{"report_id":"4f5abe77-7fae-43c7-bea3-1440644650a6","version":0,"status":"done","tags":[],"date":"2026-09-04T16:40:01Z","url":{"schema":"http","addr":"upgradeddapp-merge.site/","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"104.21.67.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upgradeddapp-merge.site/","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"title":"Home | Dapps Leading Synthetic Protocol","dom":{"size":90974,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23939)","md5":"c80e1a81edb9cd39cfe9d0fb922472a6","sha1":"e78869b283f633fc6bb2b4c7ca274d5bc2e408dd","sha256":"643cb7656a39d3c6c4dda5e893663e4d19f207cf9dc0a7610cabe4b3a2a2a26e","sha512":"48f940f8391d0ab5fbc1b8a8042d639e478a8bb4964875a9482dc6dbdd71d9da54cbd9a5efaae09e21df09df7c86cec6a227ffc492134119d40396e20b5db681","ssdeep":"768:zuZdapN0Al2YmyD/6KSwEWKaZELk+CukvGQJhVqJw:Sape5Ym/KS1WKs+C7vGQJDqJw","tlshash":"4b93d67294d580a7b1a7825e51d0d20a7be4b603fd67974ab2fcc2408fc7e6b8c77528","dom_hash":"domhash962c3eccf00847a9d68dc00925644ca0","first_seen":"2026-09-04T16:40:12.122587Z","last_seen":"2026-09-04T16:40:12.122587Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"upgradeddapp-merge.site/","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"104.21.67.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:40:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"upgradeddapp-merge.site","ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-28","domain_rank":0,"first_seen":"2026-09-04T16:40:02.885756Z","last_seen":"2026-09-04T16:40:02.885757Z","alert_count":50,"request_count":50,"received_data":2164536,"sent_data":26030,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:21.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upgradeddapp-merge.site/","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95abfa668cdb3b51b7806ca57a335ea4","sha1":"b26c28a324e3e799c5e1ce328ab6212d4e9c25b2","sha256":"74dd96a9d3b1dc6e656c2fbf2808ba2b9ddff99d15ac32cded2bed6b15a8217f","sha512":"5ce6eb57330eb1bc475bf797222073b6dc42d537b1aa87bb54fa4fba75d5bf43fe9021745a164067167b02d534b578460f9a5999c99412546141dae82f8a4fe5","ssdeep":"","tlshash":"91c08040d5b099b1c95814ff26f563c930f05f6d4366b08bc5fd5c5b974ce811b68825","size":180,"data":"","first_seen":"2026-09-04T16:40:12.261769Z","last_seen":"2026-09-04T16:40:12.261769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/secureproxy?s=%2Fipfs%2F0uiRW3iIu0dH0_4A0Z77xQd967665207dd4d4fb7cb3125060a8e72%3Ft%3D1788539968273","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0bfa37698fd243253a646d210ad1fd5","sha1":"6ce4c9a423a76007ea65bf48d9c49153fd4f6e43","sha256":"197443b124a3c03cc090db8f45ad5e626a940e3e82efe8e6c58cfe1b2abffca8","sha512":"1438585c4daaf3a596a6ebb2712f66ad4309b75d953c23fe54bbac15c1d96a5c4348ffa30171061187ace4d02acaca352bead44e110cdebcfb4c6ecb88c6cb10","ssdeep":"6144:ch5gDsrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csQq9NWCEiox3Ti/ESVPHSyyA","tlshash":"d9d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","size":645593,"data":"","first_seen":"2026-09-04T16:40:12.132503Z","last_seen":"2026-09-04T16:40:12.132503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"upgradeddapp-merge.site/github.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.795Z","timestamp":1788539967795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /github.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baihCoakobJbPRvPrS2CvoiQ8U%2F5jc3tKiaA4GR490%2FbqvQNF4Ppkz1n6KxAh4pNHkqDs5IoxZJ4Hk2Uoc5NOW0w%2FC9f0452c6jKOp8avSGLqmWhIpeTPRKXeFrHMATQuQSPd0uLytYZdw%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a77110e-64c\"\r\ncf-ray: a35e6e2ebc03b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1612,"size_decoded":1784,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbf3c5576796337daa328471fe648bc8","sha1":"bb57756c935d0fe38210d57d80b45a2b42441b5c","sha256":"f0a0dad1141516d485fca857c2fa74d9da07fac37ce9caa0718e6a55f7a1336a","sha512":"5090189a66a7205de66ef787b0c056306a6b21c0c7a507b147d18cece3886ebf8df9b8628c81b93c98e0d09991a159de978045b534ff09e6ed8bd97dfcd10501","ssdeep":"","tlshash":"de31e17b322263a556c8a3cd4f94bee8236b54c3b52001c4cbcf2204bc095e7b97c956","first_seen":"2025-04-07T11:42:24.874438Z","last_seen":"2026-09-04T20:27:48.564448Z","times_seen":117,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/metronome-logo-white.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.769Z","timestamp":1788539967769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /metronome-logo-white.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqIqMULDvUfgcBHPrv9jFBDjtlXxt4aDrrh5%2BONlbcV%2FGQQKghON%2BtIice8gM6%2Fjcckv2265dRjvJE9xTLbgOMd1hLJc%2BZL45KiRXCm%2B5KKpmRYmn%2Fz%2Bn%2FwiH9u%2FkSyVC2QW2JaF2jaqIQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a77110a-96d6\"\r\ncf-ray: a35e6e2e9beab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38614,"size_decoded":12460,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"010796f0f6cfc77f6e0a2c631f0934e1","sha1":"a20fbda46b4c53bfabd852a73a59c9f7c93eebc5","sha256":"8526d9bb8a092085526a4dbf7385ae44eececfb352b0c508c9e460df7dc0b584","sha512":"36a73c9465d136b422126b9081b69b3326d38f0153937a42d0d7e453ea9b368b9a97aa16c03606cd45f5d83f06dcb8c850bca51f6b41ce958e12dc94e6de8a68","ssdeep":"768:cCF3LnK/XL2+Adby3J1tucX9X/0lO2Ag0UjQfYJke:CPod+33tfvDu0jAJ7","tlshash":"8703aa5d8fa70775b280827c6314782179c945dc3595ebd8dbaea8a2fc3dca84cd89c3","first_seen":"2024-12-14T23:43:41.282826Z","last_seen":"2026-09-04T20:27:48.561372Z","times_seen":94,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/704.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.791Z","timestamp":1788539967791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /704.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-6300\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZtlDrq%2F09JaXtnblNtiM71iHuqb5QITIck7OFduMcaHMlxwKmk9L%2FG0EFgj17b1bEkx4IDrJg%2By5fPrWb81iHApnxp%2FNWHQARKoWa%2FZAudhMNjFn5eCme9DnfFe%2BOBLziKFKf6aLWxVcw%3D%3D\"}]}\r\ncf-ray: a35e6e2ebbffb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25344,"size_decoded":26289,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"30a893093122900cd195e400d0b4da9e","sha1":"c016de874c76b084bbda701c88f3bd705542d32a","sha256":"241e8fadc51e8fcb6fa15718a393bfac9f2d7908c3c16c78ce22992a9194b1d9","sha512":"a8b841f1b8f8b32d59933168323bcd96553f464d4284b492c20176ca938599bb83c6d5d400fdee0c83c80b823777f0f8f7d38ff0cc67530cd276a86a062acd1f","ssdeep":"768:o9BBgnH0OrUUnWRVqZHaLPn0bHdZwfmfa:oszrtWXAa4b98n","tlshash":"26b2d1d61dace4e9d97f213e39d5efd8020efc51221f23ab63f89d069c44567444d182","first_seen":"2026-09-04T16:40:12.13035Z","last_seen":"2026-09-04T16:40:12.13035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/secureproxy?s=%2Fipfs%2F0uiRW3iIu0dH0_4A0Z77xQd967665207dd4d4fb7cb3125060a8e72%3Ft%3D1788539968273","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.275Z","timestamp":1788539968275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F0uiRW3iIu0dH0_4A0Z77xQd967665207dd4d4fb7cb3125060a8e72%3Ft%3D1788539968273 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9d9d9-bOTJpCOnYAfqZb9I2cSRU/1PbkM\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=pv4jfVneB7hvsHNLr3npXQ.js\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/04/2026 16:39:28\r\ncdn-edgestorageid: 879\r\ncdn-requestid: d58a5c0bbb3a3a3f0c289ab9a55031da\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPNXp8kbVAgsigXwCphs0sfd09pxCTdr6jSOr3mTZXZ7wh6%2FAPNnpof%2BaCSBztDAH0EbduPCQmwl5feh4fbvbtbKBsX9KFQhUZB7TU1yhRynLhg9JAEGl58teq5z0UCEnjjGojTm7Oj3eQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e6e31bc55b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645593,"size_decoded":142027,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f0bfa37698fd243253a646d210ad1fd5","sha1":"6ce4c9a423a76007ea65bf48d9c49153fd4f6e43","sha256":"197443b124a3c03cc090db8f45ad5e626a940e3e82efe8e6c58cfe1b2abffca8","sha512":"1438585c4daaf3a596a6ebb2712f66ad4309b75d953c23fe54bbac15c1d96a5c4348ffa30171061187ace4d02acaca352bead44e110cdebcfb4c6ecb88c6cb10","ssdeep":"6144:ch5gDsrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csQq9NWCEiox3Ti/ESVPHSyyA","tlshash":"d9d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","first_seen":"2026-09-04T16:40:12.132503Z","last_seen":"2026-09-04T16:40:12.132503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":517,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/#","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.349Z","timestamp":1788539968349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:22:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umkevMZIuR1UkJycTZ64P8TjADySAF0w0%2FlWqPjuQQAYchOuJVByD1My%2FwfapFkdHpJFMWfJIMIgFz6ahzEDIE781VfMhtB8C9LIozMKpSJfvOnbnEwi69cn6uOa5epJ3Bqv2HQYob9ldw%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 0\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e6e323c64b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/validation.