{"report_id":"65638e8e-53a9-4f1d-91ed-1e612f983585","version":0,"status":"done","tags":[],"date":"2026-10-07T08:33:57Z","url":{"schema":"http","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"title":"Mantle | Institutional Infrastructure for Real-World Assets","dom":{"size":138093,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6005)","md5":"1cd01919ed36ac14d4c6d8d0d0fd47c2","sha1":"e86d6838f80648522622243deecb44aa40d4c3c4","sha256":"8ae17bcb406521c5757c0d81932e3c18cbfdb284d40fd57a34d69cb6f1343f5d","sha512":"de26b2edcb1decb47b3c50cbbd58b07940b1daba5aa91ab0954777c8a94cd4e2aa432f317bb09ce128fe732bed3c2dd2d55687d83f2cd1fc652c953f06020164","ssdeep":"1536:Hw2wGlvd3S/Xt70dlO2/3XfUYoxf1OaWcK0sXzpfCr2rVr2rCr2rVbfrVr2rVbfg:Hw21lvdoOVoRSUH652","tlshash":"6cd3c56051e1263b2207c3e8f970ef16aea9a617ca1f4918b3fc21973fc5d95c92356c","dom_hash":"domhashd6df20c8496d0eb73f1e3bc629dbeed4","first_seen":"2026-10-07T08:34:03.345246Z","last_seen":"2026-10-07T08:34:03.345246Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T08:33:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"rpc.ankr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mainnet.base.org","ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-10-05T20:23:58.256827Z","alert_count":0,"request_count":2,"received_data":2537,"sent_data":1087,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay-9427b68d.paul-maze.workers.dev","ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T08:05:22.044821Z","last_seen":"2026-10-07T08:05:22.044821Z","alert_count":0,"request_count":8,"received_data":968402,"sent_data":4343,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3470079,"first_seen":"2024-06-07T05:17:26Z","last_seen":"2026-10-06T11:19:25.197859Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2817504,"first_seen":"2023-07-30T16:39:25Z","last_seen":"2026-10-03T19:36:15.28593Z","alert_count":0,"request_count":2,"received_data":1465,"sent_data":1087,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.mantle.xyz","ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-02-21","domain_rank":0,"first_seen":"2015-07-24T13:00:00Z","last_seen":"2026-10-06T14:34:08.856618Z","alert_count":0,"request_count":2,"received_data":68604,"sent_data":1217,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"1rpc.io","ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-10-02T11:31:53.841541Z","alert_count":2,"request_count":2,"received_data":1876,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-10-04T07:35:13.58453Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":560,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-10-05T17:10:00.051896Z","alert_count":0,"request_count":1,"received_data":20835,"sent_data":1318,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"allocation-mantle.cyou","ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-06","domain_rank":0,"first_seen":"2026-10-07T08:21:18.667576Z","last_seen":"2026-10-07T08:21:18.667576Z","alert_count":77,"request_count":77,"received_data":1230947,"sent_data":40280,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-10-06T14:34:08.477959Z","alert_count":0,"request_count":2,"received_data":1553,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allocation-mantle.cyou/chunk.42.28748q25.js","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0eafc2bda81241b5da3694f08b52b89","sha1":"193eb0fdc40f0d45f4a63bc846dd6e10d09acb6e","sha256":"f68d6d8ce951a55c900e2f0b10726c1a1ef97f7074536ef9641f8214b1a74159","sha512":"3a598b9297a859036d51c8a4662e6d8c67c7f69682cd9ee6a26519e7f4efbe02cb2f33b72342b8e9d406c4699cacf42d08a49c9a99d90df41040d1b421a76201","ssdeep":"384:D9grrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:CvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"717219f87665206a03633532207f9102e177eb118d5b9050a2e28a917decf6be677fc8","size":17079,"data":"","first_seen":"2026-10-03T20:04:04.24929Z","last_seen":"2026-10-11T12:33:27.709577Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/be719849-d9de-4278-b490-49e5e3d77b0e","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","size":70200,"data":"","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-10T14:22:55.094653Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/7666c926-d39b-4bf0-b196-ec90b31a1450","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","size":3269,"data":"","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-10T14:22:55.099119Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/49a24d0c-d3ef-4e46-9841-4897d076d57f","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","size":30003,"data":"","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-10T14:22:55.095779Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/869f8b33-61b5-46b8-8eeb-580266e08315","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","size":528504,"data":"","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-11T12:33:27.722481Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4f8c03c9a7c606b5813bcfe5434e7cf","sha1":"81ceefcdfa11fb8a73e2caf0c5210de926cf06aa","sha256":"b4b3a22fe17b0f6fd76afab56c180d98cc628173832dbb4bc1c1f258f3dfe285","sha512":"39e560b6daf154192f7139f01cc081954d2f6cb222d0129774b30be0352006aae2e8330afcd2bb85f0683031c130992ad698c1303a0f41f27b8f38c4945eda27","ssdeep":"","tlshash":"3771cc3beb00173bdc8fa9fdcfd5b4c02e62497262496960691ce102b16cd7487bed88","size":3737,"data":"","first_seen":"2026-08-31T08:11:04.014068Z","last_seen":"2026-10-07T17:51:44.872723Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/90a30e64-4528-440e-8dd1-334894aaf167","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"246634a474a9dc1a180ac8b98c5e554e","sha1":"4c376c1d424427d7a3f69785f889f86fe47e7b27","sha256":"82d2fa3fef0c8ea14f3a31ea7f6207d351544b5becfc84e645300cb76a8a363b","sha512":"5552ecf2e4b52f7b3fed9b7d63c9c409881ff9a67c6af5ee4fb70a9092c6206cb7fa151d5f5935baa94c6a2e2dd0412a9805420be8736aa7025d6c601be9bf23","ssdeep":"","tlshash":"8801f41d8fec5babc28f0256825e3f5d065c117733297f21d3aacd2000e55d1251291b","size":673,"data":"","first_seen":"2026-10-03T20:04:04.283984Z","last_seen":"2026-10-11T12:33:12.0915Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/4517cf60-9b03-4917-a7af-111f8d4a382e","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d217dac8e1dcd370e6cf6a68cec2c5e8","sha1":"34ef5162b0169512de5789f5f55b82e42d2b6121","sha256":"538e151d0af9f15b69b8cf836907e1148f2b960d5c51d2167b5fadb2e4f67bce","sha512":"098befe84b361e5da12e87a34b505ff9f06d703854472561589b5ff18e1bfcdc43f6ed73306f38aa4ee4085a06c4bbc12853d1b630b4d8939c62c73d3f7d581d","ssdeep":"3072:8WH6HIuLo0G1i1qS+jhB35xHD7pLRtg1xumIakppl:rHi14jhBzd9tg1cLakpX","tlshash":"b664a194184791d0ce4711bde4afd448f0783b638b9da1f6a43feeb0b16cb6045e71aa","size":310677,"data":"","first_seen":"2026-10-07T08:05:27.648932Z","last_seen":"2026-10-07T12:36:00.962725Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bed96558c46d7e6396c5a1483fe6603","sha1":"d1937d202cf2698867bfe5181d527479e53938f6","sha256":"79cfcc300a793a1d3da6f525a45e27dc9298ed82757c0dac8c038ce79e8680f9","sha512":"e05297bb57bb5d665fd70e1c72dbee8fc83f7a3128fe528b9f5621ceb9d0ecfc5bddfc03eaca99c4657e0d553f40e1d5dcc99a091ccb9664e12d7751e9ed9784","ssdeep":"","tlshash":"8d60000000c30030cc3c000030c3000c003c0c333c03f0300300030c000c3000c00000","size":14,"data":"","first_seen":"2026-10-07T03:41:39.925242Z","last_seen":"2026-10-10T14:22:55.108431Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-11T20:43:22.537612Z","times_seen":859880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/505412f4-9839-4065-891d-9ea220defe03","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","size":16644,"data":"","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-10T14:22:55.091737Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.227Z","timestamp":1791362004227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://allocation-mantle.cyou\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a46b8f8e9b005696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":451,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.837Z","timestamp":1791362004837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: a46b8f925dd54e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 10438\r\ncache-control: public, max-age=43200\r\nexpires: Wed, 07 Oct 2026 20:33:24 GMT\r\nlast-modified: Wed, 07 Oct 2026 05:39:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20376,"size_decoded":5474,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c01db5dfee3f863f4d14cd8a6067bbc","sha1":"f3b2050d63b872da1cf778078d91e98f06265858","sha256":"30a77bb0f6c954a8edc69bb8dea580debee574b39d3dfd09656361075f0e1afc","sha512":"c79d82ce5672d44426d9aadc7a16337a35aa3f2937fd971f48c9c782478351715d25456e52bd5706f528ec2392bfd345621a1346f7751f6aea15b7931e6ecc4b","ssdeep":"384:qJu9vMUwOkd77rzdoVWIMCtm9jGdU95wiDCDtl7:ucvVuNo9i2R5","tlshash":"d792229e47d09d96de70c788e7adf9ef947ee003c2cd189aa5b1497440fd8a3320169e","first_seen":"2026-09-21T14:26:22.574Z","last_seen":"2026-10-11T12:33:27.805661Z","times_seen":327,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":3,"connect":10,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-14.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.596Z","timestamp":1791362003596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-14.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-22b0\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeghjKhzAiUijaqq7CLR%2Fsdfvj1r48%2FOkeytmzBjSTPJnHYu04xbqeeYgPQUhnsfDkDmrw9x0ZG1eDX%2BoeU%2BDch1N9YzhQcHWkg1NpYWww5xaHpAoGGv6j7mJlTdmsVjwW%2FUdgkD1m%2Fm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d0fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8880,"size_decoded":9589,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"af50c474b69850dc90c4b990213758c8","sha1":"8afcfddaf52d197161b523972e1a620459ab5f32","sha256":"4fab74881c88d18fef92499f262a4e99b49997ce6439f0fac69172d206c18e32","sha512":"16408c837c224b160d2f04d2bd45a72898048da360d386f4bc0145cbcdfb18cdac57b7688e26b9ea73c5245f8b21dbe6fbc5881a3ff56c4f2444d6bf5b99e2dd","ssdeep":"192:zDL9MOl4dYDSnw/tBR+oy09eHyIWlL0aTh9NAQGUj:zD/KI/R+bHyIva9j","tlshash":"3602afa0a2cb3d1ca939782513174be1e8df35632892bac5c124b65302ebf2f42f1533","first_seen":"2026-10-06T14:34:19.085986Z","last_seen":"2026-10-07T08:34:03.352307Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/agora.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.562Z","timestamp":1791362003562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /agora.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjWlQPrzyCE2GXO%2BifBnRCRX5fWjHtbZQiewbyc%2BIc%2Bvv6dzED5nNYYGS1fC9r3SZQfH3CzT6goRBlBWL4vu7j4zWCLzocgmAxIRo7Z2DOtPBmLrS3Txsw09ckRpoTAnIQEMRC%2FPtpem\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-c17\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a4ce5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3095,"size_decoded":1884,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e2a0f76a14f606e6346fd3e87911a8","sha1":"6e145b4baa5cdb6e440153397f3c6b0ec8fe1e11","sha256":"4c225e5d222802da8c75661ca200544a55f36dd30fd99ba22268bf6ac813fbdf","sha512":"f38f5e495f6a426fd937aae9f489a5281a95eea55f0c41f1b974c566d7c86bcbeba295b2f6bf67e569a24a2764a648733ff54c668ac1b74493618744bed89e1e","ssdeep":"","tlshash":"295194da371ce144f500a7ff8a0a7039ad0b85e2faa4d296c5838e5db14245d5cacef6","first_seen":"2026-10-06T14:34:19.114019Z","last_seen":"2026-10-07T08:34:03.353103Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/xaut0.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.566Z","timestamp":1791362003566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /xaut0.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-23f4\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuQUaLXk1qnDPQK81UZxTDwR%2FSbzCMLQxo3Ax22yNibLCshQguDJf4%2Ble%2FwF48ZHCTZQG8nYFfe1ATkVDGndcw4HWKiKaa0X3Igk%2FIMBgIvjExdpxIPpXWwOOOqmIvW6Vko1EmyiNa%2FR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a4ce8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9204,"size_decoded":9911,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c1dd1ad0b15258be9afce7f09a39a092","sha1":"6175d55e7b7cff90088d2c0a51fdebc1f716e6e4","sha256":"18c036b4461679f6ffafdfe5eccd78c9ea9328584c437834c270e37901f3d197","sha512":"ad5c3c44b764ff7c4d430e795543ace0b29653c822fd0206df4aaad3a0aaf32c012f5ed215b07219169c15392dbd8a11bfdb664686c9d440cdb95cb2e35be5dc","ssdeep":"192:7IWhv6rnNOL/uN9sBw8Ng9MNjTcGXCHTCexwcgeFtB+u2beDn0:7JUoL/E9sBwl6NjQbkcgeAue","tlshash":"aa12aed9df5c50289139c3b5135a05b04cbe5add59f124ab03d1b7af72e8a2197cc621","first_seen":"2026-10-06T14:34:19.023103Z","last_seen":"2026-10-07T08:34:03.353854Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-06.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.587Z","timestamp":1791362003587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-06.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1b52\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C58DAwZ%2BJ%2FM%2FgPcVb%2F9SzW6pwqF%2FGNjdIomBAfFZQVMwiG8GXzYpsEZT6abk09linT0irHCj9NUzLkTA6GBhwLzovZ1hdC6M7AW4feT7OI2CT0s6dzOufSmFE2x2II9%2BOvzTql3E81Ou\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6d06c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6994,"size_decoded":7703,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"42af250b7c154533e87ac465ea42de46","sha1":"6f06237f4ccc4d3fd5feb91a748c1e067b4489c4","sha256":"eee3bde7b4cef80ddae736293fb6110b80dc7b24bcfcc091ab517c371cea93d2","sha512":"ffdae26f462c6378323682d3db6681cbb66d0e7aeecc1b24a63f9a1f03bd2bc53ac8c1e5ee55867056a95de85eecf5ed8bab4aecac67cdfcbe2d6b995a0de4c4","ssdeep":"192:NxJ5WuEU+V1TetRvyTKzL6f9Cciqb3JhHVzom6dPh:Nx7WuEUSCRAmyb3JhHVYX","tlshash":"29e19e4d08ec9af9537b0a3437e89ccfdd39ccd1a4349256398c4958a1618f4a2b5a99","first_seen":"2026-10-06T14:34:19.014045Z","last_seen":"2026-10-07T08:34:03.354565Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-07.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.588Z","timestamp":1791362003588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-07.