01T22:37:35.770745Z","last_seen":"2026-06-29T09:37:23.27214Z","times_seen":187,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":2,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/2.B7M6z4Z7.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.579Z","timestamp":1782649883579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/2.B7M6z4Z7.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":206,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.Cz2QSZKw.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.582Z","timestamp":1782649883582,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.Cz2QSZKw.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 02 Jun 2026 22:45:00 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15074,"size_decoded":2989,"mime_type":"text/css","magic":"ASCII text","md5":"543f330eef603dd6c89b6cbf9a817fbc","sha1":"aa6c974d7a1a8052416f60feab0e206da116b211","sha256":"15670355eec282e98b6790bd71e976492fcfe39253c8ed2338a5d9ad7a543739","sha512":"2db3abd7148be39773d1c5ec42d4e0dee76c5e89ab5c5a3d2548d87c96a5e2635132c3f9b9ff23fbfdd710facf17b8f54931f1fdd1ce00a9f6984a8c47790408","ssdeep":"192:8HmyL08q6c6S6kogEYu6iIB01NXLNhMEQFA+FFf9Ft4N+6AYWL95WrZTP3mQbS+3:eSa9MsPrZrWY+4","tlshash":"f762e094f6b29afe1d37973837fe8589ba9831c35d8949d93b0610000fc6ef98721e46","first_seen":"2026-04-21T04:21:08.337693Z","last_seen":"2026-06-28T12:32:10.825628Z","times_seen":6,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.CWtUtjty.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.641Z","timestamp":1782649883641,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.CWtUtjty.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40849,"size_decoded":3076,"mime_type":"text/css","magic":"ASCII text, with very long lines (40848)","md5":"7849b7402ac1422127123db7c86cf9d8","sha1":"112c99805ecece282750c55123ea7bb93d41b242","sha256":"7b6efb5938be9c42777ef8acb1cfc0a9271f7f3d50637fd3d96840c9e11d96e4","sha512":"36840d27a2b2509979145607841f25a20fdf843365e94d5b83db90786a929f135963e1dc50b2b5aec4c3676bde5509596b91395560864800da591d1bf7941dad","ssdeep":"384:IYboev3rAlsWBYcnJ+PKZYojx8B0HS4ASNX8fmZIuH4adevmpe6k9Z/v/d:ISojuB0HS4ASNsfmZIus","tlshash":"f5031cbaf64aa11c22387172b7357a04d50c41c19e4684b42baee91f69c1f6f73993f3","first_seen":"2025-06-15T14:46:41.046638Z","last_seen":"2026-06-28T12:32:10.826121Z","times_seen":18,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/222222_files/index.DsL38ktK.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.645Z","timestamp":1782649883645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /222222_files/index.DsL38ktK.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":319,"size_decoded":424,"mime_type":"text/css","magic":"ASCII text, with very long lines (318)","md5":"e1a881f0310a5a1e2b8fac8708fcc340","sha1":"c35406e822dc721c1b87d151a8efd64c43a5f907","sha256":"73ff59ab38a4c35b4406e7b8e62e37cb9b29941bad12977bebb00ffbabe444b4","sha512":"f127d44045d3de0f2f2de3788d19b3dd9fc16fd787c582f1410836126d9a9667a54a6b6c942ed31ebc41ea2b6539280418d9e836ccfed7f4f3ce6565a197299e","ssdeep":"","tlshash":"fbe086a533146b3eed22d2127c7448cde41d1a40ab37018af664b01006cef941f31ce0","first_seen":"2025-08-14T23:01:38.89822Z","last_seen":"2026-06-28T12:32:10.826612Z","times_seen":17,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/empty-betslip-icon.CA770lCW.svg","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.756Z","timestamp":1782649883756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/empty-betslip-icon.CA770lCW.svg HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:24 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7181,"size_decoded":2694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c10889b6c95d1aeee8d55dba609878ba","sha1":"1a937629701ebc9a86efaf50e5622a741441f5a5","sha256":"d9e06cec6d4d1e55f76832eb989a1f4440a412b9a273f34073ea10c6a08fcdba","sha512":"c77ebd966443b3271b55e15950d166d9453ebbafa5e3e7dfca1691df772ddad92309410de1e057216765002544dc35fc01f7324d6ad995d7222b4e061cf0781c","ssdeep":"96:GCMBZQGEkf9VfshMBt+5NcL77v8zK8WVnxqwgLLiPR:GCMBFNVUuBt+5yCjAR","tlshash":"a8e1dd2a131cef399a4396a8d7a7b1d2308a5485d355a3ec99f2bf1b120ac73f524734","first_seen":"2025-10-05T12:06:46.702337Z","last_seen":"2026-06-29T07:54:17.101103Z","times_seen":138,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":560,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/8e443b9bc9306554328540c75fc25ba03ee26adeec31367f4555705ff2c51447?w=169\u0026h=67\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.868Z","timestamp":1782649884868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /8e443b9bc9306554328540c75fc25ba03ee26adeec31367f4555705ff2c51447?w=169\u0026h=67\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 