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.780Z","timestamp":1788539967780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /validation.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-8a22\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygWOOTigRomsm5Jqnx3Kd%2FIUS%2ByWmH70QUOv5qRhRHvyzqy5rhgHjG%2BVuozvOkNo%2FB6PAKWKolGEmqz2hu8crDgZKCWaxExf0MNHs6Kwmfu9n5uW%2F801AO%2BMJPU1dW%2F5TSQ1xbQbCc5Www%3D%3D\"}]}\r\ncf-ray: a35e6e2eabf6b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35362,"size_decoded":36309,"mime_type":"image/png","magic":"PNG image data, 240 x 221, 8-bit/color RGBA, non-interlaced","md5":"883d255958e57bfb8162c658493293a7","sha1":"18ca01c475bf6375521d9082c676f5a7b52e73ee","sha256":"96518d3f0298d8f808e2ec7080c06cfe64fc130dcfa77a0441aa6d09ee82be11","sha512":"28e470149456a1a1afc7527b6351ae67a3d9360301806366c1e755629776b8bce2f2a985af2a87e89736b6c523d3c5730ef1ee089550eee53b55d8dcfd4c2d04","ssdeep":"768:HZPazLkHfK+xMB2iZHwnAAf3h7O9KNSFSyC00bO1EPoHuUq:HZ4WLas33lIUWC0SO4P","tlshash":"74f2f186398a5ab4f304fab11d3e9d7c07a122cf3a2d5b975d8005c576cf9f86391d10","first_seen":"2026-09-04T16:40:12.135521Z","last_seen":"2026-09-04T16:40:12.135521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/imtoken.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.784Z","timestamp":1788539967784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /imtoken.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-ae51\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rTywCA0uiKd74vQZyYLE1C9G1sPp0GKfT0QAlbjV5q3p3VPp6X6QUeTQ%2F4m8dQtAD5HparxaobHJt38HjLRiYA68T9hD1fNpac9OkMlORval4V6ZZSIt8Nk%2FXCKr3KMiIq29fjs2JXouQ%3D%3D\"}]}\r\ncf-ray: a35e6e2eabf9b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44625\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44625,"size_decoded":45562,"mime_type":"image/png","magic":"PNG image data, 670 x 372, 8-bit/color RGBA, non-interlaced","md5":"74bd1a241ff70eda78749d8c10b5bc67","sha1":"cf61cdac861ca4e31d2bf26148884c60eadc800f","sha256":"f0f261afd7f6986dd7de6fceb7ced5d162f5dc53513c675c6fbe91de7f62d097","sha512":"5a0ebe6393c2b43c8f5159a94762ef0b2112a45ed80d3e9e3b6becb966ff7fa4f34b53e19586c5ca8f19c24765fb8752c9aeba4577c1d3a59f070369f00f22c7","ssdeep":"768:HtIyu/3xjI9q0TV+Y7vCDNz7PT6UoNXwy7TtIoeYObaYG0jsB:NfSdIE/t7PT6UoNX/FI6h0jsB","tlshash":"1413d0a8a1baccaadd8f9137d43cdf679a5b5104bac00025cf32e74c4b66d4d73969e0","first_seen":"2026-09-04T16:40:12.137519Z","last_seen":"2026-09-04T16:40:12.137519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/signum.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.787Z","timestamp":1788539967787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /signum.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-aef7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixh6HgVYHNVz4Dura3QZkXKjfQ%2BY1dzeWZvPAl9xxrqc9Af6vKyLxeIjUBnOw0jMMsOiby6WjqLTwkx7L35MqfpYquTZa6a9UvzFU165VUUmPKxmbrYU%2BfTKxuA0M0WFgnHAYN15UJMCyw%3D%3D\"}]}\r\ncf-ray: a35e6e2eabfcb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44791\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44791,"size_decoded":45728,"mime_type":"image/png","magic":"PNG image data, 600 x 260, 8-bit/color RGBA, non-interlaced","md5":"6cd0d76ba789eb998df970a3d8ea1cb1","sha1":"9683347210ec6803ac4df580108c3048a3e0599e","sha256":"ed67364715864f211ea679deabd955aee20ee6c178716d9fcd061057d3056579","sha512":"59c274940ecdf5fbdf06209fb5507b5e74d607a625ffac32a12d0dd24d336d39b55b8b174980d610932911be9a92b532693abdca4110daaa1039b01671be2f96","ssdeep":"768:N8bb3nmuJqelE6ZozgRStc1mYazZB346flejSy9tqv9mvOkFgygrF6GXmDgZvL:N8bTmucUnocSO1Z4f46flTv0PgdrF6Gb","tlshash":"d61302406d7ac9a9bc038c7f3a44d76449fa319620338653dec3c65e4ecaac479ca342","first_seen":"2026-09-04T16:40:12.140905Z","last_seen":"2026-09-04T16:40:12.140905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/binance.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.790Z","timestamp":1788539967790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /binance.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-1173c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybelnC%2F7C4t0VYXyTMkG7UZQ1aURkcZxmtGtu5fypEsZkuHOyQgGIxzBL8%2Bg3W9Jh9nCEyU9mwvhrYUvepHBePkyU4xsXwwwQfv1CjfzeMRX05098tmpWG4AY5PKj4fg0%2FPoJ4SqsaMPgw%3D%3D\"}]}\r\ncf-ray: a35e6e2ebbfeb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71484\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71484,"size_decoded":72424,"mime_type":"image/png","magic":"PNG image data, 600 x 312, 8-bit/color RGBA, non-interlaced","md5":"ca5fef6dc0c9bd90dfabe364afff1d00","sha1":"78f98b7e74b300e1f4e657aa546f3f1d5163b581","sha256":"c4979befb7febdb84984d6b0346d152276cf5db4e63f01e87be7fde8bece0c26","sha512":"73cfb07571cbcfa870e3d0275753825239a4893eded24e484b2bea83e9c0822cdd7da2d8a6b4b55680cb883d2846ccb6ce29a09dc462e3754a9c7949d774c8f9","ssdeep":"1536:8rkPhsS53BCM4oEoOzYvWZP13OZg1IhBLTgX+rtlZTqlL:8QP33BCMXEoJc13kg12vgO9T6","tlshash":"2763f1a3597dec94ed37e67616329fa33b3723354bf980e0c635c15c8851e8ae8a419c","first_seen":"2026-09-04T16:40:12.143784Z","last_seen":"2026-09-04T16:40:12.143784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/6390a84be1e510af523449b9_ppmonumentextended-black-webfont.woff2","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.336Z","timestamp":1788539968336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /6390a84be1e510af523449b9_ppmonumentextended-black-webfont.woff2 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/style8a54.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-49c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcK%2FQMqJ7oT4snyZ6HBr1rYnIfPq5RgE9%2Fz4uljrz9H5ooaX%2FwHGiHfMhW%2FuvRNXPhI5w87V7Y2BjjvMNKxLRI3nST%2FApisj%2F8QOS5OTAafZoTInV0FpefsbM3WMuUv7Opei04V%2BPn%2Fgpw%3D%3D\"}]}\r\ncf-ray: a35e6e321c5eb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18888,"size_decoded":19855,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18888, version 1.0","md5":"601c6a2bb3a10e1a789ed923c99e59ae","sha1":"562287db48c2b89302e481a98b5ced1e62043348","sha256":"0d5339b02239fcfa56cc4f651076c9603ad2338c9bdfe8683bb922c02b3ad23d","sha512":"f5e6d62508157b3299eea1e462f288f18a81d552dceaa12f2bb63df4946ca5c947659949dbe3f42bd8b3d045a66af1bb824bbd3eb70226c637eabffe00f8be82","ssdeep":"384:0Xyx6K+O9YrkKIpOZgzB5veMqzeLsFwUY5jgErd3buAExxgg:+yKyYrQpRlNexzhFwU0Xp3bu/xgg","tlshash":"c982d0c6e4ee6bc6032b951a709f5734a248a1e2d8271ce005a3954db9fcc6cd9cd839","first_seen":"2024-12-14T23:43:41.251144Z","last_seen":"2026-09-04T20:27:48.57481Z","times_seen":49,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/1.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.759Z","timestamp":1788539967759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /1.