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-3a20\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZuyCQH0Tk1klqDaRSZV4bdbHahuYpJ%2FxplyShPIGh%2FETd%2F6mToVpN52XA8oAOookTGroeQqvDRPDl5gjBBKyEOcOVh8aExo6nXiupmzCAGyGOkVsSmtBgjK9DNIKfPV7BZmVEMWzvV5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6d07c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14880,"size_decoded":15584,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5912322fcc5e8326fd4d59b476906f75","sha1":"fad842693410bf05e9fd1cc7f4f8a276b0a6232e","sha256":"9d375c865853edb32f11266a5141fdcabbb48e9ffdc3f1b1928643a09956a5e6","sha512":"8a89068174f9715974d7557201f1baa6508fc9a5478b3eb3f9073933a3247077dcace94eb25c2ca276ecc5cbd3c5fd7c0a534ad44e18b00e031bb360e33a3090","ssdeep":"384:Msutbkmg59gt/OM8A9nSINuSe5KwP16gN:Ms95yt//9ntNITF","tlshash":"7b62e00a287ec3a0563002591db05e1db567372c0ea27d8b3cb779528a3f6279f75a15","first_seen":"2026-10-06T14:34:19.027098Z","last_seen":"2026-10-07T08:34:03.355148Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-32.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.629Z","timestamp":1791362003629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-32.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2687\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoX9MB0t6HWc85jGtD6e4eUQDt0DEtL9dSFJjR2j8RGZ5pz1NEHavn4izEhxk57BLyt%2FcnUpsqkUxqmrJ3AWdXPODwGPcCMZjkQFbDh8YRTUl84tvfV7sNZFteGoJpNibt3rMw0C3vfS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8aad2ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9863,"size_decoded":10562,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c5bb68113b47d40c7071b4dd92c16a97","sha1":"b01fcace6b22de41d68de763a094763cfd5e03d8","sha256":"2ff39982939ea5d017e0ef1298c58e170ac4c25369b26ff3c6663c478ae5a37f","sha512":"9492efeed1a3436f03ab1f24e1c914a941a00e8e0eaa6672d8419e46cad8956ecbb447a18767ba57ef97d6a7f5a17c658175ee2adb4a0dd4ec715eaf0cf55860","ssdeep":"192:YV/YHDF13y+nIIZwRs+MUo539ud81bcf9Ct2Zki2O1Y1k3QXai2WdWvBMe83i:MyD7y8wNTmtuOCEtxi71Yeyai2WdWD8y","tlshash":"2512cf5e94d273f7e20d59248bf314c89e17cdcc242e01b97663cab90d264fb12287b0","first_seen":"2026-10-06T14:34:18.982467Z","last_seen":"2026-10-07T08:34:03.355951Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-08.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.589Z","timestamp":1791362003589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-08.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1cc1\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PamUZYsU0O64XYSNl8xb6SHvQq4vMsVqhgIISp%2FAk6QXeR5bWS3bHpH34VdkpGzOXm8oGPOiDARe6zeLM8sRz0KUx2NolxvlYu0zptFOC0hZVzKgu3uZC%2BKrn2yluqUeckFite%2FsMcVm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6d08c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7361\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7361,"size_decoded":8064,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0f356a763413cfb57b3895b91378b906","sha1":"63018bbe2a65605c190ab323590977e9fa7ca512","sha256":"861c359a6283ae947b99876ffd13f0bc60d5b3a3f9c044488a5604b8f6920da2","sha512":"b624a67c60d1e69928bf745de9824e13a592817907bcbecb39a94cf30cb6058b934b3214497a1a69d6e1cb7a7a2a6dbaff8d48a9590c707bc4e5ce9a5eb756f5","ssdeep":"192:FsDFziQRfjcerCn3ANaaoL4Xmjge6L9anELgWc:FsDFz9jc6CnD7L4WjgL9PLlc","tlshash":"87e1be49d99ef1059df92732685c7125b2059b421aca200cdf91e9a783e80b2bdbdf63","first_seen":"2026-10-06T14:34:19.130115Z","last_seen":"2026-10-07T08:34:03.356626Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-17.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.601Z","timestamp":1791362003601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-17.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1de2\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDxbqQYFGAsF5b55blY3ZhAFUuAYZyk5MPCOMiyCgUOCNv%2F%2FfzEmzy7OcvbENLHn8zGg3ZTy3FM%2FDNj7qfJJl2L6WsKmJAiljfWMHxANLbTwk%2B0pBF4RvSGWohzFkm4wqhJrdm2vJKgL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a8d12c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7650,"size_decoded":8355,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9a7fac797be140bcfed02beab5058913","sha1":"6a0da3c5af1b6ed808a64c1f7363d718a4c8cace","sha256":"37325519e4009da7c1d8322a94f94bc31d88945d3d5ce146296f03c92e8fbc98","sha512":"ec930cf748fa3b43605611d88ee55c45607109af1b1d8032c4f7ba72340911e6162a97258b23c4f1639866079ca0085a44b3ae4bcab2230df41e199293ad1730","ssdeep":"192:1eSRQh1LUPIt0iWSuliztgwd2X1WVclQIB3dV:1t2xpt0iWrlizld2lSclXX","tlshash":"dcf1af8a717196afa826ecc248efd258b652f915801fd66c35eec049d428c0007ffbd2","first_seen":"2026-10-06T14:34:19.118595Z","last_seen":"2026-10-07T08:34:03.357329Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/bybit.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.559Z","timestamp":1791362003559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /bybit.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3OuqpcaqfZUI%2BlyosdGf%2FyzCR23%2FjIebNSHyxzqBsLnLVasP28O2jt4ZU4e9nY8on667FVP1%2FU7Y4Waj0FTfw%2By9pQwFD63fZkpvdrdrAnbljXaSD2i9mulTA05qkVWNZn8CryRZ12u\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-6f8\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a3cdec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1784,"size_decoded":1498,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50dc834ae4b6926c3221405fae810510","sha1":"d39b558367a69f5f702189c58c440695aae779b1","sha256":"68f29e6dc1304c2e565a0ab8874a6b99c5f5be6ee8fc5f2c04c847874ed2b621","sha512":"7e04f937d23a2f4c3ddb6adb43f82d2115065fb2f56b2107672789f5a2d147bb5245a971b7148fc564f18aa9a1f96dc54db6d69ec2ff49292a3558f4eac7ca61","ssdeep":"","tlshash":"7831516cd2e8b292e449e3b0500df8a5381232fba771cba4628b0ea83c401990d8cde0","first_seen":"2026-10-06T14:34:19.098383Z","last_seen":"2026-10-07T08:34:03.35803Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/usde.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.576Z","timestamp":1791362003576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /usde.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1fc9\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ek6ufJSFF6gBP6UYvrmY1X6dCFw1WXJxnrKsqOJb815Q1rPxiGgoDQAlSrVuIWqxGp9GcjKnvkWupqF7PInwk93LqNXhYktGzBq7YF0HRPG8lga2ZxcNrpVteqqZS4qiMr1djgXeVFX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cf8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8137,"size_decoded":8834,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"427089c35ae0b2c280ec3e79ca3aff1b","sha1":"60c253595c7a13e5a74fae0015b0391ec5629f7b","sha256":"efe2181c49b6290a63d321f05f1dd09e518ad27089cbeadf7b71cbdc902f4af6","sha512":"c76967476ad3a47b4ca32bcfda428dcea586399d91f4901e13067786c2e9fc87b9ad77d2005de72452cfd6a51ca079edd89fbb91b4296fbaad33c20fdf5dc81f","ssdeep":"192:adWUOLNqQcOjIYzjQNI6zj4J50LY8QQCP8fF7:CkkJsIYz0NTj250U8QvPoF7","tlshash":"1ff1afa0e202f775e664e3dc439bf2214b33380a5bec8f1a5625a712e7f84b01e1d261","first_seen":"2026-10-06T14:34:19.01257Z","last_seen":"2026-10-07T08:34:03.358705Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.215Z","timestamp":1791362004215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=pPjVCWZqmWKoIf_30wQEBTziiZLb89JRskj71sO6CFQ-1791362004.3608608-1.0.1.1-0xFC3a6ZyUEyihnlEDbeav3iAnI9sTDV9hv2V4Y0wBE9O1yA.deNGw7GFPyUpd_qJKsuJoegQDaYKpmzy.nTUwDR_2Ganin8k4pnrXd1SgYK8WbCh2hY__k2qZZj9AVi; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 09:03:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srx2IluOPIrJSXOCbZWdd4mlaWjie5m9%2Fg%2Fk6F5NqL9Yg975dVKDkwAP2ljJLgNhnuiRo8zBAGBN8yZOBGA9A%2Fm7DFtkOBOicyWlTHJLk1qj%2BN0aPH43qEsPULB5RP22pDk%3D\"}]}\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46b8f8f3d2c0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pPjVCWZqmWKoIf_30wQEBTziiZLb89JRskj71sO6CFQ-1791362004.3608608-1.0.1.1-0xFC3a6ZyUEyihnlEDbeav3iAnI9sTDV9hv2V4Y0wBE9O1yA.deNGw7GFPyUpd_qJKsuJoegQDaYKpmzy.nTUwDR_2Ganin8k4pnrXd1SgYK8WbCh2hY__k2qZZj9AVi","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-07T09:03:24Z","raw_expires":"Wed, 07 Oct 2026 09:03:24 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pPjVCWZqmWKoIf_30wQEBTziiZLb89JRskj71sO6CFQ-1791362004.3608608-1.0.1.1-0xFC3a6ZyUEyihnlEDbeav3iAnI9sTDV9hv2V4Y0wBE9O1yA.deNGw7GFPyUpd_qJKsuJoegQDaYKpmzy.nTUwDR_2Ganin8k4pnrXd1SgYK8WbCh2hY__k2qZZj9AVi; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 09:03:24 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":1214,"mime_type":"application/json","magic":"JSON text data","md5":"c6531590e9503c30fec7b8b688f7e454","sha1":"97dc5b2e5d8a65c4b0a7cfdd200d71db1124dad6","sha256":"7662c7539091301d6d56a0c844d9aeff47088f8d22a7f1fe3bff5d9b32887ed3","sha512":"740e043231b800d7f6fa9deeb353eb13c9f0fead2b7adc23363b036a9dc9da7cbbfdad7919ade3600fa8ae3367ee4ea23706c69a01f6096c9bc8cdd35c64d266","ssdeep":"","tlshash":"88f08cf0ec06e899f8895847e9d0784540013cfd34dfcd0c4549b62b3ea21284f84aef","first_seen":"2026-10-07T08:05:27.629502Z","last_seen":"2026-10-07T12:35:15.637922Z","times_seen":114,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.715Z","timestamp":1791362004715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"0YWdUVIG-6m5COrMDH-E7_NffFot_P7GudQ_Btg-Zh0B4qITJiMFVwaK2LO4eUuKHBud3Ojr-RP6Qvc4M-6NUvqz58gKx-Ox90crpMSe"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o67OVpwj6ZjwSFiHUVHEk4iugukBOGSYsN4L5WUI0xHPS7JmU9FHY0dWjWmVVEesxAHLv89NdPti8D54Z%2BlByNeChQiqgNfdG1c%2BTFKx%2FP3zHkqbH3w3sq9MAWOb%2BnInbZPwdGqE9ZITyhRQE39IsasAQWaCSHQ%2FdsiR\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f917a8b5ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30003,"size_decoded":10322,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30003), with no line terminators","md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-10T14:22:55.095779Z","times_seen":230,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-20.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.605Z","timestamp":1791362003605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-20.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-237c\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CTUdUKbTgW0FVJXXCrZTtdBhJ5MVIlvGvKE7Np7Dr5pys9FPz5wcfg9M5tyOjED9Ipu%2FRzwlK5k0xLZpAbb0o8%2BlE6AC1Lblkff8jmv2SDqI3xofI%2BmdYFTOd3CtqgVIo1D2i%2Fi3Iiy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a8d16c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9084,"size_decoded":9789,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8930740094fb2f172b7f5666906c36fd","sha1":"c973b8e78366bd28dcdd78f1f4a00d7f1254ac62","sha256":"e111aae1f6b463ad8fa9fdd5f1e5171ea735250dbcef26f0e58e8906aad2775c","sha512":"d04076e580236b5469b2c32e4ddef8f587c4f266e39da9158c3644d21d50c167341086eab73eb65f184750e582c82bcd4b6ac877b6c5251c5a7041de1492a818","ssdeep":"192:n7tRTTVRCnzEhjwOzgpZuUGEa/8fXG6Dk0TKWGKSdg:7tRTpRuviKaEW8+o1K3dg","tlshash":"da129f0e76df748f26e481e0cf1756bf3978583d1c84049688b314bd19d7a428b56b1f","first_seen":"2026-10-06T14:34:18.975233Z","last_seen":"2026-10-07T08:34:03.360801Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/HMN3opxbcAACXq2.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.653Z","timestamp":1791362003653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /HMN3opxbcAACXq2.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-4b61\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiKYKklrAeGguMZK90gEdnmECAIMkXWMXv%2B1SGCarKkxhej1snLb%2BZwCU%2FLJBCNqJs4q8SNJJmd91SCv0D50v9YIwufLKuiFLuDA8OQa1NYGI7qLwu4hBHvf4IchzNlONTncr%2BXX6c%2BK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8add4ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19297,"size_decoded":20005,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"ab1d5d0b8eb0820522bb1397b399640e","sha1":"b5788ee67831a03895373ede6fad9a8a8f2672d2","sha256":"a85fc2aae534cc1bdd4570ee6e452e7ff1b792de7e1430a6aba7c0e07bdb69d2","sha512":"7857e3aa4bd63e002ba93f1e2442f75bac1a9f2d812dc03c63eb8e5ad272bf999410b3a164212b1d85a370790d99c0d5048995164c77e798b05e685bcd8198ea","ssdeep":"384:sri2UHPQuuyi0n9uPgRhvZjtHXIskFEwWEWuM8rQPHBPLRFfRCjwJSnHYp5X:92MR9RBdGsk1fMYQJP7JuHG5X","tlshash":"f782e05c49f2539a8caa3567d0d6f44b0f82db0ab4f13c8fabcadd4e8741068102a786","first_seen":"2026-10-06T14:34:19.08739Z","last_seen":"2026-10-07T08:34:03.361538Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/franklin-templeton.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.553Z","timestamp":1791362003553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /franklin-templeton.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-6686\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6q%2BmovXvg6RJt4dyzsnOQ6ChZGXh4B9F4hEu9WVMWodWpJgXYPsUKdgPJBLr1eb8iJ7JGdxesH6AKafblGyOxEJ2TonLUpvSdKU2SIvQnmiUKyJ36aBDqGHv%2BxBWcA%2FddXgqXgBMk3f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a3cd3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26246,"size_decoded":26950,"mime_type":"image/png","magic":"PNG image data, 479 x 94, 8-bit/color RGBA, non-interlaced","md5":"9e0082448d0bbe750695e7b627896354","sha1":"9d3ccabc86eed3662990840ec926738b60759b1d","sha256":"0d72cae52edafd0cdbb516a35b5f6e007efb81355a29800e90b3d3b6c4ff67d4","sha512":"5721c9d824be797b58f20db1a4d95c5bf81dabd59cb5061f48625f2b738758b416e305dd43c305aae6a3697522c9635ed8b29ea0a73ef9988ae81e31b5ba2eed","ssdeep":"768:GOqgWnwV8LSMI/pQt0p8zF1T26A7ZXld1EH3+Ph407vM:GOqgkwaL7I/pQt0py7E1EuP207M","tlshash":"96c2e18b85f30c456a3a2394138daa178a63721639ed7a9ef35831d074c65357ea6b01","first_seen":"2026-10-06T14:34:19.067765Z","last_seen":"2026-10-07T08:34:03.362242Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-09.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.591Z","timestamp":1791362003591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-09.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2074\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3L6I1laHKHEJWMCcOcCsvTxvMmYjDGhO67dkeQLnPtWaCQzZqZ04NVS%2BON3rlY3Ag5%2FW74CqQ6LCDcmZSW9Gf2tPJf4rRzYAexqMxnBrYFQq0CGiRhc9Ll9%2F0PP%2FAcjg0mePGffjbFXY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d09c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8308,"size_decoded":9013,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6cc92f7b515886794464fa243ca87fff","sha1":"1d84df7acbd2b72126690a16f5e7538369f30a51","sha256":"2a1b8c7cc96b74cd77c0ab960aaaf26a3e24f16915f443631f9e8135a9d656f4","sha512":"c88609035ac91ec627ea58d259c22a5d2693a97c16a36b8c6e347c2487c16b0137de4f5d6c45b361a1f2e71cde20276b1f9cf8854e41c6f0f15e77653f1247fa","ssdeep":"192:qFWiavbe2cG2TXRVUbPVkRQQaT2REZUGhQDWkmPkuuWQQdwBQ:ViQe2ITAbdkRQ7XQ3Cd6Q","tlshash":"db029ec6d74164657c5cd6a475e5bf44aa2c93a2079e1ac3be26c83bce3b3713e43280","first_seen":"2026-10-06T14:34:19.106333Z","last_seen":"2026-10-07T08:34:03.363047Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-26.