3604d10e460af7f0220649eb6f992b09de170bf3\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 11 Jun 2026 12:25:36 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1469148\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220193-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4431,"size_decoded":5061,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"63e48894aececb3ec26afc87ec9c5acd","sha1":"fcec9aa61bad0c1bea0d8555ea1534e8967e3e2e","sha256":"158243783b463061c0fa9680826aaeedf84f92d5d2eb1d23c14766bff395c509","sha512":"3482b7023f785c05d3f32d0bb5f2461e67adeff58851df19c1df847895b30cb7861cbfc41705e67fb00c655a63e57d0262c1a3bfb9542c51cf40660081420f33","ssdeep":"96:+Nhv65N26MT0D5MdtbZPAVwzVElGw2NTv3L+Nkcn2y:+rv6oYNMtKwQ9Yz33c2y","tlshash":"af916cbcfb639fabca25c73814f25be962d27338e33276152420af2601559c19f4e08d","first_seen":"2026-06-26T22:39:15.52547Z","last_seen":"2026-06-28T12:32:10.827654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediumrare.imgix.net/5e4a8534fac4f92fc04611f55831ae61f06d381fc07860fdb060fe6325961c37?w=180\u0026h=236\u0026fit=min\u0026auto=format","fqdn":"mediumrare.imgix.net","domain":"imgix.net","tld":"net"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:24.885Z","timestamp":1782649884885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgix.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 12:53:21 GMT","end":"Sun, 13 Sep 2026 12:53:20 GMT"},"fingerprint":{"sha1":"58:FB:F2:5B:0A:36:BA:3D:2C:5F:60:D1:92:7A:B7:A7:20:A6:6E:03","sha256":"E3:01:E0:F4:09:B7:37:B3:D4:90:00:29:A4:92:17:85:7E:FF:33:B6:91:63:10:30:23:29:A8:B0:DE:1C:AE:C7"}}},"request":{"raw":"GET /5e4a8534fac4f92fc04611f55831ae61f06d381fc07860fdb060fe6325961c37?w=180\u0026h=236\u0026fit=min\u0026auto=format HTTP/1.1\r\nHost: mediumrare.imgix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: d2db934aa4f994a4cab12d409cfcc74bb68f2b7d\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Jun 2026 23:53:46 GMT\r\nserver: imgix\r\ndate: Sun, 28 Jun 2026 12:31:25 GMT\r\nage: 1082259\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220123-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13691\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13691,"size_decoded":14322,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"05c1a27e2ab0ff85500ebf3e715c85a6","sha1":"b490e4e4ad16b505d022137c1af977b281057678","sha256":"4cf9bfa76857f3475301b8cef68b5595df8ae7b2ec6fbc6797ba2b91954605d9","sha512":"9555a824d7fa35345dca9550335f6e5e76888ef0a037b5e24e769b2aff96df6c65e4941b44142c2e5c5897c08d0afe67b0b42557993129490b3fad994c4e1615","ssdeep":"384:zYNg7QfSZNB82+NQwpNrz0IqVrnYzMWDjtEl6bc/i:zYyHLd+NnqVcCl6gq","tlshash":"2d52afa2eef4c906da509f385da546779240478fcba24fa16259bd310052cc81bef12b","first_seen":"2026-06-28T12:18:07.495908Z","last_seen":"2026-06-28T12:32:10.828203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stake1401.com/_app/immutable/assets/index.xL9qPG1s.css","fqdn":"stake1401.com","domain":"stake1401.com","tld":"com"},"ip":{"addr":"185.66.89.68","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stake1401.com/","date":"2026-06-28T12:31:23.590Z","timestamp":1782649883590,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.stake1401.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:51:18 GMT","end":"Fri, 18 Sep 2026 08:51:17 GMT"},"fingerprint":{"sha1":"7D:B3:A2:E3:61:3C:3F:C7:9F:DD:B4:D3:D7:EF:C1:3F:D9:B5:56:59","sha256":"17:EB:38:A7:06:66:A9:9B:3F:F9:DE:4E:16:70:77:56:07:DB:3E:05:7B:28:B4:C5:95:D1:09:A5:AE:82:72:3B"}}},"request":{"raw":"GET /_app/immutable/assets/index.xL9qPG1s.css HTTP/1.1\r\nHost: stake1401.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stake1401.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Jun 2026 12:31:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 21 Apr 2026 11:04:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11889,"size_decoded":1876,"mime_type":"text/css","magic":"ASCII text","md5":"6c8712e329bf5fca47b8c9e73a9bdb24","sha1":"39e00fb7e939289404ba5294958ca9ed76b95286","sha256":"af0c68b4ca8586e43a668e72ea895c2c149295c7431db8ce01a3cfaaeee84b70","sha512":"bb7728961e12b07aac5227cc07cfd478936d059d130b4a800e57ff827d8e3eab2f0e9e06b87957b1ea518381b59c28e2be7c1c8e2370bb7b3dc28d7488d5acaa","ssdeep":"96:zVDb43iUZwsQcdc3nDQQd6nq4FfNkgefB99Y2udob:zVI3iUZwsKzQQcnq4FfNkge599Y2udob","tlshash":"af321d57f7a795a93b1e25b86a3e0b58b94c24e3db0a8fb47b04a2101fc0ffa4315745","first_seen":"2026-04-21T04:13:56.490459Z","last_seen":"2026-06-28T12:32:10.828751Z","times_seen":10,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"stake1401.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}