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-6f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfVkPB3BsSDe3bH%2BPKC8teSt1oyb0G81B%2BoIBrVZjC9CIrPZqYLtLkVYBVTTXSX3t29hoMeY7QurxuZE0KOoTo0HIczlaaIsmw9%2BVZfwzGOjC4ylI5b4Brfko%2FyripXaZmvpJV64QsHCPg%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be1b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1785\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1785,"size_decoded":2724,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"633e1035ce2a82c0c6b5a367d3458422","sha1":"c7857a3dbcae254bf08f9fab2ece21665a562a91","sha256":"cd60e08ec0cea9753fb1e4611e7ab79217141d6e69c4754c7631349413429c2a","sha512":"3eefb3d3021e8df8fcd580ee687d839cf98b638e7542379f41646430137c8fbe971402cd78ff7041b25700d92f582e82f0426f68fbdc32a96eb196f763c83f94","ssdeep":"","tlshash":"08311dd91b0c4aadc15589388ada239af5690f55753fff1cc66122078c858d694fcf30","first_seen":"2026-09-04T16:40:12.149062Z","last_seen":"2026-09-04T16:40:12.149062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/trust.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.786Z","timestamp":1788539967786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /trust.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-3ad7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4B8Wm3CaEcJhNcVrBblPDI7oU4CSy3%2FdV%2BIg4shMuuMfDSF5TQ2qGDLnykrvx9PzFRZZmxyhlFXeO0QZVMuadS3XOExEfq7BLm0feOMHDnt%2FblTRygrbGfFyTGZpngAINbVMbKWFgQUfpw%3D%3D\"}]}\r\ncf-ray: a35e6e2eabfbb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15063,"size_decoded":16002,"mime_type":"image/png","magic":"PNG image data, 259 x 194, 8-bit/color RGBA, non-interlaced","md5":"7732b97fcec926c4bef4d0558b155e65","sha1":"82123a868cb66808b78a314aa0910c8caccd1306","sha256":"df021cf8b8b3343c7302fe4274dff701d5da00e6ac418f99c21eaa17a2c54992","sha512":"884185c31561959a3de3a51b5be6548ebf9714c065d8e12984173fee4b5509c3bcbb31ce1cf9e428d61d7905f7709dea470cb8894038eeabb57c31808b4db87f","ssdeep":"384:M8Lo+RqE1JKWI+ROmTdAWW8uHlinVeqH/4PvytPqw9qL4:C+b1JZxRO0AtlCF08P64","tlshash":"e762d05b39215a6bd3852eb46f7a0b77439a8b1e750a5e5f5ec42ee03cc8430d30e9c4","first_seen":"2026-09-04T16:40:12.150638Z","last_seen":"2026-09-04T16:40:12.150638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/twitter.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.792Z","timestamp":1788539967792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /twitter.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BzEutSM0AtZ1eC9iZYivoGzW%2Fu7kmUKYmIeXCuia3QkluhODZX8%2FzwOYamqS4b0JsZ%2BvbV3zTRYjC4SwGkljdU3klFxPzgJe%2BGCipJxd5nMlG3mZjECecUrOnj9bf0tR8zmiLfDMrqoFQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a77110a-2ec\"\r\ncf-ray: a35e6e2ebc00b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":748,"size_decoded":1377,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c676d9ecb8eba66ef753502fce402153","sha1":"0453fc633b71c5f899cb6195941d4f39997850a5","sha256":"f58b2201de8613cb700f2524c2bb5433260fe6df716c6e89da2dfba9c1df601a","sha512":"c673b2a08d26fd1c9eed9aa221ab9d4d1928e35b893db4e92fd06c1d5a97ccfc7288b764ebf70ea49e85a9b5576d9640d7692adb9dd5736d6f24c5d93add198a","ssdeep":"","tlshash":"4f01c07b6369628a1094e70425b8ebc413b292a9384006c1df5307757d024d7f2b9966","first_seen":"2025-04-07T11:42:24.838347Z","last_seen":"2026-09-04T20:27:48.616147Z","times_seen":114,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.343Z","timestamp":1788539968343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:46 GMT\r\netag: \"6a77110e-bd3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yboaK3CyGxXU8s2USjDNbgVGd4wTPl3795xyM2m3%2F%2FzRNGgPVX99LHdnM%2B%2BpEkJpJAt4mdqBniFQL2EFSRJxzqZ44dkAwi1ntXxaL9pZcpnnqHeF0NQ%2BQw6QXOErZzsPk4qBC8obi7s%2Bw%3D%3D\"}]}\r\ncf-ray: a35e6e322c63b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":49414,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-09-04T16:40:12.156912Z","times_seen":23951,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/claim.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.770Z","timestamp":1788539967770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /claim.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-ca6a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0rmXy5tm1IcQ1KTs5quPEdoKnyv2nntfsd5i2kSiGlA74XHuCwoySLYZUePWQBtCAAJ0ZPKOshZYKejZQ0vKhFzf3Hmc6Y%2BSrK9P04Q226Pq3ngvOSEnRksLLiIANMzxxbEaEuHkmCnUw%3D%3D\"}]}\r\ncf-ray: a35e6e2e9becb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51818\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51818,"size_decoded":52753,"mime_type":"image/png","magic":"PNG image data, 385 x 352, 8-bit/color RGBA, non-interlaced","md5":"669c5373ba95b85fa05b103b23e7c9b2","sha1":"48de834507be04c56082e5392591394014c4fa8f","sha256":"f4081ea843ddcded889cf2b3482dc22240ca847a89b582424b3a5157a4c5a6c0","sha512":"25ee21f2b92b9c1672dafd2be68127cd9da73ec97135c02712de5a91e94d9a40c051e99d24e5b96e5aecdbc9451a858c4b780c80ad404d5660fdf3cf57c67aa2","ssdeep":"1536:9vCywTkhgYF7CQt+HPtEYA8bhd+ZeN7+yZU9:dC/TkhlCHPtAISZy7r6","tlshash":"07330232f899a037a791a434e4610f542b81ab8f3661e41b4ad23e6226de533f4cd7d9","first_seen":"2026-09-04T16:40:12.157983Z","last_seen":"2026-09-04T16:40:12.157983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/migrate.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.771Z","timestamp":1788539967771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /migrate.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-60d7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lL6TD6Kg8k5YbGso9GHRXzxhtvteD07SdQHKyP40K8fsUUyJG78RTluqe20ukB%2BIz84uWAw1uqcMqSGasKVSQaZ5l3coLOWiwm7Y3oqSSLO1hSZGjZuwORWlHI4k9C75wsmbshd7RhgFA%3D%3D\"}]}\r\ncf-ray: a35e6e2e9bedb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24791\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24791,"size_decoded":25726,"mime_type":"image/png","magic":"PNG image data, 299 x 216, 8-bit/color RGBA, non-interlaced","md5":"2ed6e104ca09cd0e12e203e72a18d023","sha1":"1191fc86d27e329dfbb20078ca4628c395fbcb81","sha256":"16ad28dffd7fab6ecf05c671a6b6e8ffed55671bcc9287c28e9ef313610b3eb6","sha512":"56be8054a571a0fba812b5573fa7bf0f3a2421740fdbc776ea3d72d5370f497e2100bb009298d5e0398bdba041cffd5f80d96f7782f051ed074e49b182e4a3c9","ssdeep":"384:A8rr/4p9tW5yHDU3gUAu2M9asrTWtGYmwFxBen6kxe3bo3RYwSXG60Ord+TkUYn3:5iW5yHDsIEbrTGGPwIdxobffXG69JRUw","tlshash":"75b2e1d337c4c225e83f5d32ca1a6584dd0fba8efab191c4d851f2152b786b130a5c4c","first_seen":"2026-09-04T16:40:12.162389Z","last_seen":"2026-09-04T16:40:12.162389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/nft.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.776Z","timestamp":1788539967776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /nft.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-33a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zj9aDcvzdXGxBbiGg1St1lh3WIq2oAcLfy2i6GkNPXmFOfhWurrqN1ivyZ3PnJ78G0WZyslG5k8SF2TJNaUjUqAyZ0C7wUxNTZ%2BitNo6o0vGg4FLZ3mIMzj9gYkJDat4tRE6MG%2FMo%2FC3CA%3D%3D\"}]}\r\ncf-ray: a35e6e2e9bf2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13220,"size_decoded":14159,"mime_type":"image/png","magic":"PNG image data, 145 x 164, 8-bit/color RGBA, non-interlaced","md5":"fc7cb5eba20a71b42cde408a19b23072","sha1":"c87b9c095a45576f1c0eba63c8f93e7de12cc162","sha256":"8095b32c2c247074f41370db5ef594cba57bd3ce7e18ccbbaa8a39a9fb10f57f","sha512":"a0b9f3d5eab63cca97370740111d3d5062d8e186969d8c2b752451e89d0c6d314f464c953477d9317f2dfd98c5b65c636e040e4648c65bb649a4d5dff61a0cd7","ssdeep":"384:c8dRkpuvXc3TPVnkDY0rhmsvq8HdPIuom3Z:/+peXwLVnk3rMQLJdR3Z","tlshash":"ac52cfe906708e8fc55220e3b832eb1da26d85493ce22c6d03c1c7127fe559a632ced8","first_seen":"2026-09-04T16:40:12.16506Z","last_seen":"2026-09-04T16:40:12.16506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/rectification.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.781Z","timestamp":1788539967781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /rectification.