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.616Z","timestamp":1791362003616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-26.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-20c6\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHmG5IZ2ZZuTgEPb3q6SsXoC1guSK%2FuOFThagYIj74ZPHlVrRXMS7N0bo1xwFm4YSKC7ML0Ljdkr0pX1giU3rk6aN%2BXBZTGPaMWYddKQ4UpPpYCaB5knYoPG5ESJ44kuE3Z6oL%2Fbwo9N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a9d1dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8390,"size_decoded":9093,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e7ffbeb840a3e3d2e47a57ab3a3db446","sha1":"5ae7e110c14c63a22d2e5f20c1b7acfed81349c9","sha256":"a23d47896b02f32a5da854049361cefa6df4b254efa92ba7ff95f66120bb41ee","sha512":"1bcdc7c2dcc0b6caec2c0a8908018e75cb4af1a8f3ec54ea4f2b0b0806a5145279bb371bafc4a72c144f9f82efacd23bdfd76a70d7617f1d023bf9f83f171fa1","ssdeep":"192:qp9GuFqstJYQDpI7I1T5zhIFz1iYm0mD+HjmLe+tDE9:8qstKQd1TJWV1QvD+CLXD8","tlshash":"4b02ae88fbe99645b1e2fe2611ba83e0d8d53aa26427ec122c9927195133832d3303e4","first_seen":"2026-10-06T14:34:19.001486Z","last_seen":"2026-10-07T08:34:03.363796Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/grove.jpeg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.644Z","timestamp":1791362003644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /grove.jpeg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-b43b\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JqK1UHLHyWhVHnjsVEltzPIGb5LAhZGTsoyDFIqgu5GKUVHmgvPUwuOGulLaRjrp6Vye2EkStvWa7LSlReqIODc3VkOjh9WloeutcnNQdL35EGww%2FGNETV9dHm0tOObP%2BjSGt8OMROk9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8acd43c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46139\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46139,"size_decoded":46842,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"52c50594b3b4139c254110cc02a93bc3","sha1":"482b870d8dbc975430ced0323d095a407d0c8d17","sha256":"3aa4c5d770041b743894b21d19d4640d044acfa9f6560cfe98832e5b22a06b8f","sha512":"746ce86eacbae86509421f6ef3cb7ee129cc8f15f33857b914c9676e0264814372a97bed1512dfd249bd9301fc8772f27d575bb14c3c0e7a616d960d28f7bef6","ssdeep":"768:H1CO6NnsbPwqh9yyGy2eh3Rot5BnbCL49vPog9+rjAhtrfnxF0O+Qu18LMMbh250:H1mQwq7yz+h3RoHBnbi4FoFrjGtzj+hm","tlshash":"9223f115a5b0fb51fd0d7aad42b837e01bd90fa07339cde83952c89943ee39859e214e","first_seen":"2026-10-06T14:34:19.018266Z","last_seen":"2026-10-07T08:34:03.364585Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/HMyVomMbAAAmb_Y.jpeg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.650Z","timestamp":1791362003650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /HMyVomMbAAAmb_Y.jpeg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-e18b\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Io8cHSmpLl5q%2FX8IeRCMfyWN8p2PKn00PKmFbOMDWyN00R9XaEAsHkYvOrUoUig72CMr4gQsQQ8YrmLYGRaEkntv6sUCtBlXgab%2BC8pENvFBzMAGDQFmT23HSTEEkmJmBwF4Odyvu46H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8add4cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57739\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57739,"size_decoded":58442,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x451, components 3","md5":"917ad2cbe25a2e70fe803de2dcd1d02c","sha1":"331f51c7be7816ee0698c5c11fb3cd8f1ccb3502","sha256":"b3cd7548416b6470404e2a8651d8bb99b841c9ef137a83f9bd2bb1ccaa438f0a","sha512":"6ab0b49a8c701575ed6d7f19f9ba432c49a0f47223b190df814b050ce1ba66a20bda1225599754bc0dd4a42c3fa5a75767d54b14e87d7c51aa528e6ebcf04db1","ssdeep":"1536:bhQAmvwB3bslQcA1YG/7ND3VXxvOZakfMHRjX3blgSDn:uf8w+cObjVhvQa2iBhgYn","tlshash":"db43019fc2fba23bfd5a1d7d0e2225e340dac86536963f4a28a1cb15636e43c9c452d4","first_seen":"2026-10-06T14:34:19.111905Z","last_seen":"2026-10-07T08:34:03.368137Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/syrupusdt.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.578Z","timestamp":1791362003578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /syrupusdt.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1331\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psxWYTNaOxylIHv5pAy5%2BlP16eydXU%2F1OCV2qsuBmuYlEXFJhF89DWY%2BeqipvlJQD9DrLws6aLxhTi%2FuZ0qPKbtQo4pMh7XdhCn27B2Mrhv2PTR3imtVElW%2BYGROA%2FYBj30egFrswaPn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cfac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4913,"size_decoded":5622,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"89a4f62bd8d50f854453f406770c88e2","sha1":"6176e1d3bc29e19a847ed01b38e0738a4a7583e6","sha256":"66c3c419b1d6e9774b10c5462bc0b5909d655a76a2826d88b33a4b32c377c59a","sha512":"e02cc5f0c1c6dba8e9c3a3e414ccc107bb4b8df163c09b62768ef64c307b917fbb800b2a59077d889625cedac97c8e0a619f10a0308704237273de1e7a7f72dd","ssdeep":"96:p7kCIfgOt76kX323BEbYLZjPcGR7SLeZKSIgSZuJj91dyyFoCcKc89jPtA1:NkCIfgOv32RESrcGeeZK8SZuDrF5i4M","tlshash":"8aa19dcd256392090b3ee98608be680e412b31b00299417f460cd93c787af741bfbada","first_seen":"2026-10-06T14:34:19.100582Z","last_seen":"2026-10-07T08:34:03.369174Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/maple.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.558Z","timestamp":1791362003558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /maple.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oa01Dp3ouoTCY99709Wp9TcOtxq%2F4geA0onIjeWrVdEQDrom739d053mZ1i%2Bb%2BLT6%2F9D3%2BqlPSIMGWQZA%2Bu9uUpcpoy70P8hw2OjzakA5lIioOG7S%2FmISEsiLhOOOmz31QvfcunTTyil\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-bad\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a3cdcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2989,"size_decoded":2032,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fae55597f663dd4cf76d5053218ccc4","sha1":"69f832d5a52d3613ae9d69d91748bc694d6376b3","sha256":"fb5062f58af6cf57dfa89e72a121978b2154dcbeac680e33a952cbc79af444a1","sha512":"613b19b1931c8c86f874a8f2a3956b577efaefe77a2582e33bba264840c8d6d642a664e8936b7be0dfeda44be9a2fd79c8bf7ca044d0fa79215bbfcf17630831","ssdeep":"","tlshash":"ce5142cc333651a8f488a7e85d5b962abf0668d4df89c58ac310ad15708359d8c7a5d3","first_seen":"2026-06-30T21:35:28.644868Z","last_seen":"2026-10-07T08:34:03.371072Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-01.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.580Z","timestamp":1791362003580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-01.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-24aa\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08Bg3EmLnnilHSP0d9zA5WPYjkLqNCD1dlcG9Mrkfhsonj6LhE7YJaEJUHuj3qB%2F91W%2F3QWCutxBjPTIMrdN4qjsn3LQ%2FNpp8S5zIy4yqPVm0j3RAiqM1NjTU%2BCuV68gzgzJ%2BqUy09TC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cfcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9386,"size_decoded":10093,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2cf875a94b49089d0ffc9f7fbefcdf33","sha1":"6edd885522377692f5191a36864cd2049de5e6f1","sha256":"ee704a4e8580c3bce8e5e8edc6f9e9797e7092bb7e74d17e1745869f7f0fa4d5","sha512":"a962d62a30d78255c1247747f24e0492ca4e3cbbc31019378b50f35d03ab3ffee8f9597923d85a593f8253052f28c7726209e39a8c6995b8a7e3fac0605c1958","ssdeep":"192:pUiZns5zzNGrW5FOlYppZUTf03JEwK74sHhyzoslodQcbbkmpW/:pU/5ca5ElYppZUaSwUP4zoEoKcfjA/","tlshash":"7512b0e6d4bd3d71d5d46364259f410cc92288aff1182ae96f9ea3f7717b49b0620307","first_seen":"2026-10-06T14:34:19.09137Z","last_seen":"2026-10-07T08:34:03.372447Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-02.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.581Z","timestamp":1791362003581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-02.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-294b\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYXFTVyJLhDW1vFxwB9WR1uSTgnFhY3m3h%2BTrBW1Sc89%2BWkLLBFmiQjhKXdoXlXgYSM4G2nJKGii39CoxzMQylWABfj9EHxFDecd5Wk0gRRvMM2KRoH74CmWMyO7bbHcjJhfhMQyBzUw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6cffc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10571,"size_decoded":11273,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5692becfa7d7906f1adc45bccb309db4","sha1":"bc4bd3b74700671ed37f15f9918365875627db78","sha256":"d3e352267668a8c1e6c33c1b71ce5f84b3d35ef27fba6132244661177f41a27c","sha512":"8b29c854518b0972614b9922f80991ed1a3addd958da35037509a3b07da18d7a512ec16579dd26d45433019dbaa20c4d174a1142f2033a74e4c86f0b87b347a7","ssdeep":"192:fhtI47H5muWlvNfwGLCz7FR6IcqQVQdmqsxNe8OV/2Qg/d:fhtIuH5muWl6OCz7FEPQdmZxNlOVOl/d","tlshash":"0122b0d09862a0c9bb6a6388ad3e2c556bbf0ffd6e4c5d6006b644a475835613dcd04f","first_seen":"2026-10-06T14:34:19.116068Z","last_seen":"2026-10-07T08:34:03.373705Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-12.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.594Z","timestamp":1791362003594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-12.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1e03\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqIy%2B%2BlvS2wdbsYpW5aqS5ySIKv0dwOQ68ylplthRBcj1eMY0op1CfXCTra538iiBn%2FNO%2FAgDD3eMVFm0GgthJW29LqDR%2FyIevHO5dkkGPeEm%2BeaUWWgkjk%2F3bEJg5TxtQ1mX7NZNnQF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d0dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7683\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7683,"size_decoded":8394,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"12976e51b2538a842c74253499a2cd2e","sha1":"987716d6de1ae58ecf5cd5ae7184a934063ff63f","sha256":"8aae14f69472cdb60c5d6e6873b58b796e46f2b945ccaf056dbf5fe1b4f28a30","sha512":"b78d9a9f2d59ed3c53fa3a99f450745784bf1171204e7682dba812407dba25909ea78bd5d03972aabb8825aa44e4508f732edae901ef33b7c6383bd423faaf53","ssdeep":"96:rY7NPwfzjM9ke0/r+7BCzsRXUH1MKWwJ0ZSpVMHqSNYpV/i31L+JVUUrEqQuO+55:pjMGeZdqWwJ0ZWy0V/i3WPrET203ix","tlshash":"f8f1afc02857c7a89ec0ee020b1d513185985e5f6e9de43d9096ac3ed39f5ecc0ba6ac","first_seen":"2026-10-06T14:34:19.107374Z","last_seen":"2026-10-07T08:34:03.374789Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-25.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.614Z","timestamp":1791362003614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-25.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-42ed\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Sd6rLiPhKx4aFH07r6ygw0I3BKCkgcjEy7Xsslu1xJBAvHyCpUAS2M0vbO2xroOogtnqs8WiPkEuh9owAVW4f9gbzFPjZhVpk%2BO%2FkcMltVtlmllailOo1a%2BORcXMMeojgemz3ge13Vd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a9d1cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17133\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17133,"size_decoded":17837,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"fe567772fc65e9db25cef44971e4b806","sha1":"e15301c0a7362685652296d9ef38b92b19757bf3","sha256":"f72500d43a3eaf3b2e233fafd5ca24175e4364e908e5d1db014ee39a42306938","sha512":"7a86399b0228b48a33de8ce603dcff667afc0569af04193c8843481a808c2e43216bb3e0f569658dfe9fabd46ed8a8e64bb37e93a651f84d630257193020dfac","ssdeep":"384:Hj14h0l9FYzb8lffyeg1hY5K4t3D4RrQznqEm5uqkH2ZeHMXDDAnp:5YMlfWBflUxm5uEHXDDAp","tlshash":"1372cf05a3f531adc93e4ec45306a7e9d6b5556c3387dcc09f7e8925a901a80e2e7b43","first_seen":"2026-10-06T14:34:19.043795Z","last_seen":"2026-10-07T08:34:03.376353Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/20260818-173110.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.649Z","timestamp":1791362003649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /20260818-173110.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-43b3\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Is7tupaxlMiRx3iovpuwV4fGUP1SzrJiR29PdajYjx8GnDHPFepnoWal9O8RydT11%2B2Ic6D2B6J4%2FImNtVJg6ikBD%2FG7NKyi3w89pWf9xudfQ74tlVeMjjB9N2Bxvoq6mr8oSW4y3CVj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8acd4ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17331\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17331,"size_decoded":18035,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"341e37e2b78bd66703947f68439d91ba","sha1":"781b6bb1c5338e1c0112325491f056cce8d53e07","sha256":"affc5ebad5fea7d5020c6f26d60b27810c3532a991d67fe9ad53a307c1cb4c73","sha512":"c737efe611aebb322c8d109bbe1426290cf075ea1fe21af3d5554954da41130df41a0544d8addbb9f57dae0a91562f55aea3c5199ed363978dcb408249f1d1d4","ssdeep":"384:Jv533qWAAMI0apHNnkkfuwKKKKKKKKKK81pLayS7SSY5wPnr89dJm:x531AA50apHNXLKKKKKKKKKK83+M75E","tlshash":"8d72be33a67ca1b25382f66b65f50ecbcd7756466127c291533923ec8f8943058ed9c3","first_seen":"2026-10-06T14:34:19.135003Z","last_seen":"2026-10-07T08:34:03.377878Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.216Z","timestamp":1791362004216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a46b8f8f18d50b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":723,"mime_type":"application/json","magic":"JSON text data","md5":"c6531590e9503c30fec7b8b688f7e454","sha1":"97dc5b2e5d8a65c4b0a7cfdd200d71db1124dad6","sha256":"7662c7539091301d6d56a0c844d9aeff47088f8d22a7f1fe3bff5d9b32887ed3","sha512":"740e043231b800d7f6fa9deeb353eb13c9f0fead2b7adc23363b036a9dc9da7cbbfdad7919ade3600fa8ae3367ee4ea23706c69a01f6096c9bc8cdd35c64d266","ssdeep":"","tlshash":"88f08cf0ec06e899f8895847e9d0784540013cfd34dfcd0c4549b62b3ea21284f84aef","first_seen":"2026-10-07T08:05:27.629502Z","last_seen":"2026-10-07T12:35:15.637922Z","times_seen":114,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/usdt0.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.565Z","timestamp":1791362003565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /usdt0.