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-1f75e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlDiMdexINlxyXE%2FLEc%2F4Iqk0YHVgNjddmt0ZnHlBigrgJl1bnPydMN4G6VWm3FnZG2m76%2BWKM%2Bz7RTSdQZ67xalPEHFrsWkdKaa40MYHRh48kqj8ig8nq2E9D6VG0hF9ue6Tw4WLe7uUw%3D%3D\"}]}\r\ncf-ray: a35e6e2eabf7b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 128862\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128862,"size_decoded":129805,"mime_type":"image/png","magic":"PNG image data, 496 x 503, 8-bit/color RGBA, non-interlaced","md5":"94458096b6459d4dfbf4661dad8dddd3","sha1":"73bbf1bdabf0faf5f2d258e603897a4350ba08ec","sha256":"4c5936112cca86dca390f6221094ba0dc5328428568ce22f37e9fd36aff3ca2c","sha512":"f3207d7135f7455653fffe4719c55a296678ce92e0ae8e9bb5fdc8d93be53b85091fae8fde35521817fefc688e31a6d45496b2795c8175c7a422af828e391ddd","ssdeep":"3072:Gp8aOtw4pV09W4FIZG3kRVRmoL8/lN1ahlZkDNIXJG+n7mNO3ig:Gp8aOtwGCcuIZG3kRVRjL8/lNwUI5Fh","tlshash":"90c312aaf70d6211eb2d31b85816c088e417efe4c356096aa977c03de06ce91237c6f2","first_seen":"2026-09-04T16:40:12.169425Z","last_seen":"2026-09-04T16:40:12.169425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/recovery.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.782Z","timestamp":1788539967782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /recovery.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-dfb9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vCcP1H%2FO%2FwgzrGpD0ezAbyHr0FDU5DDvTcC2b2%2BYq3OPTUe%2BmAmAP0M061GgZL%2Fx3aS5oGy6dMV5%2Fo9Jhtfh%2F8aySjxFGB%2BcImNiOa95EH9OdhCbyb9D%2F7NmFwaiycfaEFyVIbF6BneRA%3D%3D\"}]}\r\ncf-ray: a35e6e2eabf8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57273,"size_decoded":58224,"mime_type":"image/png","magic":"PNG image data, 283 x 294, 8-bit/color RGBA, non-interlaced","md5":"4023777ca82f81ce4acde443c2463af3","sha1":"0ff6081defacf1d8f28dacf0c56d498388b330e8","sha256":"d42bd12a0d9263d0c488ce802e481d194e77b6cc6690cda6d52b482ba2aa729f","sha512":"ae4e698895344d112547998438dacc68980141fa1474ee047c56c6bdb4a7419ebd8784b8be4c70d3c1895218ab46166d82d3bc0fde4651eb4c2fbf4a2b245da5","ssdeep":"1536:pUWybcFrkruBs8GNZZlajmFhHCfatTo3stut+GPTq:eWiqkaWCj0pbostCfPTq","tlshash":"7b4302eb38b045f3d31d90b52c2f67bcce6963e866e5908d504bc1764e3b0cb3455a91","first_seen":"2026-09-04T16:40:12.171656Z","last_seen":"2026-09-04T16:40:12.171656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/buy.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.772Z","timestamp":1788539967772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /buy.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-13e61\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7H%2BFHv7gxiSf%2FWd3ciSkOCjBN3vJRaxiIpSBM08aRxwbBjrkAUOyGxr4xecZzbymecTBqlCgle%2F7pAHT5H7%2BER4C5OJXcwpIIhFodYGf%2FU6ZqXA4RiWnOsjp0EqwXg%2BcsFrIBSniohEmQ%3D%3D\"}]}\r\ncf-ray: a35e6e2e9beeb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81505\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81505,"size_decoded":82451,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"c50b296af21ee580eac855a29cce6bc9","sha1":"54ae37ac3abdb3c298ed94e61610c4445329fad2","sha256":"5034edacac18adbbe0b90e1f2758f47567053af58f4ec5dc4e35f7dbb2229fcf","sha512":"ca821da088ae067cdf8ddcfd4823df211b8b16ee8b6bbb41f98a6760fdc45e824faac24063f8741908c4195fd6162d7a001bf885739d6b7d4b50e65476172bf7","ssdeep":"1536:eJbgo9b2CZkNTOG7ijKMwRd9h2MlzcZSKXft1o9qPibmaPxFC9MTni6:eJseXk5apcdX2M+3MqTMFC9MTnz","tlshash":"7a8302fe8ed70a3d247c4bd26b658c590b5a9076055e1098d12ce3bae50fedd01a3af2","first_seen":"2026-09-04T16:40:12.173975Z","last_seen":"2026-09-04T16:40:12.173975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/bridge.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.778Z","timestamp":1788539967778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /bridge.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-8ec5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fI0TWR4gq7dMyo%2BFlJssbxT0lLg6Y%2B8LrahSB2B5HoYO0phrifISkFkXwH0qLsc%2Bsq4%2F0bDdc8%2FrQ1Stq1Cjs9abkdh8n20bN7jhOG8Qd5FpbV%2FVUaHKRQ%2BI3zqz62geNX%2BFS5a5e%2Fw3Hg%3D%3D\"}]}\r\ncf-ray: a35e6e2e9bf4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36549\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36549,"size_decoded":37500,"mime_type":"image/png","magic":"PNG image data, 404 x 265, 8-bit/color RGBA, non-interlaced","md5":"8f8559638c5f804221839ffe62b6f09e","sha1":"359506cbd969ca0b8943757a9070ff2f4b7b71d4","sha256":"67f385e7c042953b1b5964ff98d982bb082c8ba4977fbff4fdf56b3d71e78072","sha512":"4596290f4498417662be9664742635d0bd62a1fd9cddd6d45d689b8feef041ef9b0a2e9f02d1dfe450b7d274ba621cd9be440bd75328675def0a2b0253c1d109","ssdeep":"768:TA0cihhYmlhUhHaC6ppamkam4oQ34pyV8yXov0uaoiRVcQ0A5Bf:TA/mli69D6KopyzoMuaoEVNBf","tlshash":"92f2f1dbcd8e8fd7654268769b6eef608f13f261b2d34260f4a3b98439964571e3c180","first_seen":"2026-09-04T16:40:12.177179Z","last_seen":"2026-09-04T16:40:12.177179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/1027.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.763Z","timestamp":1788539967763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /1027.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-790\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJ%2BocCkj92oaJQW9l3SVnW4V7zFdLSVzMNbSAiIL1scDGwEyvZ%2FE%2BwkNH1%2B0M%2BduQgwDfns817%2FLdOI%2BTQ2gH8H5GDE2Ud33%2FHat4FYxIFHos5%2BVoukSnteBZx3YHdd49mNhPpJ036GBDQ%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be5b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1936,"size_decoded":2885,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"4006a5bf10f09fff3c62c4d6a3a61c55","sha1":"20547abb5ec2efd496d8040cbfb22acb184520b2","sha256":"56d78eb5340d0101a0bbea43b4a51f5df436317113dc4a12fe2ac3fd5f150adf","sha512":"bfa77af794e6cf09360cafb81b09fcc51599aa4bccdde1b53e50aab3c12418b33562d0d9523d4b6a8020ca3f2614c4f3cd1c09185a515e20cda65e99a7fe4b20","ssdeep":"","tlshash":"5241f9d657809fa3c322bd375c571b1a55b14598fa70e347c17e20242f89c65ad0c3a8","first_seen":"2026-09-04T16:40:12.179723Z","last_seen":"2026-09-04T16:40:12.179723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/1839.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.764Z","timestamp":1788539967764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /1839.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-424\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWosvS81xtOEF9iqtx0IMnkzDT2jhcIE4h2OB%2F9l83H3zH8WonYmwnzk3fp%2Bz8epbKvyBrVe%2FH3d%2FSA05YpSaGN7PtxDcAWC4TiBsAOLl8g%2Fsh4P8E0WaJmDVwnzCNJ%2Fg%2Fqirj8QMNYEVQ%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be6b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1060,"size_decoded":2005,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d7436c9d6884f6d6f6a479d168234796","sha1":"e5dff48574b967ede5211acb59cdbb722fe4c778","sha256":"485f5d23a2fa01eac1c8d5122c905f1919147e61a70752323848a52fcf9c90cc","sha512":"8fe1a4e8d9f7815d1e93dbd0fe971c947ec988c0d5ecc7fa235187dbbf60899458f3733f46949ee488d0ec8b68de940f2082d140077651367274a1c1999d22dc","ssdeep":"","tlshash":"4411a8f5a92c173cc071f53d57eaa7645ad2615007192832a307463a2d11d184cbd9a1","first_seen":"2026-09-04T16:40:12.183259Z","last_seen":"2026-09-04T16:40:12.183259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/3408.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.768Z","timestamp":1788539967768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /3408.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-2ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8apDBnFnNHFdJ2dQhHk3dCnYq2CxlqEkDCp9AtRhn9wbN%2FaBvQAGdosDfZcb0iX8qKTJuBqwEWyQmv84sMS%2BgTiiAX%2FcbLbHTYcgERtPmefwKbK7QUDWMZAhuUNFHq4k3%2Bg7oMDSOGQNvw%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be9b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":686,"size_decoded":1624,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2dde4d21df23d6f9000703bf22697e39","sha1":"2b314adaaf247dab53e0465ff23585825aad955c","sha256":"07b14c9070844b6d41fae91549aba9099dfa0edf892a845b9b0b46b43f2b92b7","sha512":"c9ae814ff02d53341d272971f45c4af2fa78adede0756b4d6821dde138286d49dcebcb504e71ac98589e4ffb37e91392b9433485fe26b0adbec789fe227f27db","ssdeep":"","tlshash":"560123eb71140d05e5238574e1271326dc4359a85555211e32185a727c9fe545cfdfc4","first_seen":"2026-09-04T16:40:12.186965Z","last_seen":"2026-09-04T16:40:12.186965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/discord.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.793Z","timestamp":1788539967793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /discord.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWGXO4RFpeQn0HvJ%2FfjoEAA4rSDT8GQ972adjXTBJ93B%2Fs9vXn2oDWohD0EEL62lwTiOWQweUat7svPkp%2FmcsakRF%2Ffd8rE2TQZA69kS%2BZkxRS%2BXuryxjDGqwhS5yL%2FNRVRfhlx0cvPMwQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a77110a-482\"\r\ncf-ray: a35e6e2ebc01b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1154,"size_decoded":1512,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53c3f8b2030b51e0c52be5337e026faa","sha1":"a0004af37c1482113f6e5be85e80fd0d21e8e7a1","sha256":"3c493357b14208a2a2b37751b8a700c62c9600ef2bfc342a3cdb762670cc45fd","sha512":"6b5a6c614401396c5f25c9c9b77a5141c77c9bb37d6cc465a6e06737b54158bf776b8dd82b6261d3d7bd5adb99cb3409007b7b44a90aa39b5c6004bea1fdc2ca","ssdeep":"","tlshash":"a221a6776244b7c18380ab14426ddb9c72ba71cc30e031c88f9749ae6d0eca75dac885","first_seen":"2025-04-07T11:42:24.862104Z","last_seen":"2026-09-04T20:27:48.59975Z","times_seen":118,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.338Z","timestamp":1788539968338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:46 GMT\r\netag: \"6a77110e-bd3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFEZqrFYNlS3yVBT2oyg%2FQynMUR7RNi5RbabxxyxVAHT2oCLBh78gbgautjVM5ZEutGE4rgu57FFpfaLI4cuNtJpbRQQ5KiNo3DiNsK7oaMgl5Eo5cbK7r0%2FIWoBWW%2Bx93G32NdaQEtSOg%3D%3D\"}]}\r\ncf-ray: a35e6e321c5fb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":49401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-09-04T16:40:12.156912Z","times_seen":23951,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.339Z","timestamp":1788539968339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:46 GMT\r\netag: \"6a77110e-bd3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCD4Zg%2FVgnKaickbL3BVdLGzzQGdSPL%2Ftd93uMgAlkJebZ4ujik2PX9eOsMJ9W%2FEKunp9jeg6yRvbSnf62fzNfsrgUtQWWITl1FS9p3vO%2B9iZtK1cPYMye9ClbUMawxCef%2FAJIB6P8nM0w%3D%3D\"}]}\r\ncf-ray: a35e6e322c60b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":49412,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-09-04T16:40:12.156912Z","times_seen":23951,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/metronome-token-2022.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.734Z","timestamp":1788539968734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /metronome-token-2022.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGrcDllY%2BaR6uPnmiSjfr%2B6eYQbq%2FAMF7lbjAEdes6Jawel3om3arTEaWy3ceSFy4vLyukYJ73jbrYZw6NQbrutAQHTJZUMOaiQqUOC2Fgj%2B7TGSuD0nLHoSyB%2Bas3YZu3OTiFGy2K4Ygw%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a77110a-33b\"\r\ncf-ray: a35e6e349c84b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":827,"size_decoded":1408,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3114f8acf6ed45d6e18974e0d07cdb1f","sha1":"c54c183385e99565519da65e6eae8e2c80c7a08d","sha256":"1097614a8916aae32cf16f880ed9777af9876334f17868178f5cb36cf0431d00","sha512":"6a4b36acba35e39a2a2d82cfb0260875a3883b4914ee1f215e545b4e071da901ed64c8fd0e46e9267ffdf816df27ad5f31035aeb977f2373eb14e3015810afe6","ssdeep":"","tlshash":"8d01f17ae369506ac148cb54c7f8905567ade0e39180c0c4f7a89f5d5e3cee31c1e128","first_seen":"2025-04-07T11:42:24.864023Z","last_seen":"2026-09-04T20:27:48.566023Z","times_seen":106,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:39:27.259Z","timestamp":1788539967259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:22:14 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4%2FHsHMxgOCgxtx3NB4EJldeaEjylF%2FXqZH4obDqou%2BgWtyxBrFdq6bSSrVfJdCcIjKdDe7%2BRqnbnLmsdO3y%2Fbz2sQOiCQqgZouf0BNanS2YghpOtAOmCwjUVSLlsUk7%2F1hoqEc%2BzmzqkA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e6e2bcbc4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:21.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90731,"size_decoded":17854,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23939)","md5":"06426c5489030dd52771985b56d10670","sha1":"8e5ff0714eb06157b4de84274e6fb24d6229d0bd","sha256":"953b9bbec82c45b69cdf6248cb8957eefd09863d1d443ea35580301dfd85565e","sha512":"098022c7d6b7ebb1325ed0c458881d3cb4c44fb6a3142b8d44ed1113acc8e5e10d4b16be85884ffd11fc181ee41d3a74dc629be72fa3b6ab03d5e3bea584eb6d","ssdeep":"768:zuZdapN0xl2YmyD/6KSCWKaZELk+CukvGQJhVqJw:SapemYm/KSCWKs+C7vGQJDqJw","tlshash":"4b93d67294d580a7b1a7825e51d0d2067be4b603fd67574ab2fcc2408fc7e6b8c77528","first_seen":"2026-09-04T16:40:12.197959Z","last_seen":"2026-09-04T16:40:12.197959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":37,"connect":22,"send":0,"wait":234,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/2010.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.766Z","timestamp":1788539967766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /2010.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-75f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RZK7F6lAdUEY5IiGIfgIrZjMjAUiiqM4Fre0USvmSbZUaHQtm%2BtgMQOfVOcyNNjrXWSw2P6GwhTo9gH34vHi4X5Eym2EVcXE4TT36FzHvf25MOzJZyiljrdx%2B83n4b13eJrAIPW7cVmZQ%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be7b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1887\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1887,"size_decoded":2822,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"df11f0aa15ae2f498701ad70ec2db156","sha1":"bf9cd83c3747ed99fdcd0ca15e299a8046fe4f25","sha256":"da53a231b10eda43fb5498c75eb0d4f4a6d8f113b51761837485913374d8df34","sha512":"0fe372f5192c4e3d3236a37f6c0123d925765a456ee2e516ecac64461b653b7ee9d7fe5be71082dabe73f093f349844ff2eb29f5c23a5b35c096d1e1a61873b4","ssdeep":"","tlshash":"bb41f7ace97a8e66da73a0fc48c3436ce8ea1ddc0990f25f75941c301919c4aad5db88","first_seen":"2026-09-04T16:40:12.200631Z","last_seen":"2026-09-04T16:40:12.200631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/presale.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.773Z","timestamp":1788539967773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /presale.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-8ca1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2XVBR47jfEs8FNZ7PnPGaTbWxMssoWmN0cq9n%2FRLmptr8J78p4s9O3qk3XbucJZ%2BqPEElSKjgsAhPRSxr4CphOTH%2F1t9dExbWs47QNDyYwNaUBdLt%2FvGYvzLFmPKWHm44uU6RPvDe1Y9g%3D%3D\"}]}\r\ncf-ray: a35e6e2e9befb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36001,"size_decoded":36942,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"6d9f9c94173ec3808639e6c3968d8bb7","sha1":"235330f7f137529a36e10defb508ec6b7d22c857","sha256":"f5d8fa0c178491797f17be6d36f66426c6957a11a2b427949d1da3b50e41dd6d","sha512":"629141f578e58df43d2008c3f526529804280e4f289ec77462c8e9e4bcbfa442b1458c84d5c6f1d54453492733e0b6fa7542d0c5391f261907fdab464d39cd60","ssdeep":"768:D861kJmnOOK+nAE+PqedOu6aquFlQoHzE/ClcXYQfmnxz8IiMPU1RFny9W77O0:D861Wm1KayPOu6a3FlvwucXYQeni7y2N","tlshash":"01f2e19e6430d5ae9aef34d543b17cd404779ec129b88853d9fa188cf5884f7aa234d8","first_seen":"2026-09-04T16:40:12.203265Z","last_seen":"2026-09-04T16:40:12.203265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/telegram.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.794Z","timestamp":1788539967794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /telegram.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mdm3pCUtlvzyJIZ9l9dbCVmvaXqNQl7zd8vS7bLeqE7bCxmmt9Vbf9LxK%2FgA0W0tqtiFsChEwx1Ser17nudnUJH9Ihhlih43t1PmW39JLFz9twpOE4FTIohColtaQNDQhemK6OYtHwe%2FPQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a77110a-1d5\"\r\ncf-ray: a35e6e2ebc02b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":469,"size_decoded":1264,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65a57aeebb945880396c0fa959056508","sha1":"9711490847b7d5fb1c4fdb4e5c5f4daa4810745e","sha256":"4e8bc976eec86ea4b3ab4c41e4affcfe1c46fb91f806b0418929379759587cbe","sha512":"6e90b5f6978079526c10c44740d76f62a27784220e70db34cd747971d2e14cd21e1b635c9f61266f2877562689f87640ca7a6dfb080a3da4f8fb95ded623cf06","ssdeep":"","tlshash":"74f0dc7eb2448b5cd0c0af810f755c27f162b0cdc4b40d81eba06f89a961eb2b41dd78","first_seen":"2025-04-07T11:42:24.866005Z","last_seen":"2026-09-04T20:27:48.617272Z","times_seen":110,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/6390a84b8a8b417df67bf556_ppmonumentextended-regular-webfont.woff2","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.340Z","timestamp":1788539968340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /6390a84b8a8b417df67bf556_ppmonumentextended-regular-webfont.woff2 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/style8a54.