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-23f6\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2OkpjYE2DjOgiJFrv1dD3QK8SzSrgIazVRJH2pfAUmArhpPkDw3IFAoE%2FQ2p8UEEEEhlUFAJpb75pP3JSqQDdUp1oeJjjawUmzVopmoRXzLUp8yr52paImLehZOvKVsR7zzKyhJjOAK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a4ce7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9206,"size_decoded":9905,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"bf3d836ffb0e50cd9b428c514513d6cd","sha1":"91b37656bca3de41c11b0ff67b9710d42b99fb33","sha256":"e0ed783f08e2056d778f27054b1aff4bee40d634095bbfa88492cd4ade65d61e","sha512":"cf3ac70824c54960d9090e138829593b4d5670b83d7387051983798f29120285955dd7b7228f045015eea2f36aa10fbe2dfcb692231f7797ac9b214aa7557beb","ssdeep":"192:SPhB3xPqBunAcswvS4Cq/KNk+ci9PAemwVjSNkFd8XmkBoaW:a3FqBuPRxlSjcgJOug2kqaW","tlshash":"cd12aeb9c603b056d70d9ff984d7290a26b3be9c5f0d9d03ac8a520d18944130e17bdb","first_seen":"2026-10-06T14:34:19.124454Z","last_seen":"2026-10-07T08:34:03.37907Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/cook.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.572Z","timestamp":1791362003572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /cook.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1e46\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0T1RvRyFrm5ypuivP3%2BibdZECNFEaUXU5h4D%2FW2Bs8HCTTLyLzGhvYQSbiltb39EOA4seY59lehTAUstm5duhsToVRrlXtRSynWkof2SYkUt%2F8IgUO4y9G%2BOG3234bKKRuYy5ImCb9g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cefc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750,"size_decoded":8455,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"828ac7e5120f437c45ab46bd2fbc2737","sha1":"22856dea187581c7d4915949cb4b3ce7e4585653","sha256":"0dc68ea79ad3e651147133923698741c37b413d61d4344667074a685574c4d2d","sha512":"7496e4152c85fcf81efd891f0e951b8a060f42c7e39fec9d1f1065abbce99c5cf33cceeaaead23f25086984e6fc09ba75a721d984fa5832f4f6a4c721075e8a9","ssdeep":"192:pULANJeUi5/nIYh/UnmUNovlWXjY1B3FwkcTdUmfwqwfyY9:BAmY2mUNoEEP3FwkcZUmfwrfyY9","tlshash":"19f1bfc09de04e946e76d6056adb9724c756a020ab4071e13f6fe73af481dc6f209fc1","first_seen":"2026-10-06T14:34:19.125546Z","last_seen":"2026-10-07T08:34:03.380294Z","times_seen":9,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-13.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.595Z","timestamp":1791362003595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-13.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-205e\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2J80Qxt954SqSftLXSElMmMfu9HWST8tY1Z5lVfZoe8Cxw3SSDlkOr70a0oMX8nucoLNT6Hjl%2FvIbRBSq9Z7OmSy3l7cHAw4vckQOTfVClwEse2TAVUkGS3VVMXp6vCRwwwep2QKLveb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d0ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8286,"size_decoded":8985,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"29262f88ae6d5c714b21a036ece6bd05","sha1":"1fda2c7788209092c59f920b37e846d05af1b5ab","sha256":"5e4ad74d97ba93d79eaf69fc795da4277d7669bdd621ac7832e701e8bc2d1c34","sha512":"2568811966984b3f35ab29c2576022222988d988c218535e3a083f5a3dae605dc19ab753dfb3b058aae9f6e6711f12eec9d94f8126edbec345a35dee972f1c85","ssdeep":"192:UNTo+zasfxrnxVJ1QwAm56ItNLmO9IqY34VB+Qm5s:UKka0rxVJUmIuNq3fo2Jy","tlshash":"5c02b0d7f3ed96cab277f23154671a446060dad9012818e104eafab77058e90713ff59","first_seen":"2026-10-06T14:34:19.084533Z","last_seen":"2026-10-07T08:34:03.381532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-15.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.598Z","timestamp":1791362003598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-15.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2454\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWOF2iAxvPnw1SYssU18gcNKEW1SRDwFk9Dokap697k%2B2UOGY2TkIWhU100CRIXg7sYooap86lSND5sWM7FrBDEWm%2FR3mCAx1VYR3hdcNvkA%2BxzwavsvwKtB3sbyd%2FQDRAXt0pQis0at\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d10c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9300,"size_decoded":10005,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2a76ccf63ff16f643365eb26dec568fd","sha1":"23dde4d6e18dc2b13eb8e841f4cffe6a5ba89d28","sha256":"ecdf8347c00b6f97b08dd396bfe026af9045dc4994234858bc257e475fe579ba","sha512":"49502ddd20b16b682eba4da16550e3d183f5493bd9a4a875fb72b826a308f530369f91b747870cb1696cf2f0147b660e33c192dd513dfc48b20d35a629013b9c","ssdeep":"192:Xly8UJs8EC5Ax/oeb4d/4MVNJbbAYT55rBiKogxU21yE:XlTgH5CUWKvbAYDrIG","tlshash":"0612aec21b02669ca52c2a6a82d75b01c4fe195931f67ecd74942639e7acf1480e16f9","first_seen":"2026-10-06T14:34:19.075823Z","last_seen":"2026-10-07T08:34:03.382572Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-28.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.619Z","timestamp":1791362003619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-28.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-224a\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0lZmZbY8bbYnNJsKywwnovLqXdk6wXuOVKeGsKMUV88ytIeT5HtMvhRJDWVLj6M%2FenBtyv06tLFHxTRU9XTQLWOpaKTylf15eAHndbWxrzg79ZymLAuWI5i4Bsqeny4EVFtIjyoutOz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8aad20c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8778,"size_decoded":9477,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c70d427e02d43e5521bcb527689e8896","sha1":"266d53141e60114ce9b05eb7d0caee15593d7845","sha256":"3ad23af27358b3ebe0fe80a75bef7017ff42ff747679ec649b62648e0159457e","sha512":"598f1ebdd3085b5844fbb1a60d4b9e470d6d8d31f666b82cec9be827ea4401594c0a5681d9ecae36ce187607fffe6594ee2e02390b7339213981ce84fc262004","ssdeep":"192:qKR4ag+Nq4Ki7+JJisHfdoUzR8fyPib6y2xeEnFSk:qK3g+Mi7+JJZG3KiH8eEnFP","tlshash":"a502bf620a88fc6d8b9b6c630e6900cbde8bc6f9593a0d19984da9019f45c4098cccff","first_seen":"2026-10-06T14:34:19.015735Z","last_seen":"2026-10-07T08:34:03.384558Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/HMnypszbkAAw_nV.jpeg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.652Z","timestamp":1791362003652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /HMnypszbkAAw_nV.jpeg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-549a\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOSYjkaE4%2BvMXJMNg32RV2jFgbwGu9u8BOFFttyn%2FfX19T8BtTrgdk425tttM5D0IeX6%2F8gQpAQe9lLQwWGdHYbN4EWPrqOMFw1NqjMvPoUQfltxH2Zn9B3fkvak7YCdcHw0itgYZ%2FLp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8add4dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21658,"size_decoded":22365,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"78f36aa46ff3c908fac4204ae1b6857b","sha1":"71acffc63451e44e8d27843f683b26ed55fb8017","sha256":"9d2a8ac4077cdb7ef44df664d38873034e147c3b520d053d31e5f70beb1213ff","sha512":"9b8b10ad1cbfa52a7ae32b342a34a137b01df355c2b1279e463ceb934536a38d542d778f9faf7090fb0a9fd04c12e9d5d1fc4e8f9b65b9ffcc94dc5f56ad65da","ssdeep":"384:3kThrcibwbIwOU9KSgPaSFxp5BdkEHDcE/n9R6nWqGHNKsahRxCLIj8wF:ShrcnMVU9jyFJB2gDLlBHNJahRxCLIo+","tlshash":"8ea2e1bc0b0d1879d94ea8fd106600f6ac20f30adb7576f2b6c656b44b58e4a9dc87cd","first_seen":"2026-10-06T14:34:19.019842Z","last_seen":"2026-10-07T08:34:03.385739Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.223Z","timestamp":1791362004223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=fcHEG4MGDwRbIp9cMuMNrtuXi9cjh2EB6jX1qvzrJMw-1791362004.25085-1.0.1.1-5z1WIbIo8JYDpBXZnbja5Jp.g8qlTCjB9EBBpz0TJG9IqAR5XWiFV_zyZ.FvBAmrVaVylQ2Qgvt2uhZL_xgSJas20AatbEgj4ejPxSrSalyIqnZDcNCrTlBiL6DmgkhT; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 09:03:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWwNxOicKACTu6Zup9bMhfOA3UTdJ%2BipAZlzexQ2QtpWSVrdR6R50raQkxfkO3vKejrUqhggSYaXSRo98Z0wrrGUmS4gy90uSjqMOWv8cb1O4z4HIp18sh3wI1gCyKVQ2AY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a46b8f8e8b180883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"fcHEG4MGDwRbIp9cMuMNrtuXi9cjh2EB6jX1qvzrJMw-1791362004.25085-1.0.1.1-5z1WIbIo8JYDpBXZnbja5Jp.g8qlTCjB9EBBpz0TJG9IqAR5XWiFV_zyZ.FvBAmrVaVylQ2Qgvt2uhZL_xgSJas20AatbEgj4ejPxSrSalyIqnZDcNCrTlBiL6DmgkhT","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-07T09:03:24Z","raw_expires":"Wed, 07 Oct 2026 09:03:24 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=fcHEG4MGDwRbIp9cMuMNrtuXi9cjh2EB6jX1qvzrJMw-1791362004.25085-1.0.1.1-5z1WIbIo8JYDpBXZnbja5Jp.g8qlTCjB9EBBpz0TJG9IqAR5XWiFV_zyZ.FvBAmrVaVylQ2Qgvt2uhZL_xgSJas20AatbEgj4ejPxSrSalyIqnZDcNCrTlBiL6DmgkhT; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 09:03:24 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1050,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":102,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-10.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.592Z","timestamp":1791362003592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-10.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-299f\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ej0g18HKfxgTok377u1TCqCXCe1ByiSzb9fJSvHtOUeA2MDN6mfcXIO1hBTBa4hgpg%2B1QJMhsY6FxOgT5GZhoL6lLr6due7O6Y10Sa35Crw%2BDdtuM46OK0I6ckR1jioeRCsZT6OQV0R6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d0ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10655\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10655,"size_decoded":11357,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"90c864520a1047f23c35b276801c2f07","sha1":"854d0a52fd0b8d258f07fd45a6003af622e09290","sha256":"b0f7c0bbb3eb33aecc4149a078596cf56e5d09cadaa7c268d587628d3b1944ef","sha512":"dc8d7409cea0b97689bc9d3e329a3d5afa0d901787d4e28205662716b7e4e29e6badb812405250db40cc7f8dbca5bde5b03de0e5033c08dc146d1d55b48c8265","ssdeep":"192:94JoOcdO0lE9VuC3QJbsDNCcDdIJBG1avjZ76g85GOoVS8UzPjHIlf7yV:IzWE9Vb3WiVdIJo0vjZ7785xoFwjHGW","tlshash":"1b22c0c45169a07e388d5bd0141f1d1fa316da8e2a181eb77b3d3ee1760025facbf210","first_seen":"2026-10-06T14:34:19.082982Z","last_seen":"2026-10-07T08:34:03.387107Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.221Z","timestamp":1791362004221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 429 \r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 17\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJCGsbv%2Flc309Nbik%2B8uxkthOa0%2BIXxHch6q550nbUevAuQy%2FO1rnEj3j3me3XSkbx6tBeJ2SOHCI2NhLndfHqxjGkAWd2MnZLgkDIcNnEM8WSW4JRXYF8GPKS8npv1ovcE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a46b8f8effc0b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":660,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"014a342f7f60eef4a7433d007a78819b","sha1":"cf278a30afa195a68cb86470fa53e8dfb3b98030","sha256":"3850dfdbf4489250268b5f0740240a9f4445e7c5c29e1d03aa0c5446808d7507","sha512":"94b52494d856eef890d8b979d747e3102d797c38b4e5a3420bd528bcde17dbc9e5d3d5f790721e7e3f1d65cda1b414a45ac4bd18869f29a689afa887a250e8ac","ssdeep":"","tlshash":"2b60000202c0200c80a08802a800ca8000202020a0002032000832c20000800000080c","first_seen":"2023-04-16T12:58:21Z","last_seen":"2026-10-11T02:13:09.565915Z","times_seen":649,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.713Z","timestamp":1791362004713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"MxHDsgOWQA2GxXVR-WjMy_taWHj8P-tK2C206eNBlwHeIfTCLzBgzAjKPrEJtvypwMahWt34DIRsTCQWmddHk8PNu6RqZXPbWauOrtkacA"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyHD%2Buwi%2B7Cd3CYlwqmSUM780%2BkufHPgqRgnMvlMGmONbk5%2BneZQTFBAunnkM5JlFz%2Be9GM2rXbtzMrDu8%2FmNBChtxUf8bh%2BLrMbCIhUtMoOIaUe9M%2B4n3boHf3q4YCeBioJ%2FDXIx6Nxwx%2BNGpaAyJbKwXdUSvzM7CUu\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f917a895ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528504,"size_decoded":158781,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-11T12:33:27.722481Z","times_seen":412,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/ondo.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.552Z","timestamp":1791362003552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /ondo.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4x0jp3y%2FK%2FKujn176kBiLal4CCOeP0cpuQGBJdijkvzKnYaCVrPDvAodilkxzV3sxnxwlpcqIny4QnWArbfekHQhvZ%2FkEW4b3KS5zZ9h7zRpCNbN5F42abRBzhL4Yics6l3%2FRpn7%2Fcv\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-da3\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a3cd2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3491,"size_decoded":2085,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fd6ebf0077a15af71ab4a172c908326","sha1":"c88b95fc590fa059eafeec60565130b22d19639c","sha256":"29ff9f76101c4a38e360071403bcabd4b45e150fae6498233162664573a57ba5","sha512":"06a56fdd8f2bb83652a1d91d6754795d45bbffd4c1c23fd59ce17c5e8f47c2ffcbd75e2c2313ee123a92e40652e03e56b39832c72efc065bed655b17b387f7ea","ssdeep":"","tlshash":"b97101f233d8f8ecf509e7a08822f966765630fe27248956c3806e58e50605d998edb8","first_seen":"2026-10-06T14:34:19.011228Z","last_seen":"2026-10-07T08:34:03.390414Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/anchorage.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.555Z","timestamp":1791362003555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /anchorage.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gPjaKFN1PceS3X2DDtb%2FN%2BgbQw7m9ITZKyoJL6WrFnUF4UoaDiJ33rJC1tFwGBEsT%2BITBW%2Bal%2FWuvb8LvEdfJMtKhDrA80Lw5t6vh9VYhHje6QFLFwPJ68CzpY4CA89WpUFTUZSSK43\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-2b91\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a3cd6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11153,"size_decoded":3782,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06e465c699a985be9ba16ea6b29e6b2a","sha1":"2310d8cce5adcb8287c88ce6b881cb52fa6e1b6f","sha256":"e6a8276f21927cd10cdc68c0ee306dc0d5a6aa317598af4226f767d247360042","sha512":"74bfbb83f4efb6275cf464c84dd30455257f96459dd8904c546dc373877ada923b01d62117d4369d672a46d2eeac052446a8ab12c3baa1e560b09a1c4195acbc","ssdeep":"192:wJPyVFBxyg2mSIFUZbUd0WO7nl9sqopg8SqoO5gnaJqoL76cVj3:qE35aZbhnlHWf6Lytj3","tlshash":"98321d570338177df9875d95993810a33fc2a8cbd364e1eceab3aa01a54aaf18475d3c","first_seen":"2026-10-06T14:34:19.057897Z","last_seen":"2026-10-07T08:34:03.391272Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/usdy.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.570Z","timestamp":1791362003570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /usdy.