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-49cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BCZoyoW62aoR4pPR6fujkANDef1D1wmw7bizeAKSuU7SAqDZWcLcNfPEj%2F9j7g3V9j4V5xqPCEaSlmnt3BTJnoiROHSU66Ztf1tw0MWjIQ1z6TY7bNp0QjzlF5StCqTWMFwnEiUb6IOSg%3D%3D\"}]}\r\ncf-ray: a35e6e322c61b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18892,"size_decoded":19847,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18892, version 1.0","md5":"ba41310b25d5632acda68d6f60dc0c4c","sha1":"cdca1f99da6cd84cbd37c2ec50dee4d8a83b3725","sha256":"2ac5114500c87e2742e85b5857de2110bb605a0de46f6b14c1a95721aa95fc77","sha512":"90618971d72e0eef5564544e4fc8f0c6d2899ea480d50c8ab4ee170a8868ff48eac451ef601b07c281ac1de8c1336e197732f1415c7196d15b4ee25afcfaa624","ssdeep":"384:Qyzlmg8G45UfidUk0qcX6uZcNP0XiFKjFo4amFAOHaZwohsHhgFQ:Qm4EVk1cX6uIP0jFbawj5QsHGW","tlshash":"ae82e0c689d55b3442ec0cf7e45f93a57e193f09daedec86c2586a0c880d095fa9d3d1","first_seen":"2024-12-14T23:43:41.256032Z","last_seen":"2026-09-04T20:27:48.56523Z","times_seen":49,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/style-indexf08a.css","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.742Z","timestamp":1788539967742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /style-indexf08a.css HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: W/\"6a77110a-45\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sh%2BwnFPJdSLd2%2Bvqd%2F%2BcHekMUqSm%2Ffdg35gyvkt40oYp2y7IAi%2Fxd5P716rFvkblKRkPvOIeOXIBTLKT0OU0VR9tkUuD9TKL5Qn5Ldn2ZFXEThff5oEH2c87utMusfzo%2FcjnLHM8jJJk9g%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e6e2e6bdbb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":1029,"mime_type":"text/css","magic":"ASCII text","md5":"670ceb20bdffc3b0af99a495eb4e34ba","sha1":"0ed868f92ead220a111cbab50b1e1f57124aa34d","sha256":"09bc966ea712fc10199648a093bd65444fbc314d988f61bab7a1b6c5824b3f0c","sha512":"294ae006168c59bd0d7f2c0e932a862445d18516861155517bdf02fb37d401f281d871e9b96a95127dbd5c0b316931afa66bb0072188fabba986cc1f97bf0be1","ssdeep":"","tlshash":"a5a022080b3008f0c03b808f20cc080020803c0000c3e383b203e223c808acc228f320","first_seen":"2023-04-06T20:54:08Z","last_seen":"2026-09-04T16:40:12.219334Z","times_seen":739,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/simple-banner0392.css","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.743Z","timestamp":1788539967743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /simple-banner0392.css HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: W/\"6a77110a-1d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmVgdYv9dnpZbsyPJx%2BXv%2B%2B%2BEIeduxf2DfkIL2GuO%2ByrjLPaRZzZVyT437YOAS%2FWoN%2FjK4UQ4Df8GDCUo0zoHgOskqr9Mb8w%2B%2F4F7ID9N5%2FtHQzV9X2WYGd1yEvK0B7aFLBFP8E9NYWywQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e6e2e6bdcb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470,"size_decoded":1230,"mime_type":"text/css","magic":"ASCII text","md5":"c804eb7d75f58d5d242e74a360df125d","sha1":"2eae480f1c08184450c702d20152d21aa7af4eb6","sha256":"5e52d2896e4826b8b2cc58b53db6c3e4aaea762a718e2a1375b275ff78285060","sha512":"e3ea784352fd4f74d79502778bd855fa71015a1d6697539d5cd74efc72e2345ffede4cf09647381a37ead58f1771098fd05e541bd61502b7cd6bcdaf0a4b5670","ssdeep":"","tlshash":"7df02e851e535220730fe4e8b493437fa6399446f91bccb453911095ad7d6dd115634e","first_seen":"2023-06-26T07:02:37Z","last_seen":"2026-09-04T16:40:12.220173Z","times_seen":567,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/825.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.762Z","timestamp":1788539967762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /825.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-290\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60HvilBwBeRpTEa79utFxlUqcf%2BDWlDwwf3ybSIoDOSxIN7haQSGU4HPXoqZiPIudg8rv4mZkFJJBe5QfWhlspKKIZSAa%2Fm5FcTO2W5Bkqn3vzoXvEK10lMV5Ef5oLN%2FxU8EHUuWbfJOvw%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be3b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 656\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656,"size_decoded":1592,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d56569984fbd1314372f5678802908fb","sha1":"25cbe4a8c366cac0d4a633eb280819e5da2f3d10","sha256":"1dd89a1e4b004eab67d4b51eec81a9ed026331c35dbc723c3618515e7c3e628f","sha512":"1a7632b9ef645780e1d6597a1cc66c48b1fc016a43348b612a8b319c653125786e6c1b315fd89e7759e5b96b773daacb231a655082b61a568ab6f92b1f75d9f5","ssdeep":"","tlshash":"5af062ee2f000e1dddbbd67ad11f037892ae0de032226d6f6349e816bc014a69e4e4c1","first_seen":"2026-09-04T16:40:12.22101Z","last_seen":"2026-09-04T16:40:12.22101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/css2-1.css","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.009Z","timestamp":1788539968009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/style8a54.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: W/\"6a77110a-46f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qezVAdG2cXIFApGNh0r1uIQMJuqlleEtbC2%2FJqxZy3pQCx%2F0uSXVowaRpDY%2FAhyTxo2rCemllmlu2w1FnIFwTZyOEcIUBHJ%2BV6Qj%2Fb5tp%2BiCauriEGzGDe1jYprMCNDQ489EDvd4FLg8WQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e6e301c39b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18162,"size_decoded":1873,"mime_type":"text/css","magic":"ASCII text","md5":"a048dad54791cba88d42d0bed1811379","sha1":"386b7c0e26f80aff7aa1465f60c4ea1591ad9896","sha256":"56b0327bd667352560dad49dfe1b0bda95f8d5c7938d6a25a8691a4046e45311","sha512":"f1d99e692a40f29c7037943ca646749235e60f900aa969a87e1860caf35bcc6cc00e62b1c080cd8ead02d809a9943d144d0266f60fd7d9fa44428db4ec95d2e8","ssdeep":"192:W7sm7R7w7M3t7x75Y7vsl4bM3MY5zEsiDwM33j5oFsPOZM3Ku5xCskBmM3th5+LV:WImVMutNSYLRYXVV6vHhkXhtmG","tlshash":"20827a91042b5000a3971cd667cf3f359edc20486186da796ffd189eacebdba13a174e","first_seen":"2026-09-04T16:40:12.224848Z","last_seen":"2026-09-04T16:40:12.224848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.341Z","timestamp":1788539968341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7-1.woff2 HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:46 GMT\r\netag: \"6a77110e-bd3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4SAmrS5e3NDz8SjzVMsIvsDv9o%2FKzPr4KXnUwhVGksgEivn9EBsN6dVHtlPWFXgNkLF%2FaYzivoco%2BQJpqZALbZys42Y9lwSwBLMvBP2%2FE%2F3BgGMr6vpkcxRtZjBUy%2FohKIinYBv2zVeAA%3D%3D\"}]}\r\ncf-ray: a35e6e322c62b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48444,"size_decoded":49414,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-09-04T16:40:12.156912Z","times_seen":23951,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/defi.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.789Z","timestamp":1788539967789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /defi.