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1eed\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JOzfmPHWqldlfxgix3Hp1t%2BcefcP8CwnEUJXzlQO8NkfHUEWRlhsNH4hCN%2BhKRjC5TmJDAiSBMMl%2FDtRJTH2ApP9nk2et1jxDdMhIMYljDcQ%2BTwR4mSNHEHl9P4wEtEQuHGy%2FH1g%2FPt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5ceec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7917\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7917,"size_decoded":8626,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"d8169bf263180325c93480fab1d214e1","sha1":"89f17e7cc3475660147361558c89ffecf2e066ba","sha256":"5e00824888bb2a955d63cd505dd60d5902b2eac422888daaa4be0ab0f695d272","sha512":"0ee00335f707eea7e1322cbf9f01cc674927c546e8f975c02db817ded413db298e41b94f947b27a92461902c1b87eba20fde4188f874dabeff89719b16516884","ssdeep":"192:6pypftdGsTbIs3ryg9pC02s0/Dos5XPF8Uvd5:6kptdLIt42s07yUX","tlshash":"76f1a08dbcdf69128fe4d163bd4f2858fba772c79944d1b3b4990a27c4ad3d42185242","first_seen":"2026-10-06T14:34:19.070924Z","last_seen":"2026-10-07T08:34:03.3936Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/USDG.jpeg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.639Z","timestamp":1791362003639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /USDG.jpeg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-4860\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BapQbLRDUodYE9HKJ2PC9%2Fyk0UHNSFLWcJoRa%2BIHF5DAeOgqIT%2F%2BtlQ54wqFA%2Bgbbyot4wUL4mPHJMs%2Fy%2FVFkhxL4phFbslATB5%2Bv2IfjbhNzpHdYpur7SstO3YMRTE6hkuGd%2BV5ru%2Bi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8abd34c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18528,"size_decoded":19249,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"033d20360ee4b05393ac0efaad7fce97","sha1":"ee3f318f50c8211ded0122de3a8a90327716e25f","sha256":"e346ce2ea2dddb471d76517d09e5aa7780634f498a378616a14a55f70102b558","sha512":"698da742c13a69f1c31763878d4e5d6142503cf00a17d9620afcb8ad103da354fe5b42f35342d38b7ac489bca966793f01b8006233f1271423310c025bc5e7ae","ssdeep":"384:V3CATsuwLUbuX87K1L3fjhPg2Kt9fpuXkaUIQUcn7:V3CAwuwYbuXcK1LrhPC98XxUIQUO7","tlshash":"2182c03d35b42125ec1ca3f3954c1aaa7a17a33007350d29bed877dd87ade168b150ae","first_seen":"2026-10-06T14:34:19.03525Z","last_seen":"2026-10-07T08:34:03.397154Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-16.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.599Z","timestamp":1791362003599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-16.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-30f1\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsOwYWnv3bv1QbIFmaAwXQHL9vIJB%2FFp09xFd%2BNYuK65NrvFoBUuyRLpPS1Do4Zswx4LwnDlL9laXnPfIyqQdnIDeGxvXvZlQoxVTqt6MO9CxE8YryVNXoZPwlcYkmSJOwOg46HOXaHp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d11c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12529,"size_decoded":13231,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1294385c8255b6f77c145517a6508045","sha1":"16ad442d374e31450ac832a2eaa8589f2cd12b2a","sha256":"68f3caa265b068e01afc80cf00e8fc6ee3410378f980f5b324d95a039a4c80e6","sha512":"858434963d0894cc24a6412b2b4350f7c6ae6dfa485920fecf930f876cc1554619d9730a3b0ea370390e757ff0b8b21f5a48ab0a491cbce6f8b5ef8a9d651427","ssdeep":"384:ZxDTA0mXPUyawm/hR1RS6jwualxNNqT9SbGOp:ZdM0iUUahR+6jCxNN0SKOp","tlshash":"9242d1ee2752a041c7b4768403077d0277b92ef9430e056aeb8f3aa1ecf51c697b4936","first_seen":"2026-10-06T14:34:19.131773Z","last_seen":"2026-10-07T08:34:03.398384Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-21.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.606Z","timestamp":1791362003606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-21.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1d70\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nutTXtCLjds5Q1TZq2PZuaOGtVtZDjmWTjJQ%2FDIYwhSAPhBPxacsdtn4qpdV%2BYJF4aLWCILidzm5kS4qEDksOBltKmLnifzc%2FVZEWcE1uUdU8HqO23gfltWdpPwcfruI53SYDTsPhmqE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a8d18c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7536,"size_decoded":8239,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f3d75caf66a4b2668f371700302eb528","sha1":"375fc3965a77d8f935f5666e6d849383948da149","sha256":"849b11467cd5d2ba9bdf65e46a91866e90bf46eb946edaa68bb428766e93e839","sha512":"4a4dd0c40614de6ff79da00218b363e343bfd519933732646850ad791d32a84a0f7451aa388c268c64d0b135b99a18a93725976c20f0a3ca98b9b7a5d3642be7","ssdeep":"192:L4u6SKne1jCbaY7rMzlMoLC754bxaBjLVd4MbukY0Eimql:L4pln1bl5oLWNBjoMbukYfimql","tlshash":"b3f1afbc5bc29df15f9fc08b45e6b0ac0862d2c19200962d7e75f52b50225deb3d02fa","first_seen":"2026-10-06T14:34:19.108378Z","last_seen":"2026-10-07T08:34:03.399311Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-22.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.608Z","timestamp":1791362003608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-22.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1bf3\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcYjpdl3hpNayOqiJZmTrs3kUABa0nEhGS4p3GFsnGQxSRhVMiEmIwdRpITDUVkJSwIjAPTJzEg6lJmsey6%2F8hUkfHrIHtbQMLJPb6Oeh7N29TMAOiFwWs5Fq6tstUliqHRMlsZGfdtN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a8d19c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7155\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7155,"size_decoded":7854,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"51ef047658a0c83fb20750c72beb01eb","sha1":"c9ec0dc58be39a5c6a222d0d66f8ad88ce95a1f3","sha256":"43e60e31944743eb67deb4b4e65a3edd602d7158baf15b5ba22a98479b91bbce","sha512":"0a2a95489b50f389bcdfb495c914bc4d3797f9c3ecb31a28fcdda9d96ca27c0b9b3e89a557ea8622f796535a14a2d4f5548a267623adee6e2d2b8c4309b193a3","ssdeep":"192:v2xcUbS3URo1i5TL9P5KIEqT+b2aDmcE0YR+k:ccvK5TL94IEXtEp+k","tlshash":"29e19fd946e53d783adadb4bd576d0987ecc5324d7c06a5a38e0e0370a018a1176b7d8","first_seen":"2026-10-06T14:34:19.077368Z","last_seen":"2026-10-07T08:34:03.400192Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-23.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.609Z","timestamp":1791362003609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-23.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1f9b\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SDf0a6%2FByFpQoCeCeR3lphfXo79u0uk0AxbGq%2FyX4DMnbRB3SAxpxgfHn2V5lQTlpJUxZuC3M5K8UW0T86jS%2FcWJMj2qht3IevT2KF2zTYUNnbyJ8KyFmFvtIn1njPBTi0Ps0Qluwea\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a9d1ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8091\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8091,"size_decoded":8794,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"7d52fb45177d3974c3bbb30680bce676","sha1":"23cf3c114d9160b034ee9ff5ba014d9425cc3666","sha256":"b4b3df1ca3164ebd84fe0724cf043129b6691d10e8a69a80282bbece714fd984","sha512":"5cae126be0a1bfeb00b3c7452a16bc78a811e6967505244f189354fbc8e10653d99066ad17068321c1dad92e151f8ade9ea8c12d0deb07cc956e447d14172390","ssdeep":"192:fXpGWiRBXRkCXPIIfL6eDQsg4xSQj8chrHK7XKl8BPUe69uNEJ4Cojf:fX8WiR5m6QAQUxfpjK7JsgNy4Cob","tlshash":"74f1bfeefc9bdaefb4e1d9c86096c54927256c2fc1824c6c4c2468707e10eae5d83567","first_seen":"2026-10-06T14:34:19.132969Z","last_seen":"2026-10-07T08:34:03.400975Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/39q9it-3_g9gf.css","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.518Z","timestamp":1791362003518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /39q9it-3_g9gf.css HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHZr5EkNVDPyFmqANmD6zTnHkFU5jlH9KVJJJ8zFvdoj%2BETvRAk7f3%2FCiDVVRMBMXIIZmWreuZ4R6zx1OxW6MbZwBmD8V1Q22MrhnkUbgNB8yGYnrVlkn3RgxPss%2BLDHmW%2BcEGmgG1UM\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ac418dc-e453\"\r\ncontent-encoding: gzip\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f89fcbbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58451,"size_decoded":14694,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (57573)","md5":"ca7efadc491a7862653e0ae6dfefa73c","sha1":"0500d34e44af034e1358a9b107e99050972b5230","sha256":"df945093a16f9f34740c854a4a4dfb61bd40897b8a22053c41e5638bbdecbffe","sha512":"2cc730ca3f6df89049acb3aa674f3c0a9f5ce130fb39ebaabf5016b9beaaa59e2411aa4b46c9a5797bf68ac976a2a6fea0b9b8ee25cd9480cc4c4697c5309dd1","ssdeep":"768:G7R35iKMLMdRh6nhdU31pyZ0ZjaSlDxxtI0H:QtD6nhdUTyK0SlrW0H","tlshash":"0543b6b0732ed93fec3394a1e35cb88ca618b195df265ae8fa12321317c63f54d15629","first_seen":"2026-10-06T14:34:19.053454Z","last_seen":"2026-10-07T08:34:03.401733Z","times_seen":9,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/world-liberty-financial.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.545Z","timestamp":1791362003545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /world-liberty-financial.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ih7vN631OwEnK4AIhGW5GB9Pil2d3X8EdupWTUjCr0KMK0ErTsYs71sgTOOiXmiFGa60IMUF8CqDKb1xSi7dO0rWjAQP6CucuRT7g8Igs%2BSinz7fNEP3VX%2FJwCZam%2Fcp%2Fg0ZFBu5%2Bgch\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-4200\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a2ccec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16896,"size_decoded":7347,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ab82e41ea2d0182254e3954bacf87cd","sha1":"04c26bdfedfafe205ffca86a94aaffa14ab57452","sha256":"d978215bead13da8cb2157bc7e07fd63e73955ab5b3bfcdac08d434587d434bd","sha512":"17a5a2e62bbe73ec2c741e3c0a4fcac9cbf6a2fa4cad748507e851a04618f176c659307610518664ce3c453b29256a2fa38753354ab3b1bc7f10ba076c020a51","ssdeep":"384:x9yXb/LfvMkspqNkqiUI8OD1/P2i5Jnc0kgJE0kV8MFXDb9:x0DnEqNk5UI8ODj5ygi0kVdFv9","tlshash":"3772a5eaabe496f08c49dbd6fd224269ba1724ff5b59cf08c35cdf683805469c488cc0","first_seen":"2026-10-06T14:34:18.994457Z","last_seen":"2026-10-07T08:34:03.407409Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/chainlink.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.556Z","timestamp":1791362003556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /chainlink.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItbW%2F9iajEnkfSgZG1QtqNd0pZNyQmQkJV53QiPJoJZC5WJRktUfNIc%2FWniblE%2BHHtkCRvLzvt3xiUqXTaCtBisY7YgdewOubtmY0xcJDQsasHneqMcRt6Ip0lNkaHER1jASsiJ4Q7CN\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-1823\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a3cd8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6179,"size_decoded":3363,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"516321bb1617d9b8f5d2b3a92642e990","sha1":"f6351edbc10a24fb837ff9e27b2143f2bdd66ad3","sha256":"e3fe5876a2352e8f7131a11c99dbe8b456334411e930e920b82647be90a65f00","sha512":"4fc2f53ba326fc20c14ed8b7cb051391ffb30c4752586304d892fbaf2137e8ede3cbd3490e35857fcb88b83dd03061ea90a60e1069528b8fb51a5def174e1af4","ssdeep":"96:3QlM1wSYKKQKiy2D23AADOoZMb8L1x7ok/SDi77ZWivYMaML:g2wSYfIyh3AGOb8Lvl/SD8rvYM/L","tlshash":"9dd142cd3f7489c1c988878bff1150a8761ba8fa99894b20c24c9f5e74c586dde49ad1","first_seen":"2026-10-06T14:34:19.088832Z","last_seen":"2026-10-07T08:34:03.408754Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/usdt0.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.560Z","timestamp":1791362003560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /usdt0.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPtKI4HjmoUWOWLkbDW%2FFqJ8zqwn7SzdzffQ%2Bb37YYVhEZc33FbcWllXLT%2BT3%2Fi%2FJGrBhr1%2FZi8YaruBQsPoq012LBCVUMe2op3ncV0LoiL3yAzBvGBZ5WGaWuTmqry%2BBza3AoZdKHOA\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-844\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a4ce1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":1595,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fcabeb2c428e8e8541dc80f55d8bad7","sha1":"c757be01b50e387504566eddf1f8c631e6c1fa7e","sha256":"b205af10e1d457edda3b91813e4582e7400410ff747c00a898a68b2e8e4227a3","sha512":"d54182da94a4e0550572bf3ffe566c432e4854829f9c4162fc5b64b5982dfb7928c5c7e59dfd2738590762aacb2ae01416a36753a47067a43c0fb2de7c7b455f","ssdeep":"","tlshash":"3941cec903cdf6d8e986fbb9863d31697d1e20d6be10d0a5c9c53e26a9118ef5a089c0","first_seen":"2026-10-06T14:34:18.968177Z","last_seen":"2026-10-07T08:34:03.409794Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-19.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.604Z","timestamp":1791362003604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-19.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-3746\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MX1zcUb5GCQ77IJhtlJ5B2OdcJBs5v8u9yVBWRwKhngJpyw7PPGbiDdlQFMul%2BrcyyxMxk4wiOtFF0i8M20qcw41kxdyYWz0vkFKwCmbLAp%2BVOzsgnzlGxV6r49PBydO5Hpnn5wZfcuX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a8d14c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14150,"size_decoded":14852,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e35731afea9d9e8d69834071368c5fd","sha1":"a147bedfc921ad4c03d30eb3b594b27ea786d177","sha256":"dd247514e3721e4e2fca1c2b77993d5ebe491422bd7d8e5375cccdd7a8dff212","sha512":"a8077dcc222aa94a1c80fe4729428213bc3fabadbdcf130609a9c630e0e77a29560eb1ce88d7a6ce2a221c00913c54c177fbb104bbf0d4ac8b89582ec402e6f1","ssdeep":"384:T2utThuic8iwsLsPYVExhaLg/IFJiIa0YJUjOcSCb7o9dmLi:RxiZLYYVExhQOicIbON+09Mu","tlshash":"b052df9332ab6faa332745a924a4d9317f748ec6b54e016b0ceb369136bd9347130035","first_seen":"2026-10-06T14:34:19.093736Z","last_seen":"2026-10-07T08:34:03.410715Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/usdc.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.567Z","timestamp":1791362003567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /usdc.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1667\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SciugI9WH4aWSALXFdx7SZeFiAB7Q4JV9vD480N60WhxuoKNkyyKxsWXq7DzgPXVtoL54Gyag3r8wJbaufF3SjyjI6pco9RWUeItBf6UKD8Ypl3YB3eexY%2B6TCJPEzyjbXUPZChXCknJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a4ce9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5735,"size_decoded":6434,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ea52b02b4fae591da782ce75ffc0292b","sha1":"93060c2e94b0bebcbf67db52d1d04180862e0f5c","sha256":"9ccc7493a3a70cf821af16df3cbdd1c5667a32eb384dd237b4b40a90b8722e97","sha512":"9a732c027f7af12882640d2677fce881e62ae3842ed6d219810eb1eaff33cc8c2cf381d4a666dc2a0050c2454cb7c36ec0473ce6ea0e874c2211c0b62820fde3","ssdeep":"96:pJFuogs1WMDFy6y38sDAFLAwLMRDw37maZ0o3k9KhzxZUIKFKy9+YD:hursdDb/sDAFLvLMRiR/k9WiKy9+M","tlshash":"4cc19fe75812df68fe5fa3b68012207256e73fae80d8601551cd46b867319ccf0a4a7f","first_seen":"2026-10-06T14:34:19.025111Z","last_seen":"2026-10-07T08:34:03.411769Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-04.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.583Z","timestamp":1791362003583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-04.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-4207\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVvgQqUZixWw%2FFoxQNNb5OhCY64qLgRgFTghX8pjp72ORLV2cHzPO%2FnatYhxvCHrDtFv%2FeAYWhjYdNjBHEuiRCMEeq4gIaKHJYMJZ9yxYDvlk2GLW3B69srmk7g60Nr0CjT7TXS5Rn7m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6d01c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16903,"size_decoded":17607,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cd2f4fc9a7532bdc71b1114e09c0f230","sha1":"00cf4812e0c46a6d43e2c6d6016f11aeb887926e","sha256":"1aae0282c126fe5202aca77036830d4ae33d70c7b8cf9d7cceb79b645e0fca84","sha512":"e4a5302e5283bf2f9582da8772f06db566cf36e7898b438722722d6794d2f72e544dff5d3163f51d8ea8e0ceb8db1ed6a81c40502407699e88c3fc3f22a9288f","ssdeep":"384:kS9TFplNKz6cwy5DM8K18IeOqvHmjL+a+yci8Ac:kETphuD9KqfOqvGjL+ici1c","tlshash":"8472c0eb96be723386f601c0ecce876af55c1730d34895a1899090ee7c52557b50aeb3","first_seen":"2026-10-06T14:34:19.101674Z","last_seen":"2026-10-07T08:34:03.412771Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/xstocks.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.549Z","timestamp":1791362003549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /xstocks.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yls7tZN659YMHvMdxMp%2F%2Bslu4dkgb5iVXFfKLYbTmhjZGO7EpqLgKgPFPvhQRxzypIq5ov3q6VJMt%2BeGWoJWqNBXLqHeNncp5ppzAyPrCOpGZlTAEDqJsc9Ly0fHynqHKIm4KUqSuS7C\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-c46\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a2cd0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3142,"size_decoded":2060,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac081d4416fd5558df6d1a4082bde06c","sha1":"344fb5651f49faccbf8d0279d3b94fdf6d09f77c","sha256":"7e9f71251126aae6e5a5809ee135776ae304bf847c5fba41020912a9d3b2eae9","sha512":"47df3b5d9af2bf7b82315146b12093473cc49c672777cdaf9564605814ccb66c98ca30717fe61b11afdbefa18aaed581bdf10df82fb33a331dc9a246fc3df676","ssdeep":"","tlshash":"765143e06378f3e4f900df7ac1152276ba4a38f3775a8b54c3e09f35750a4aa88999d4","first_seen":"2026-10-06T14:34:18.998494Z","last_seen":"2026-10-07T08:34:03.413838Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/mnt.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.568Z","timestamp":1791362003568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /mnt.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-230d\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hTRbvQAxEME%2FeTXKKGys2ZxxeRKCHxc9Zbj6oil3zL3UIvK%2FxmOMcmsVymRaNjzYzq4sw%2BovhbAmdk7b3DdYtg%2BIMHpoG4ehwD8Kta25mxam7c77dvG4Bo3fYDvn8w%2F7JCs4cZUBaJI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a4cebc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8973\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8973,"size_decoded":9680,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1a0fff84559986c0c80c51f4b8eb3778","sha1":"4ce25d64356cc0ac26eb72ada9c290d291538764","sha256":"1268b94748bb36267082e20f8bd7987d91553ba265b4bed7cade2bae6c919dba","sha512":"8324b0ab9513f4e93be0884ef514b6b3380db782ee6f437f993776cab0fcb87f775c1741020e611dbbc2f4f9299e29def1bca1211581ae6a4dce4d3926bfbbc2","ssdeep":"192:YThOiboejtRv9aJ7rS1QYfWvjDwxzX/Khd1bKOfXYqC9:5eHv9aNrWOvjDwVvKhd1WYIr","tlshash":"3202b0cc7b16bf4a0c3230d2337878222639518b55f675e501283ace93440512bfaeeb","first_seen":"2026-10-06T14:34:19.114988Z","last_seen":"2026-10-07T08:34:03.416079Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/fbtc.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.569Z","timestamp":1791362003569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /fbtc.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-32c8\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qll0ePeIWfwJ5dAbPWODU5D6LVpHIY16%2F%2B6It6gDE0OsoeMvlYtedW9KjfSwTa4lYgGCR46rbyc3do1ofqAZggasaTf9FTg8c7hdovHIwzMsWh6pdnIIYvXThJ8fnET82Rlu5gWaRvhI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a4cedc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13000,"size_decoded":13702,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"2d2687545eb9d886388ffd27aba30bf0","sha1":"af76650c469dc3aa3652f200e6388a8435e957bd","sha256":"d0df4e63de5a34671a61e036e94c7c4aa4a9768d0bc55c46e3cd08f5a5e98c90","sha512":"23674005ea73798b1eda012252f87cc4b22d6ed01984e73086b7c666135aa2125bda52e62136691962b720aa8d7109daf7447feff916050285c50f341661dcf6","ssdeep":"384:kJEDv7Fx7ra5SB1phlcQYrl9kDQkAiGkn/a:yApxva5Srhcbx9AQkIYa","tlshash":"4042cff9405006cc8f6c2a1557e4b80d79d9d9d3bc615a043bddecc2822e7fd80fa95a","first_seen":"2026-10-06T14:34:18.971715Z","last_seen":"2026-10-07T08:34:03.417031Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-03.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.582Z","timestamp":1791362003582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-03.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-270c\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXxipz7hERc9oJKyu1rYGtVwp8v2Rx%2FH0mHVAWR4236%2FF5rvGw2HKNuWDV1F9Qp7yjqFjH1W9JGAwHCZHvUpjJ2j0EEcii1wGQFlZHJ8m%2FGBCUP85CLFBBdYpV51%2FUMDZjSM5l0%2FkGXI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6d00c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9996,"size_decoded":10703,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"bf4c93b7c6fdf27b3c0710a50b51c911","sha1":"6a18931de5701d0ab92d106a523dc6ea4f9eaeb4","sha256":"a760f44e9824fff97caa1beba6b3b8533b6a6d87e2607945f14c642db34fff34","sha512":"ba20fa8461c338043fdc9365fd14aac7c56d1753e7e5363a1a7851b4348924ec41a43b76263bde37e53f7f483d876cd1c1339164b4e17479a7dc9319fc1e18d0","ssdeep":"192:r1pQObiT/nBD6Bs3XLbcEsl8Sl1CYCvdR1HM1PGGu8o2G+MfBvOjpv/7Pg:XbOR6BWVsl8SN1OGu8o2GXWVrg","tlshash":"b422bf547c98eed2593e8fa6b0e55ab830602320951b4bb012544d6fff2e561cd453ff","first_seen":"2026-10-06T14:34:19.117265Z","last_seen":"2026-10-07T08:34:03.417909Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-30.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.625Z","timestamp":1791362003625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-30.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2094\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUosH0R%2B%2BOZUCVE56fB1GnLXuY3nLBlPtiUvM7MaSz0lk1LP1wm3GCywIBTFnkrFcKWeX2xqs6aQI1AKO4ovIBRV4CVaUw2Le8Y9EcLnLx7b9%2FTlP%2F%2FKcFGA9UEwRr9MiflsOejyoLfX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8aad22c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8340,"size_decoded":9049,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f8588018a3c1b9696472987742ebbf38","sha1":"39baf58380e08558665496334008858df4c34b07","sha256":"c428732d8e8193bd15533e3dec1df4c0c3e9944594d73cd9d709898a724404ce","sha512":"36dfc4d99baa21b3bdc45e6c53951b993366b11494d0c7d2c66483af8d873a326a5a4bc1e21e46d853e195ddb6d25806e8f5ce53127dc2f340216bef78d7798e","ssdeep":"192:b1bvLR3suvNElkc7U8TL7Uv2/HqZVNMbMxi:1aaNElkP8TUv2/HYip","tlshash":"3302bf75ab33942b8694dede6726192066190e887740b533b2a687311f07cc726db3a4","first_seen":"2026-10-06T14:34:19.005904Z","last_seen":"2026-10-07T08:34:03.418783Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/meth.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.574Z","timestamp":1791362003574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /meth.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1329\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLIlKiqMMS7Ouh25uJaRTJBgpDDrDik9IK4odQ8VmJcngi3fsMytYnDA%2FJh%2F3tSUWLSMPZYZhtIcEjxYo%2F8LuxfAJJ9HkbuqMsqnpJzc1w5yEoNFXWWr2emTeD07sGNxsa4yeziQIq5x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cf5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4905\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4905,"size_decoded":5608,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"20410150c1d62728314005e7a4938289","sha1":"7fe73066daf8a7597efecaca0a56a3b87fa99415","sha256":"f659be3a7bf43f0cad320103f672d716f51559e595eb5ac2de3a10c15488b9f7","sha512":"5282826fb97ecc1bfca4d3e53bddebea0d84bdef4f4c17d058552070e3860411f57a6feab255c32f878ed6490ff2723733ffbe5c3a5da266d4eb3e939142644a","ssdeep":"96:p+XGbCaIh9r2au4uuC57u6aDqCQIA8SyfYU+NUbQAs5ExfVIh:IXdh9DcFSQIAlyfD+Ncs5+dS","tlshash":"6aa18e70798950f5301f01ad86cfa93e289b3117ec0702c179295f78592dbbf3866a4c","first_seen":"2026-10-06T14:34:19.099372Z","last_seen":"2026-10-07T08:34:03.419794Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/agora.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.575Z","timestamp":1791362003575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /agora.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1e9f\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wORlaNMojvgnLQxvPs9WhprLNwhiw30b%2Fwr6PdpLcHo1X%2Bp7rLIIkXxTRcgUbXfR08hO0XXsG9IqWaDoTZE2CAjIX8DTBOieg5zOFqAw%2BkQhXkuVmWD2hlhjuapNDePnje%2FLdW0sBHfc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cf6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7839\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7839,"size_decoded":8544,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"85843aee79f28008bfe721436bdbe95c","sha1":"9bd0176a7fcf93fd68e04bf3c7110c250ec6b3f6","sha256":"1fc53569a5e433822c04580fe561e575115c1013aa34f287520388cea09caee0","sha512":"9ebb2b9e317e0a45cefcae94560b4c641d43b34efe3aaaa92fd874b3371f931f4dfc91eb4010ce3dfa6e93a90b3e3143307189312a276ae1f5b0a8ccdb181e84","ssdeep":"96:pHi1eojqx1OcXgjcSf0GiLckEV0Qqf/bUN/0CPu1Z87pJr2IMUtEhcxJ5TFyklmK:pi8o2xhgjNQEq5i0HZus0EhaFh7","tlshash":"00f1b0d34eb777044773ceb51378a9b75aa48e36c25560112dfce231a4b48474950d94","first_seen":"2026-10-06T14:34:19.081169Z","last_seen":"2026-10-07T08:34:03.420795Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-31.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.627Z","timestamp":1791362003627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-31.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1f76\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDKG4hNwaxxP8lZ4%2FKHNdIj7EXW2N1708UrQGb7s9YE2XUrqbP7%2Bx%2F7xK3VFV5CoTZZ9lEeNfmSbdgUGlWtX1%2FBzyM139m0fxa%2FpvR2GV1PLBpOd8iEOTcmE26WJL6TMV8zHrBatdlVa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8aad25c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8054\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8054,"size_decoded":8761,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"018f314967f66ea424684e7910ccce64","sha1":"7154ace89ebc3aeb6af428a8b610202a76c45110","sha256":"c558c49a2a0501142c4ef7c756febbb097cc2d0199a5c14f8a55369156b97649","sha512":"28f9ae41d678f1962b7a2a0423851ca6680e7b7381962bba442252b08242b6b6ff84e8f11c15cc103eec7cf4669831d5e30e4268274f286f24ef869d24c496fe","ssdeep":"192:uzCrCRxG9lsD15rPZzbDpiENBDdmENrGxsx5GT2:UCrCOlsDLVbDpfBDdm4rGxsx5GT2","tlshash":"4ff1bf77636d48ebcd6960d7592fcf08e086c49ba8211dc3d465121dfe3bec201582a3","first_seen":"2026-10-06T14:34:19.02888Z","last_seen":"2026-10-07T08:34:03.421763Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/20260818-173105.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.646Z","timestamp":1791362003646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /20260818-173105.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-97b2\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2B%2Bmzmle9D%2BLhRHWbB9wL9mkbZnVdO3dZbAexlekij5L%2BpSvvbmT5NCcQySzm8YI55vCjUnndgeX0yw9WvUZScnViUOJrD7fQ3iOz9mQVJF7sFE29Gu4eitTvPplEhZltVePktu8k8AI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8acd45c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38834,"size_decoded":39540,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"f2916ac00ca24e8e96efb27254e0887f","sha1":"0726ab009318dcff4934800ed067011aa5f5a8fb","sha256":"47444552a74790d8ecda69ebdc0c571060f2be6cd6c68433ce02d5d927b534c2","sha512":"024a164d9db57278990a5ab5c006298bafde6f21069ab27a7f12855aaa800802a0d989b0dbfd2e3de80250153e541252a4e0d21f186e1446d2523e3a41398357","ssdeep":"768:6vS4xsjf/qgqoMmuHv3GlojyL8VDZ6uaxIucwc0+3tksRE/NziOuPOF:ex2agyHv3+TQF6/6wlaziNzRn","tlshash":"b203f1295d74fa3b362a7a415bd4883e1b4733f4b0d1bae1809d8fcd46661e8c41b673","first_seen":"2026-10-06T14:34:19.09641Z","last_seen":"2026-10-07T08:34:03.42328Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/20260818-173059.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.648Z","timestamp":1791362003648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /20260818-173059.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-be2e\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qaa3CdB9IV5EobIR%2B06HcjED4uTV6KgXHpSvxrJvDpeHgOJ7dzftxyBRBA%2BU1wApCi%2FAev7HMGn%2FdP%2F9GONPDCalK5Mo0mAqHApUQLgYDYeT2yQg0ZipEy8v%2BNma2Z2a%2Be%2B4kqkciYCM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8acd49c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48686,"size_decoded":49400,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"fb98729788dbbcd81bee054aa61ace3c","sha1":"45575a187766e053f2e7a63a9e378e0cc257c68e","sha256":"83cb47896b4f9ee58466d2942ae7a198452ba1e3e4a48bb463efe9d6249aeef1","sha512":"14d39ef8a52f7682694fa128ab3da991543385f4809a39a550669d1ceb3670ffc98407ff43e0091ccc0116b7a9d6ad9f5fecae0235e926b78c6c7b553176cf57","ssdeep":"768:kaF599Sjy2uGTsV54yGvNS+QiVWgGVthpTfF/ahTo4b2eDYZywNOlXQ1dTVutS8s:pFH9qyFjeVq6WgGVNRaL6wYZrVL8iJ","tlshash":"072302e8f0f4e8932ded23d2265ea4639af28f913db158600c999ce941d54d3d812fdb","first_seen":"2026-10-06T14:34:19.097321Z","last_seen":"2026-10-07T08:34:03.424742Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/corner-dots.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.655Z","timestamp":1791362003655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /corner-dots.