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-55ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZoXKDFbPklAOgrSYiqHOIaw8W9xxW7mJ8PZAHcmXifDCVa%2BvU3n3GxkjpfO6OgvgQ7r%2Fj0LFpnaE5yc57hFWBTIEdp70RDZphAncjneQYNotXa%2B23Y4pmse9Xf4Q8wwVqZPZmF5hCLFG4w%3D%3D\"}]}\r\ncf-ray: a35e6e2eabfdb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21998,"size_decoded":22937,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"3eb442bb60125cac7c2b9a387cb40ee9","sha1":"7837d5fcbf8ba4d68df3f5f81a56f0f4a5dcf341","sha256":"7b66443e37bcc5859892d17a035d76b06b947e6dcaa2e204a304380630cd83d9","sha512":"728ef86f76b98de8f080edf25c9c8841f81bb739502e8978a2d028f6019f11de186b3008a752638a67c4b3f05a0a5602f89ad26b7c785afaaeebbf15ea640e9d","ssdeep":"384:Y8gLM5nmutp/YkgpIpMkjWRZiFQu9cBJyCjQrG1MYYOf2PbzK38J9VxwpR:59ThYkgpIpMkjWRkQu9sJy6uGzJCzucQ","tlshash":"8da2e182b76e1c62ded603f9153beab5eca030d0111b0d2a2914e47d6dd85bcaf348c9","first_seen":"2026-09-04T16:40:12.227471Z","last_seen":"2026-09-04T16:40:12.227471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/metronome-token-2022.svg","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:28.735Z","timestamp":1788539968735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /metronome-token-2022.svg HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYv1kxERvgCpWX4RaSL5vmyrR1oO0Bz57z4UOq4mnzBB3LbOeJpRNAPdr521L7gHrBsTIRSSJas2YVOC72Jrr3QQ7OE5jWt3dOSYlrLw5WhXVm2MJEADMUF9Z7QsSRbtvWmRN6jz92gP9A%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a77110a-33b\"\r\ncf-ray: a35e6e349c85b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":827,"size_decoded":1405,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3114f8acf6ed45d6e18974e0d07cdb1f","sha1":"c54c183385e99565519da65e6eae8e2c80c7a08d","sha256":"1097614a8916aae32cf16f880ed9777af9876334f17868178f5cb36cf0431d00","sha512":"6a4b36acba35e39a2a2d82cfb0260875a3883b4914ee1f215e545b4e071da901ed64c8fd0e46e9267ffdf816df27ad5f31035aeb977f2373eb14e3015810afe6","ssdeep":"","tlshash":"8d01f17ae369506ac148cb54c7f8905567ade0e39180c0c4f7a89f5d5e3cee31c1e128","first_seen":"2025-04-07T11:42:24.864023Z","last_seen":"2026-09-04T20:27:48.566023Z","times_seen":106,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/style8a54.css","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.745Z","timestamp":1788539967745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /style8a54.css HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: W/\"6a77110a-ef91\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1X8aJTYkRCzjrnwzHaChHlAWqr4Aoyxpl4o4RH7mK6hZTVuQW5OHr1PzhVGH64knMY3%2FfeUL8hCQ2MfWMwnrmedARyOwiNkcwvIJrFKzTR27xfUznrMDDerxC%2FF4M0wYGXVF7FBQkDZKug%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e6e2e6bddb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61329,"size_decoded":13798,"mime_type":"text/css","magic":"ASCII text, with very long lines (1319)","md5":"e02fa71706c2efc5ddca404ad73c08f4","sha1":"4c7547b8e56482b081895bbd975f6f16c1199deb","sha256":"c9abcec7bc13ce7c50509df04c82bf2373e9ac14e6da82a24cc1d7840886ab06","sha512":"b14d36c70dee525033d3be39e1c34fe92c7e34fb1d2ed5acc2c356c215719901dbdf16a55c3a81b87f1f363642d2355fa3cc777fa306c65dacfd94a3804a1f36","ssdeep":"1536:yH3cVvc2gixnNM8mk6cWEQfWE6LiyuzNW:NgMNMRyuzNW","tlshash":"255395622d601950727bc4bdaeda7604d61d81b1ce0e3dee70d681ac93ddf6401beb8d","first_seen":"2026-09-04T16:40:12.232753Z","last_seen":"2026-09-04T16:40:12.232753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/52.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.761Z","timestamp":1788539967761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /52.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: \"6a77110a-617\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdjtWRtLF4BC1L4cQqr9qc9rlbUuEY5Aoe8AgMh0OkV0ZPwUp%2F3h0pJIYmDAoixVnUBds47PB54pVNwedryOMb7F2UPXr9ewQHZLGnyv4fu8DfYKbHgXU4T%2BdzbJAPlOLHC71CVyYUNNBQ%3D%3D\"}]}\r\ncf-ray: a35e6e2e8be2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1559\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1559,"size_decoded":2494,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3d5fea85612e2e6eff420ff3ddb13ce1","sha1":"f56c0d28328ba0514693087ac4b93b3aa22e0bed","sha256":"0cedb0cc3623478abf11372bbb129abd4b3077b8291db88b44134c3c210ca4b5","sha512":"8099b8fa26b651ed59373c622529746dc85a9ef268b0ac4e9578f3e6f727c1fecdedb72e1c0b35136f70199f1a68057f7ffb932bbc72fe55edee5cc7e19b0b4b","ssdeep":"","tlshash":"0531f9ca99128d05d80717389307cf05a9f3bd406a959c1d0f1819611f2328b2e5aee2","first_seen":"2026-09-04T16:40:12.235488Z","last_seen":"2026-09-04T16:40:12.235488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/kyc.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.779Z","timestamp":1788539967779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /kyc.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-37dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypsi%2FpyIbrVyCq9ENnFia9RbeDDDdnAfGo0atQ6V%2B%2FPvOla2DjjRgDGZ2NwK18Gq1qgrL9Qk7wlK5Lj07L9JbI7M2b551AaWcEsFvV3iIXkZ1ffzOyrxw3ASl0%2FOaHZN6ph8bX3l%2BP3GXQ%3D%3D\"}]}\r\ncf-ray: a35e6e2eabf5b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14300,"size_decoded":15243,"mime_type":"image/png","magic":"PNG image data, 192 x 133, 8-bit/color RGBA, non-interlaced","md5":"ede40f7903ff4d7bebb63f81a94c198e","sha1":"9dce92d3676190592879e1d131521f18d68c088c","sha256":"1dbe9825092d40f762e044619eebdc92356b39105ef9c7ccde667a19e701b5b4","sha512":"88d462218edeff4904e4fc558faa8397ab7350e0ec8013fdac24e781cfcd546384eecc0be30a007f71fad6df3fe0f15bdd448b25f4e8a83505f130c96e0a1ff9","ssdeep":"384:M8e93/UDtBIIJOXrInqpLzQ3msp7D6PHyQWtj0V:k3/EIIJgEnnma7YSQcIV","tlshash":"3d52c14677c7c662c501f5b1cd17dd12024b89891b97d13051e6d85eeb8383c7bae7c1","first_seen":"2026-09-04T16:40:12.237576Z","last_seen":"2026-09-04T16:40:12.237576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/staking.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.777Z","timestamp":1788539967777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /staking.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-918d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgIoeoqITjteQffgIni9FRE32tW%2FO3vhvDg%2Fwr6GKw70hrFoMwJiyebdUwzs%2BFteuSMijfzuzdzKxiFoDm0ygmfvwUglD0%2FfhN%2Bx%2F4k17QzB0XEoDNMmdY2ljRW1Rd8lirH3KPt0cvtuKA%3D%3D\"}]}\r\ncf-ray: a35e6e2e9bf3b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37261\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37261,"size_decoded":38206,"mime_type":"image/png","magic":"PNG image data, 238 x 237, 8-bit/color RGBA, non-interlaced","md5":"d88679ee2d53398b692159b78efb0677","sha1":"0d49c1216926eb9037872e8dfd5c51f6bad03d88","sha256":"b5677728eb59ca3b1f79b2f85b074034bbaa377d9b18a70c87f73b2086e5c8be","sha512":"617a2b4fd7fee5d5634a78fc9253da9081d17178f250ed5c7ba92e35d416848f54049b08083f27240966222bdf26640f7c6ab211cf05f852feaadecc9e38d9f8","ssdeep":"768:IHxN7gi61sGuFverMESlCSnnqQChk0aqGHt+IN2xWGRiRjB:u6i61P2erME/JbkG++IMmRV","tlshash":"f1f2f2225a3330f2e5f4fbf028ac949a7b7fa40747a9357a1a4fb25ea5081415df180d","first_seen":"2026-09-04T16:40:12.239676Z","last_seen":"2026-09-04T16:40:12.239676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/whitelist.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.774Z","timestamp":1788539967774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /whitelist.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-5e59\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8w1quhBaVezHvYVQqhEZd2BrQifvKVNzGU%2BNwrMi6Y8CTMjDfXvlkjngwRusTwRqJ4eO72Zlh6QldvG21SP6HNIUemnxgWWLINzMRVPS%2BdjUtZ%2F9yyYawhG0HdNYEUacrf4fLOGcDm8%2Bg%3D%3D\"}]}\r\ncf-ray: a35e6e2e9bf0b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24153\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24153,"size_decoded":25094,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f59bee217e77a676fdc8b76c46294d08","sha1":"1d4086ecb14ca3194f5d4c12056e2ffb0d9b859c","sha256":"7c73d0b5770d81d9b512c3ac5b68c4d0738fec07eada294e078fb816927e6d99","sha512":"80597264c547a40fe857331e34ef6ac8b84e2e818bf9799c029216069e2f0fd0b33135f8fb9e07d866763698823eea72a69c11bedef2f9c8dc452169c14cf4cf","ssdeep":"384:S8G136628KyeRI65tBp+iVoozBU8U8U87DNPq7uurNQOlGV3s0t89TOydlPrAs1m:i108KyCRtBp+ibU8U8U83NC7pXGts0SW","tlshash":"a3b2af0a2cbcd92899d892b1e34ecb125ba7c5c1ebfcb0ed4db5c194b05d84ec57d118","first_seen":"2026-09-04T16:40:12.243118Z","last_seen":"2026-09-04T16:40:12.243118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/AirDrop.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.775Z","timestamp":1788539967775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /AirDrop.