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxCAU8AvgID3L6cxdCX%2BEXvcw9d1MOfGgKgHeBkcLidoTKDh8cn%2FayUyynt9OlTr%2F0wEHzHsnDugt8ONNRGzZf7L5WTZz0tUClpt0%2BVRo6d62WD9po9sgOAqFm0Ioc4hoAoZ9WVT08Nr\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-1416\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8add4fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5142,"size_decoded":1084,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"905f2aed0c35cc53498b800ef46ece37","sha1":"aa38e259a6029138258c40b2dacfa6e59eec327d","sha256":"c7ee18a9bc27e21911f9b7fea932b5461cc53b8de72e1b71be67c161e4c40a49","sha512":"a7809299b05979f9230bcd5eab555f854414ba5dd6350953a934aae044cc4204f5f6c544886c50b215b7130fde99f10acc0e20ad9cf866dae9bd9acacd1dfff5","ssdeep":"24:tXVS6uYqXq9qJqqqTqLoqkwBqbq8qBqaqbtqwqsquqUmqoqnVq2qLAIbdqzqoqbM:TS9oXvA28NuHb7n","tlshash":"52b15225742cd0580b06848de19f6a66a60ec2c30e5543fa916e3d7fe3288df6c637f9","first_seen":"2026-10-06T14:34:19.007405Z","last_seen":"2026-10-07T08:34:03.427856Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mantle.xyz/_next/static/media/ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB","fqdn":"www.mantle.xyz","domain":"mantle.xyz","tld":"xyz"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.193Z","timestamp":1791362004193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mantle.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 09:04:47 GMT","end":"Fri, 20 Nov 2026 09:04:46 GMT"},"fingerprint":{"sha1":"61:B8:4C:5A:DA:C8:86:07:78:7A:6B:86:14:3E:DF:5B:BB:16:B7:B3","sha256":"54:B3:AA:71:C8:73:11:75:C8:DA:3C:C5:1E:70:11:8D:6F:3F:7A:C6:94:D0:1B:E2:CB:61:A1:AE:96:A3:B3:2E"}}},"request":{"raw":"GET /_next/static/media/ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB HTTP/1.1\r\nHost: www.mantle.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 519499\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\netag: \"d01c5edac889df2cb7834866199aa490\"\r\nlast-modified: Thu, 01 Oct 2026 08:15:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cwqdq-1791362004241-c0a0420e3dd6\r\ncontent-length: 32396\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32396,"size_decoded":33037,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32396, version 2.6619","md5":"d01c5edac889df2cb7834866199aa490","sha1":"1d1bf018ea9f16654b1d1977f5e1f94d80372cfa","sha256":"9a7a4464066d44c3ea10def07b409054d3f8a83dc6a2458014f82dede2b94096","sha512":"855087da19df4763c24d55942dbf9fd36a9a9d74e55e75025308c1020482ade1852ba8e68fb4038dec6c0be1c7d5c1c8a0005075490c0451651a05bd93bf9831","ssdeep":"768:ruiIIjuVRD3vMVO+QnShh98xlV22uR9zuBJto7R27:rH1u/vvnShX8xlcl/zIG27","tlshash":"65e2f1b46a5f4260e390c8fb8703261aec2da05ce0f8f79095ce531b6dd258a0d7b774","first_seen":"2026-01-27T10:51:38.454557Z","last_seen":"2026-10-07T08:34:03.429815Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":22,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.220Z","timestamp":1791362004220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"POST /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtWHdWzUCvBhEJkzsZLx%2Fk5yDcJE76uMiqCl3D0fWcQiqAgzl8GuWbQk3bY6Szq1sGxxyg2vMbQfhGbliciYYSBZgSZB2wmeA%2BfC7ZJ%2BSuIEOx%2FT%2BTRYSRWg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8f5e814c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":838,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d0d3e93f6148aed42e358238dad3e74d","sha1":"eafc690e3ba9019156190084b05b57bf84bcbf66","sha256":"61afcd2ad8f60ba57d56d262f6a721c664dd7cb5c977705077994cf93c5730db","sha512":"2473758058395929e9eeb1facddd746654e429636f1a453de84e1a16a466b4841b821e4d7db6d63cb923d7b618723a8a104bfea9714268cab837bad7583bfe0b","ssdeep":"","tlshash":"41f08cf0ec06e899f8899846e8d0785600013cfd34dfce0c8609b62b3ea21284f84adf","first_seen":"2026-10-07T08:05:27.605579Z","last_seen":"2026-10-07T12:36:00.911261Z","times_seen":135,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/tether-gold.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.561Z","timestamp":1791362003561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /tether-gold.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBXk20F0KVDB3YZAxrGX6ZXWJkSHI21Upsg90RJftO7qjPb3DUhSw9h6ILuvKhybyCXVSnKIVca4Tk%2B%2FhT0PM2PYpT3%2FKGSnP1SxIpLDdzE%2F%2F9KP8ZHgt2TawrKq3vx9NyZ0STEuwEya\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-157e\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a4ce3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5502,"size_decoded":2904,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f272f5809bdd13d7f6d5738582704b75","sha1":"a85cb222a9c99ace6d2c2cc746213e42b57eb06d","sha256":"0cb8a0dccf7f87dbc768e0443cc6bf7d40cd559c6e1c76d9d6e250b4cf0dfbec","sha512":"00a413e8f247577e2e0f7888ad551a4527d932943a7c4f5743b92f499e8e53db4a632a7aaa08e56ee377967bdb4d987f90083b3248fd85ea78f4bb02907fcb8d","ssdeep":"96:+lnd2f/gVyVHKMuOgjDxVY2BNOHk8I5nGOuD6ikY8+Sxq325nTX8n4eNu4:YwPuO8VLOHSnGx7kw6m4eB","tlshash":"3bb1daca676873f0e107f7f8d91b89b16a5e2cf65f82ff18c3616d597a8102c98544c2","first_seen":"2026-10-06T14:34:19.090086Z","last_seen":"2026-10-07T08:34:03.433172Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/fireblocks.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.564Z","timestamp":1791362003564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /fireblocks.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAqYygQU7hg9WTsNWaM%2FbeZtHgDeMkePx6%2F8UQkSCLpRD9kL%2B6q4b8HVWVA0aE%2BUhoPVd36MKZ4AQIlGqEdVlSdiYWlh24h49umBtvyrITC5wA1yMmX2u%2BnW%2BRt265eq%2F9qkDQxDjawJ\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-19bc\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a4ce6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6588,"size_decoded":3246,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"765b79867886da566ecbccdab39208ff","sha1":"1b32020a844c099b24adf86ff5c9307c2580925a","sha256":"74163f5f2c107dc5ce87888cbc8d7c907ee8562b281632e8aad0557b83b25835","sha512":"e78375ee4ea1bce118888bc1515a20989f7e61919a6a102e7da56fec68925e990f7fb0ee140645758b552363e23638e5ffa00583a260c02822e0221a7653532d","ssdeep":"192:XBDP5PMCPGZBhiWmA82bIct0aArF9USQfeI6oE:XZP5PLAH21wDtBAZN4eHX","tlshash":"f9d177e4678951e0d047d3e1dd281079bf2b30f6abd687e4c7e46e053d868ee8d589c0","first_seen":"2026-10-06T14:34:19.104189Z","last_seen":"2026-10-07T08:34:03.434424Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/susde.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.579Z","timestamp":1791362003579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /susde.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1493\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIbzNrFgLjIwl8r6bHjiL4JLeQqlXkY91QZyDILyYjI1IsRSq%2FTJJIyqwsVcNYRLErPMUVH%2FPiK3a6Ca9%2BskJgAv7JjIXmVMv9ltsoxolS0%2FHFM%2BxRE1Lu0q6S7eBSwQwMru7WYCDIHn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cfbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5267\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5267,"size_decoded":5974,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"45928f6df61b5ad1a2a94dccbf6e4fb7","sha1":"4481c921f536ee12731d5f2adf48273824fd4575","sha256":"2fc893a88416c461299b86c3ad1e13e74e6865b976e8460d825db6a050f6869f","sha512":"eb6dc7641d62651dafbdbfef0da54c81572aff1c652a15a78b6893057c81c551e1b4c439607a55d22587f140299b8034490aa6a31a0453fd9549a23068c939da","ssdeep":"96:ptu4FcCJMWCi/VpS+yjhGRzrf/3m1AvgcHE3nX63vwMzS5x6dRDyBUKmaeZYUq6S:ECJjSkRHXrg53X9MzS5xg8BUKbzz6S","tlshash":"49b18fd373cb5dc32dca92d0c9a880ebbe420ece2c05408b6ebb01b50e8ec765957c48","first_seen":"2026-10-06T14:34:19.105247Z","last_seen":"2026-10-07T08:34:03.435464Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-05.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.585Z","timestamp":1791362003585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-05.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1cdb\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kboOF2xEPmWPp5W9Yq0a1%2FANjv4FwwvftE1SwQy3okzkcQ24BRurIwOIwZ%2Bml9jd0kfzUB1E9%2FCedp2g9qRKqwzw%2Bi4x2TQ9hvONd1ljxnKUd3MZJNF55PrMKzEIclZO2FXYEObTKqlO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a6d02c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7387\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7387,"size_decoded":8092,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"16517066c6df01d1858bd65375272c70","sha1":"cdc0c15024aab19ff90392fff79f46053786817d","sha256":"a458f7e9e4a93e0028ecf78041543cf4137029f4b77005e7abf4168703d7076a","sha512":"1eca7079a46ef3e11681f34f46b20e71c8f20b20b5c8d4a3c13cd1fd435ad404f347aa37d0215b4adab7352e8ff63442b1b71219c7dc5dcdf1dd5f472a58512a","ssdeep":"192:ExwHO4XbXdqIlqPViBUvOZwHCwtxD93bavnptyMFBc6:EcbNJUPVLOLsxD9rCnau1","tlshash":"15e1bfd7f89b739319dd4c19d1b70a802f9f224f74ec066ecdc82c5a30195de56d2288","first_seen":"2026-10-06T14:34:19.092533Z","last_seen":"2026-10-07T08:34:03.436635Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/mantle-radial.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.657Z","timestamp":1791362003657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /mantle-radial.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7J4G9C5wdY6LPqbcrcm%2FOHpM%2FYTKbaGOhbcG5SwY%2Bq6wHfIli5hlMeejHOAI4WUtdIk1yMxfskfQr9iMiPup1FpQrxqcOsEtulZJo%2Bb%2F6K6PnLztrzhqEMR2kDhJPmsswWBvZsJ8iZn\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-4458\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8add50c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17496,"size_decoded":5483,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9ab27481b1a39165565a0126bb94383","sha1":"9f28dbeece458db9b00bc2200575edca13b75f5b","sha256":"4b0129edf3f9b27278c3e5613a84c7db9c5c31d28b19a6f0e01c76ad1cbfcc01","sha512":"d97ecbc4e7047d405fea6db921526d2b40b342c9fc88a62eed89a2ed6543cdf3bdde1550c95833c3f7b0de7c2bb5390fc6c6f3440b4e6f296ce8a289af9b4438","ssdeep":"192:UEREoMRWLmMtJxAw6dh1N7adc+MtoAX+evADIU5pyZJVKSYJ4scoORInwM5BUWQR:FH7Sxqy+evFUoaJ+OfOkF05","tlshash":"7e7213aff51a9c67fb94c3cced408424626751fb9985c2b1c190ef6f6428cd39e1e6a0","first_seen":"2026-10-06T14:34:19.102949Z","last_seen":"2026-10-07T08:34:03.438726Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mantle.xyz/_next/static/media/ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB","fqdn":"www.mantle.xyz","domain":"mantle.xyz","tld":"xyz"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.196Z","timestamp":1791362004196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mantle.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 09:04:47 GMT","end":"Fri, 20 Nov 2026 09:04:46 GMT"},"fingerprint":{"sha1":"61:B8:4C:5A:DA:C8:86:07:78:7A:6B:86:14:3E:DF:5B:BB:16:B7:B3","sha256":"54:B3:AA:71:C8:73:11:75:C8:DA:3C:C5:1E:70:11:8D:6F:3F:7A:C6:94:D0:1B:E2:CB:61:A1:AE:96:A3:B3:2E"}}},"request":{"raw":"GET /_next/static/media/ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB HTTP/1.1\r\nHost: www.mantle.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 580941\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\netag: \"cf289907bac2ed3301ba7a3f2bc03c86\"\r\nlast-modified: Wed, 30 Sep 2026 15:11:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rtntk-1791362004479-2f2a3e90a8b1\r\ncontent-length: 34928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34928,"size_decoded":35567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 2.6619","md5":"cf289907bac2ed3301ba7a3f2bc03c86","sha1":"5232149f969d60a25f4225340e0bf76330212d05","sha256":"9d24bb81788141076b72687bf24057e9a38b2d8e575322a2b92f3fcc2c5f68b6","sha512":"80129c162b03b7ca56da78c215488f75e60137e4ccef352bcdd5f3f516a78816506b947f3b12735e8566676f6374e5d4be499ae288e7e687e2e5cf0ace717a8d","ssdeep":"768:FAAaDU9LK6rF7cc1vOEErb2ULuqPZNq+Ey3C4z8jtldBp:FAK9LfZxmxPZo+Ey3CE8jtlB","tlshash":"eff2f163361e0bb51ee228326dac12a2c3fda1d8e971096d22537dadf17016516d71ec","first_seen":"2026-10-06T14:34:19.120857Z","last_seen":"2026-10-07T08:34:03.440003Z","times_seen":9,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":6,"connect":3,"send":0,"wait":21,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.225Z","timestamp":1791362004225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a46b8f8e88c30b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.228Z","timestamp":1791362004228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SDJLXEtQlOX327vHxtiRJ5jEvxEyX9Q1aiVxBslx0tnfinHw%2BjzDwW8LtM9LrGyC3ZUQEw4r6N%2Bx6362h0IqjzURNYPMNI%2FAUSEZtJ3Tooq%2FvDOYZStpuq6\"}]}\r\ncf-ray: a46b8f8e8e314c11-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":755,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/chunk.42.28748q25.js","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.541Z","timestamp":1791362003541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /chunk.42.28748q25.js HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 10:18:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJfsDVgO9trzaXOHB9qZi%2FdLDqcMgsquaMAQJzTZobJUlicxjwOEDxEzg1hjFrqlVi%2F5bvPrb%2Fw%2BKx9tsTSwI9yWdqGnDPGDxeVJznc%2BNwEP5d%2FBLr6TfAJB1K%2BfX1SPsn%2FjJLh%2Bq7N0\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6ac4cadf-42b7\"\r\ncontent-encoding: gzip\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a2ccdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17079,"size_decoded":7813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8594)","md5":"b0eafc2bda81241b5da3694f08b52b89","sha1":"193eb0fdc40f0d45f4a63bc846dd6e10d09acb6e","sha256":"f68d6d8ce951a55c900e2f0b10726c1a1ef97f7074536ef9641f8214b1a74159","sha512":"3a598b9297a859036d51c8a4662e6d8c67c7f69682cd9ee6a26519e7f4efbe02cb2f33b72342b8e9d406c4699cacf42d08a49c9a99d90df41040d1b421a76201","ssdeep":"384:D9grrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:CvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"717219f87665206a03633532207f9102e177eb118d5b9050a2e28a917decf6be677fc8","first_seen":"2026-10-03T20:04:04.24929Z","last_seen":"2026-10-11T12:33:27.709577Z","times_seen":200,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-11.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.593Z","timestamp":1791362003593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-11.