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-a4f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJCqavipAiY9iWpdaqAsjyFhgXnaVeogIU%2F%2B4ib3sR699NntO%2BGuHbn4mSV%2BeMlZdFprcj%2B42swzqhnpj%2FU8osM3y6vr7QxOEK3wHHW3TpxYbh2MCtiJMF6ErkwhDX1KsQGa0K4JausOoA%3D%3D\"}]}\r\ncf-ray: a35e6e2e9bf1b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42225,"size_decoded":43170,"mime_type":"image/png","magic":"PNG image data, 340 x 365, 8-bit/color RGBA, non-interlaced","md5":"c2476e4bc88c19d8e7c10b8f57cc8475","sha1":"b9ed39ab70bb1fc3c169fd1ec78fff959e233773","sha256":"28058fba8af248de00eec7902b3be3267cd3a4177bbe7b27a7fefbec97743b22","sha512":"28cf0078683db9635f82243e58bd538fb9917cd436a20be25a0222ac40511cde3c3f1f2704fb77cd36e1c5d149bafc9985a3cef6a1d111d8d190b6cb646a57c3","ssdeep":"768:8PC+7SP59W93h21hbLBOB5G3izZTSUdTu4ljcb+1RSGx+kbyWJZ5YMA5F:j+KW9Y3LuG3iV+sTzljS2RSGx+keW75g","tlshash":"d213e1d079f498a7dc3e5869ca2715e1ac82149bbf4b07292479783cb0c176fd294ac7","first_seen":"2026-09-04T16:40:12.245843Z","last_seen":"2026-09-04T16:40:12.245843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/secureproxy?s=%2Fjmpd%2F","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:29.336Z","timestamp":1788539969336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://upgradeddapp-merge.site/\r\ncontent-type: application/json\r\nContent-Length: 1294\r\nOrigin: https://upgradeddapp-merge.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1294,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBNAMcAxgADQDyAikDEgDaAioAAQIARgMAAO8nhn2XtsKCAbscWpj_v-0lOe60jpECAAD3XL5hRLnxhapWZ6Y9XxB-x6AcGXvx5I2Z0PDZH0mptSd__1qlsI5hnKBQfx1GfHd-1GN0oA5tgfvaS_jrVYjcIoRw1q6lT-GfCAAfKdfA1MpEavbssW6g8RoLEhSY7IMI5lkUBo_Z-74BZ59UQnrt-RnuSor8iW1A2m8Gytg5ddXUTPoUHuvhnfiliXE58skK0C46MpOKLoeT6qO6DC_y4vKLBYeCu_OJoiBU1HjuklaKdq6ELdpFO2FwXnLL_O76DmeHe95f8Piv7rOdjNtY66zN9cjQvHBls_C8XQHGxVzJdxG-yvBPVq3iN1nUzevkpt-a1LW5iELmXpog2IwAfQMpGtUKgSS_sli-QHj6YXaLg7XxmVcCwnw13Y6-IhhiuC4yo6BBzavvIBqsjihbsZRlos04mFouRaWzNeswuLBNw-VU06fIH4CdXrKkC0ymnXDIlxCIqnN0BQBDCUlvSnv10avrJLKSxTXdwFN85F3xGjvffH1aWUUQ7G0BPfx9FDSS7j_emkIe0c-XvUQ7nIInD8vuLUZZnfl0hUQ4vdl0RBFQFaxkM7Xi65Qbuvmut6wMYL4IXS-uwizPqQ5Fhoy1JRnBxAhaZhjfOgtftTIrtEJRdLIl0faEZ_12ZRbjkn0mfdpNePaPxF2t6z7GJKgZ8MwZYHub56zbQNBRkH3oK01R-m-oxg6uSavkGbdwa0GXo58zETtrKjcugG9kjXnMNOg-eRMi6xBI9VB1B8PdTev178xUFY-twoTO-_2V4FW4K_WWdCxhJ_aBF5p6O7Tv4augnLCE5rZmIbi-OA8Wg1fD6dk5wFA3NwS0C7DL5FcP7ZQL3QTx7wfX1oBpOszR-HSKoB95ukzMj3k_-kR0gUWaya5LU3Voxd0G49zSLaDQb8kKNCoowPb08dNZKnYvZ4pOlMfmxkBQ7zJUNbGhlEOtzjGjm9jJnQi7isVdvXMBNPRrotfv9fJUZlzQ6-R4XUgpUwUPZTomiUlSY2odUbjhBfd8gKSHX2tp310T7czrz0Ieh5FxH_HrPTxaY5dUaOqJ7b4s-1LcUn_KabCC7v5dMzcxhRCEK-h9Js1StYdMVGfme_F0GdtvbXC1L4M0_tJS_oBpXnsNxEm9t6LAerVOy3vHM7CwB50Q\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:30 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1788540029511\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 09/04/2026 16:39:30\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: d44cf6a0fe802ef4c5cabe77d187cc28\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeRe%2B%2F6KRD%2BrXxPPxgwS0XTkr3wDIhGd8n1s1cxAsHCQmBlun83vRz%2BhvWLSRw%2F5n2JRHxIsJnOxoLTDinAcwKhbB7bz2rJ5eE33fF3X3gi%2FfYWpSaFovi3l7GjVyCLi8VPzW1SQAqChRA%3D%3D\"}]}\r\ncf-ray: a35e6e385cc4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3298,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/style.min1e39.css","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.741Z","timestamp":1788539967741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /style.min1e39.css HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: W/\"6a77110a-1acde\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezpJmiSWfWV6%2FnOoO3oTtXrJRMeDcL0QhB4MrEOwqgw4Iox3%2BZm%2BdjkVlUhmSPKsCaRNCEefP3g75QdEJT078y8b9kH1wSeAYw8JklVdhmnYJsfkZ91wwx1WCmyopPLf%2BisBWJNnsn4IVg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e6e2e6bdab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109790,"size_decoded":18780,"mime_type":"text/css","magic":"ASCII text, with very long lines (56836)","md5":"662f74b2606855b5d15703f559d53640","sha1":"6187fdfdf12e5baa5554b10ab43a6fd46d467388","sha256":"e86ba54405b136c5827f86e76312fef11bba51f440ff759943dbb9e4a76812c8","sha512":"930f7093338f576c73905e1a3b6f25822a3a979c32eca6f29505664c93a8e8f3344e1dc67dc39792ea1e8db71bb4dcda94d877b89c59b311c7a726eaa0cae96f","ssdeep":"1536:iLeJ2fVZk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJkk2u5SOV+UQ3Zo/0kPdvQQzE","tlshash":"67b3405413f0dcf939fba73a5e5ee248a513aa41c64a6be7e076d190614ca490cf3b0f","first_seen":"2025-04-07T11:59:28.31028Z","last_seen":"2026-09-04T16:40:12.247926Z","times_seen":21,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/modal-12-seed.css","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.746Z","timestamp":1788539967746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /modal-12-seed.css HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:42 GMT\r\netag: W/\"6a77110a-72c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DP3e5eueEuaCC%2F2cwComaY9d8QGORXF1EracjFGz%2Fo7V4v%2BHAjgWWvhIefh6FeLSYj%2B69zGMKiBox1ZSSb8bbnLPUDvPKTnR8slU7RuZRkk2zGIGQo9Ah7astUBlY4K9Azey%2FsGM1E%2FOVg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35e6e2e6bdeb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29381,"size_decoded":6934,"mime_type":"text/css","magic":"ASCII text, with very long lines (29381), with no line terminators","md5":"e3e81fcf59ccd09e58a6b2d236358763","sha1":"a0af6da6b9d6cd063a0d15746fa66cdb80e2ce98","sha256":"3457317dd30b5da56a84c62342b66e60acaaa1641b210916f6c23216b558b4cd","sha512":"b47fd79c1639485acad99c9b1fc17f3726b8abba2f9a1a70f30175dcdccb15f3a88f16353e6e44a799952b19652e22184405bef3e3403cdd4a4b91b8fbca62f1","ssdeep":"192:nJMhQ4kbpen//mz0aMaJtIKLZDcxPVBqMZiS0RBacpyG3x71rw6ICoH:naklennMMZKFAxPVBqMInaeNBCCoH","tlshash":"0cd22b91ba48e117f6aa862f55c0f94c75d9e60bfcf30d69e420d0008ed7d6f2a792e4","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-09-04T16:40:12.252311Z","times_seen":256,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upgradeddapp-merge.site/stw.png","fqdn":"upgradeddapp-merge.site","domain":"upgradeddapp-merge.site","tld":"site"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upgradeddapp-merge.site/","date":"2026-09-04T16:39:27.785Z","timestamp":1788539967785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upgradeddapp-merge.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 05:48:22 GMT","end":"Thu, 26 Nov 2026 06:47:02 GMT"},"fingerprint":{"sha1":"1A:90:D3:B3:13:76:B2:3B:34:C2:F5:74:D3:8D:5C:AC:F7:5B:C1:B4","sha256":"FF:A0:CC:B9:FB:84:DF:04:E1:DA:CD:1C:58:66:A4:8D:35:F8:8A:ED:FD:90:D0:9D:2B:7C:4D:37:00:A0:EF:E9"}}},"request":{"raw":"GET /stw.png HTTP/1.1\r\nHost: upgradeddapp-merge.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upgradeddapp-merge.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:39:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 08 Aug 2026 11:20:44 GMT\r\netag: \"6a77110c-10cb9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0ojWCdVVo%2FdsrjZkY3F%2F5QR5Fct%2FDE5dzmsvm6svSclq9fw9a2H1WehHsFQ4fGjJw6OhCbwGrwSXGhOuloAPtd%2FRSWNS7QRUaiqngcTPqGI0bgqWDKmtRlMG%2BajRCAUHj2VxZMnbL5PAQ%3D%3D\"}]}\r\ncf-ray: a35e6e2eabfab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68793\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68793,"size_decoded":69737,"mime_type":"image/png","magic":"PNG image data, 1600 x 304, 8-bit/color RGBA, non-interlaced","md5":"45f0bb61b92da86a01e21353a6c677d2","sha1":"6d3a9547f14898c2d0e0ba64b4bd7bcd93bf8b89","sha256":"7528cacaf28107fc45bc1ff00dcbc731fe6737a9585ed195074ad553714f2af8","sha512":"c876c99656024f189efa6deabe58005e346d0528053826985c643577526d3026329ec5a53efed1509cd3fb9dfa2c6371612d7215dcc745f7ca0a9c5add521842","ssdeep":"1536:DyzmVC/s5xXZmqCxAV42tBGc4yN9Ctf5utpERA3waaaaaaaaaaP:GzwCykxAV42iyI58+R+s","tlshash":"61630282439bcc15ce4f0bb418b7ab24a7769406419d82f0b171c59cdacee62aef5dcd","first_seen":"2026-09-04T16:40:12.255914Z","last_seen":"2026-09-04T16:40:12.255914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"upgradeddapp-merge.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}