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1811\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDn9DgE%2FsG7MoGx%2FNKs5wScKoIDgmuk72ABynkszFCpEEdxeymMT6zbwHwGK0CwTPnwkfCaBoelzAmrrIFTZiU%2FkWFwt0WjHKORJz5SzyzBKJIhhdt5enL9Y7BTaVA52JHG4J%2FT0bG5h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a7d0cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6161\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6161,"size_decoded":6866,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"dc1e2d7e12a00c52c8aee08f9309ca0f","sha1":"8effaaad405d56aaf3424fa1921404ff2d61945b","sha256":"3981e3bdea2676cdb98b54d32055235cd7ac7cf3014dcdb03055a14c99baee7a","sha512":"b8ef8293482866ca7b1636da2856efdc98c8016dfcd78314252b4806442c0e22bb149615987d4dde101de5ada307a93e6ebac676233e1d2a504ed4641d8fc5e5","ssdeep":"96:rW8iwvlpWKPcGH01TpKPZVmUwn07PZkW5wnt1pN/2H7xiCjCvweg1433dMJRXdMT:E4lL2NKBVm/0aWqt1/20v42dMjmR1","tlshash":"25d1aee05dde898204cb062231b87e781d373f60048e875fdb8da90696516462ff6b64","first_seen":"2026-10-06T14:34:19.074069Z","last_seen":"2026-10-07T08:34:03.442735Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-24.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.612Z","timestamp":1791362003612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-24.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2317\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k61ntIbsRPLf9AXU5GDnFBgrD%2BOGEiySHfrp4IfUdBthKapf9Q9jOhHDuShmfmCcVsgdNd7Em6aahrFxxxxT%2Fyci3rx3o8Hc%2FlUCBM8oBsA75kwgcZVD7k28voNtYhrSqanmT0yX4jsC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a9d1bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8983\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8983,"size_decoded":9686,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"7aeb15494b5476fe60c594b917dbfe3c","sha1":"4bc2939c8add642495bd0253488c13d5ada5cda7","sha256":"2c3a21460fcea8fd8ae5dc129d3a6a1fa089a780fc65c797e1b64930d69805ba","sha512":"272a12061c2f2063207a849fe6473a865fd76c8c5319c2db9c02574e293be2c4931c87b1434b714f9fffa58376c642bbc23d4bc9fded23becfe96868ad66529c","ssdeep":"192:kMzWuKsPtlAL+dcWuldxm1oGjXWU2mMfoBgaQ9U29MtVj:YuKsPt+UclmjW3fXaiYbj","tlshash":"9b02a0d6ae735f7520c8b30982a8b2817940777c0a174d1c9c8f17668eb76a1fa19f12","first_seen":"2026-10-06T14:34:19.12247Z","last_seen":"2026-10-07T08:34:03.443682Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/rwa2.jpeg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.638Z","timestamp":1791362003638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /rwa2.jpeg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-8e5f\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6I3tAmLH8SRhkZnSspNBMX850me9WRQ8Ur58MEHlIjNyu9K3rKhFcLFoa3Hqu1ZTpx65kdZ16C2sT0IakhJ9VRUVHEtNJ%2FuCAc2rol0tJ1NHH8cBXyDRuVFwxSl7TcjC4mio8ci4xAZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8abd33c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36447,"size_decoded":37148,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"8d98d1017059a51c478aa337b74ef9b7","sha1":"46870f4a80259648c51995dce6811a04ba46639d","sha256":"0b4aa4e1a39833809ede7a45ee3a47428362e79282a20ae5e1a251d71b9a494e","sha512":"8aba659d477fbac28a1e4708c20e9f4f8787b2a89e879e44dfac267551e1e9ec7424f5de250b6858efd71520bac880f2d482202521df4db524cb9f2ebd3356b8","ssdeep":"768:QNeK/YFmJPbdtj+xP8o/uSwk2aENutN7Myt3juJmg:QNeKwFmhm2nD7v","tlshash":"60f2f18225840b4ac13e60794ccf0490d369c892f44b9b772a6e811dfb6e4f7f9994be","first_seen":"2026-10-06T14:34:19.110842Z","last_seen":"2026-10-07T08:34:03.444603Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.226Z","timestamp":1791362004226,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"rpc.ankr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.229Z","timestamp":1791362004229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cyou/\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8tJb1MoLnp7gONsNYOpN3oC8oYQ4OLu9yKcX7JAqzbltDxUkdN6F5eSrJJHwrC8foRLlRgUhoPFXR876HuWtUGcTc8ZHNCnuGkfe4t9ygaCzvduOSqov26DkcZ%2BRZxi0HE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a46b8f8eaf83b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":805,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":1,"connect":5,"send":0,"wait":48,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.710Z","timestamp":1791362004710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"yJuvsr5w9x-w1_aH1n8pqQxZtxFoStB9gW_YLb5xq6fBXNj77-kVGz3yBcQpra3_th5RYmOk8NeLHXsvKyvFwRGn4To2SJkWQcN-5f0"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpIU%2BRgFrOuAzUqNAyBJQivonC7tfhwRFLYVWmfOnqaukzHteZR3ADuVAmHyayCe7jpPxUdxPpXbbgF2x88InjElX%2BguxYfNK05rh6wMKGfao%2FdduwATQ6cKLLIgX0gejOaHRW0pRWpc6kfah3VHaMzIELYMKn7Vev4%2F\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f917a885ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70200,"size_decoded":21271,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-10T14:22:55.094653Z","times_seen":209,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.717Z","timestamp":1791362004717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"oD6UauZeBvqPwA6qY6KwzZON5d8EDznYfkU7Q3A2812saovFhaS0vW-70u0bSFcudrq_Tnw26Q1a3-asUkEMHXnk0BEXwL9oxJLPdys"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8lX5Cuw9ke91BUk7dCbbq%2B81zsUtCh1ybcecQWzXZsZBTIo%2F2x1nukn0AVYwsUO0odF8Lto0W58z7u0hKLzrvzXFGnUjJJ3cY0Fkkm1b%2BiwSpMCP5CajBemQKFqwEZr%2FQYZrs3oWnn6z5JRwjNQOR0xVmJK3m6K6E4N\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f917a8d5ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16644,"size_decoded":6103,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16644), with no line terminators","md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-10T14:22:55.091737Z","times_seen":206,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-29.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.623Z","timestamp":1791362003623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-29.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-27c6\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYQgJbsPN8W6TvXe8C2rxhRw0IjWbrJYtucqZeuKOxsgqBbcqbXh1jUn3YXQ%2F5yguVKCajXZg98SkFoNpFI7t2SxyUXBof8QiW5L0GVhCQREKeG9fLR331CSupCZJ9oMEco5n%2BSMuyG7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8aad21c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10182\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10182,"size_decoded":10884,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3bc8915deb0e9365fe5f3ad44291ac2c","sha1":"130d89e6df79c878711645530905b10b139cbc9d","sha256":"d7ff7d13c1f1a0ee9c451751b53549c82d8df64b09a2dbed84ee5b51de4eab44","sha512":"b78d08f42b9f3d4a93985a2018279a8641d1cef59bf14f5c6c3ee67d2e1ab4a1855237f1930d603fac0f4908094ee503edc24d24b461fec7e766eec60d41c8a1","ssdeep":"192:tAPtDzURhUDVWbZjhlfK0mC7em4fJ0UVixEfzrNkc5:tAPBCmoHfrmC7+fzmi","tlshash":"a522bf8866d131f2d4ca9e80b5cf1ce13d69757a36005388b064c18167caee4be17aa7","first_seen":"2026-10-06T14:34:18.979221Z","last_seen":"2026-10-07T08:34:03.446749Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/distribution.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.633Z","timestamp":1791362003633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /distribution.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHyJdcZ7j0NzhwNNQGaFwHsyZ4wwP5GfwPwLF1CFlPAhL57JdMV42NGNHevDaCGzFmmkUX0JqgCOFq3jMheekcAm9Jdnb5QgbBYaMT8nzQNYpx60%2BAl89SrjDQCAllBC8x3EBc358RV6\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-8f45\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8abd2dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36677,"size_decoded":4621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c93573ad81da60912e17f4cdd0417faf","sha1":"c2a5950a527217cac513a87dee9bd0ce2d855703","sha256":"8436e005eb7f24d8a9e8c796536718781e72e56d609e013f6c346c0e30e27a8e","sha512":"12c97edc39d4f65d18ad15d6b3e69ded705ddd718ac5cbeecdc3895756646ac5ccc06f0f594f052e8883ded786b6133afff27614e5e292dabec05cb68703198a","ssdeep":"192:KOVCHmbGnLYv/y+/drdL1gV99aIA1tBfQ+j5eATJbDE0x7baxGZKeeSW5bzcLotP:N4/A/y+GTeMNgSt","tlshash":"5df243fd72acc420284991b8e6d7feb85e5ed973231073e220254e9df8e0d661b35366","first_seen":"2026-10-06T14:34:19.095393Z","last_seen":"2026-10-07T08:34:03.447458Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.219Z","timestamp":1791362004219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: f875c6e63c4e736a1679232a173a441f\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8f2b085696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486,"size_decoded":819,"mime_type":"application/json","magic":"JSON text data","md5":"d0d3e93f6148aed42e358238dad3e74d","sha1":"eafc690e3ba9019156190084b05b57bf84bcbf66","sha256":"61afcd2ad8f60ba57d56d262f6a721c664dd7cb5c977705077994cf93c5730db","sha512":"2473758058395929e9eeb1facddd746654e429636f1a453de84e1a16a466b4841b821e4d7db6d63cb923d7b618723a8a104bfea9714268cab837bad7583bfe0b","ssdeep":"","tlshash":"41f08cf0ec06e899f8899846e8d0785600013cfd34dfce0c8609b62b3ea21284f84adf","first_seen":"2026-10-07T08:05:27.605579Z","last_seen":"2026-10-07T12:36:00.911261Z","times_seen":135,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/favicon.ico","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:25.027Z","timestamp":1791362005027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:25 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dNwJU0CsybLK%2BpWx45%2B1kmDzuFB4J2%2BOnlgf6c1LXUzf0erS0Lxvl2iVmUDzAidnlXDQHzchUnCrYHvHXd2Jxcs%2Bl%2BC6KlO%2BwLfQM0RkBZZFdHTvB0Jxm%2Fva103uGTjZ0rDQaTMbE7X\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-68f\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f9369fac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1679,"size_decoded":2389,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f14e948d3ad7cbab5cbb2dba84c935c6","sha1":"d8fce03782ed1c04ddff9891a6f5905cab04e124","sha256":"f8572d7c93f49ec2ddbca6db4550a63108e1dabd7ff62f5d1b98638183fbe0a2","sha512":"11f765c744dc2a964b7214735502a60e0830ce0cb71aa309a514a108e1fbb0274a5cdfd103ffeed533f7b989e2237436a3d1dad96ac531532bcf0409e8084be5","ssdeep":"","tlshash":"1a31f8e7ee9375eff63d5822607f4b2ed1a2c00b943775454d13214f0d202e568b7912","first_seen":"2025-10-02T14:03:17.267439Z","last_seen":"2026-10-07T08:34:03.448157Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:25.129Z","timestamp":1791362005129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 747\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":747,"data":"kXN!9KNXZTntDfXEsMQ8!FWtBTK2EJcS%Y621EqU4Y5fQfS5Zxv!GJW58xN#cqEA%q7kaMF!R1HaFb3sguUc61Bu^B8N#HCWbuP27ZjNfx%ztCBw8GAT6H8Edkb0SX%2#KrMRJvQQm0PhgdYjSgAd!Pz!ybct%UPjjU4#AV\u00263Evk%2ATTHfYMHmYVv^14Y^\u00265mKSKL2L4DgcFEyt5rd9#mLsFk@2pZR5BPXK#s1T9fLnudZ0Paj8%97N%K!3!N9ds2tpd!6Shr5Tv1guKGHUFf2a\u0026xkZqb0khsp1hGnUVmDkJaqLA6jF9MsQ24tay0\u0026G1MTBTUGHzz\u0026@c%ay^Qx7naDMa2#1\u0026YNVpB4Qq1\u0026uvvDtwGt8!Kfp7Ga@vcVtpEzbYTdTqXTUG1F4\u0026f5T$sBvn\u0026adNzbU$1Vs8gpEKVb960fXamH%@5xV8WxaTamUhkWeDjB00vggZEtJxzzyrFrjE\u00269CEEFyJJEvc$!r#f\u00267NNYXTKUNv%qfwXyk5j^t3LkEw14nHbjEf\u0026rFeuLsGJSjv#5bWrc78ZHS47^PFf%GMEzfYj\u0026JA1g7Db8vZ7RxQvkUn2Wf63kdjxmWDG#9KyZq85E3eE4sJR$27JCefF642dpZ\u0026SL4$Gq\u0026#nPnUkaA9X1Ad8M4X^4Y!g@nDc\u0026SGJ6qn4wcGn8WQ$SZdGy8aU#^@k^aNvWLPj%8gb@8\u0026Pm1ZZzWRJ^p9qHSD%YWkuHBUgutSPZTgB9Wz4bcSgYEP7XpFk$"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2ExyyD2syiD9Mwr6%2FIE1jG%2BO715Xnx3FNxa50pxeXmgq7ZH%2B%2BzTlzGxyOH1A7U8GKBzgw6ttTWZnRCetLkiVLlqqVWKQ3uoAiNsGIylyIewmhXfFvIDePXYkXYCkE6yNN1OvvYEdtdom0Em7r2K7mgrJeK%2B%2FrTyrb3%2F\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f940be95ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":880,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"cd901bf483b1346db589ffd6ec8810c3","sha1":"0f61d6e5e0688952af49bc76251f9b31d9adf142","sha256":"01b5dacef052f975a65d6e77c0d2afac1e9c18a5c0432c50038848055ab6c0fb","sha512":"560d5ce1dbfb0f8a274ead1fbca3bb6d2e7f30f525a9804e2cb71e56d0291887de2946953b688dba244240126c064e74a7784811a8f1b8d6c7a385c3143b1082","ssdeep":"","tlshash":"9ab0122810aa0fa920c4c0050a622e840f470c89b11d202609a501007a311659d5704b","first_seen":"2026-10-07T08:34:03.44888Z","last_seen":"2026-10-07T08:34:03.44888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:26.968Z","timestamp":1791362006968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 3019\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3019,"data":"dKXWHCUxvX5Zao5j_iMp21sbVxiwpPbbuBAi69dYosgdSuLUz2JQ_ZnCzMwwOaKk3uuk3L-VNRCMdLZWj9pruusPolhJirNottBG135FcaiY4wHkb_xVTUFdTmeVRHumrsoyG6jNsmFjUsgwVERxyL8CHWtDbAQh4ZNyagFFZIgg7EJ6AlOdEnwAuHtDN8qygD-_pwB9c-z847LNaM1oy-QzFPj6AY9SmSYWlgfjaiRdmLVAk1biRzrq1DHCX4hmYBXGnkoppXWhJibQ8F-TY6BmYERXQG29D4j52-hCK_Xsap0lsbX6D3qGYAiGawFMsKvbpIfc-uoNOuq_5d6vR2UbG0GfTOsSD5R0OpBzVyziizoBUvC_tti7AuthlbYFERM5UW4QnlggvbwRRmZDZpgeh76Uh-J8mXGJ3IlHstywgaMnGZfKsK8d5pp1Kfs82LOEpKthFqOB6Z18fTrNywM8qkLjPDoktlgZI7_lRYKaSOlxUt5n2fxiil_XW_I2qed6yCUBluewdBIPn8KyAAVOk7hmGkNWSHHGQGUOoo86Q3gjNhMbJv5brITMazaJdtZUmvUI-3Q3rTB8vj3Ex9C0ft4ZKtrpgVFmiHBWQ4fL8RdcCsm6OYxT6N2DJZndWBERnw3rMnWT4PSs5gjzCDwbaeL9u8GOv6QtXqRjOcpR6ntBgSLxc4yYm8MsOm_Nx-SSfX2V7oIVdLdPIwQKh04es98mKpCc_yANuATgzKoWlWzute56xXJak9gLe8RoDmST7Qn4rSl_9hKGjAPkIIciZWgBTLRTxOFPFu3r7bgRpJSdigVg2JPjr8gfZkPk3j9VenUiXrx3OhiExsHV27yUG3uZ6xWjAqhgePWr84KDez5_WPOQVvLlc9FSM2zt8IDvLD4xfFtJjcHwq4rh_kCxbDea6XWYyjP3NH7kNW0hrvZQx9W8JgFFVenL3onlw3weSbz10-_lwY0dZDylaha4tlu4QqsonH1hsC79VRx7AjELRLd0PqXlmPS5C_nW-8oexhRs3iAc8IfBXAvmESNzqrQSnykQZti1ETaVTLS5n4pq-RkXmnCtrbPMu8qojiZMQOIj6kqnda2ZBHnc0V4huG0O9TM3JdE8w0TD7LMguYWmTMTzd8WtFsKQlAyzToCkLbV4T_HgdbBKsxZl_5EQfTHjeqRXaxmvVlM4sFSmCPPpyOQle2eK7gSSzpk9CCMJYEPY0jUPR2C_FzyikOMc81fnbcsZOQgT0WkZ9taE9XgPX6LFjcaZtPCZuhyJcVbWoyHf98z13USuNRiuRr2VFrCc-KYy-iswYRoOC80MnPM1_4Vntq56_aPSYCUA6rFua_yLESkjs0H3iyJLXFcQxrv82YxtEKrryO1jKyZzeR11ewrtuxa1HDAUab5u1WBaIiSP7xHb4Gn6YJoyV42lFq_qs7hd6xY2_wzdxD6bBXukiDxVNP51uWKNzeoOy5zgsSG8_fy934V3A3I4PsrlUiTDcj-VP6dDniCx7ybMZ-o-ju4I1Vzz8VXgL-iq6yrszXG6r-p_v3ahkjfAhUfMqWjwhMCZjEb_14N02-kEe89hy7r_ASlrNYDqrYOwCvdPFdqIhJAUoUdVEWEPUyToqrk3R0dQ_ZyNxrU2nMdveWkv6v6fckOii8cZ1WvPeU__trVUe2wgV2vYdNxVsfpBwdw46HvxtB5zaZVXyq0bCgup1dJE-_f-2BtCuq1QdCD1NKJtuZ_-WBUvZlReyn7LtW91MCXmEZMRSuiBLdSi1TyS2ptmaLMNumh6p5aMpv-_RTNfnqmW583mgezespYxep2zHfBM1TeXW17d6m2ZX5e-4G-JqS62ej2cT5lHd1hSAetwG19byZEmCNY9wTf_msSX3xGZR-o8Xh1QP20RAtTiAzQAE2UAsAR3sCLnBJuRM-u05IRD84yE4YuTNAP5MBkyZ7xMHakd-hwFsfm7kvYRr8vcLH-9GnPJoMYSydWMW0fE7a45GgXF1snEYwB7bQLBDfm1-aZiMWopBAkWLQTF30kZH5uVcX2KaH_04skYqyxIGMVw6Lofd7KcLGd-kXl5qrgxCvtUNKFNboY80p2mW3CeY1tvSFp8gNJvEiT8bIuBo8bMMpck2_emxgx9t0VBJYgND9TcOJHMdI6AZYgT0uwN-uUFo9a76ndJbhdW8clYVNfTqX6ePzTA_dggbBGUDanDy89Vj9qMU72dUVxZjSzJeIfbHlfJStbGK2akaSoEv0dmzxa0OR1mttPr819A30_fI3zi7L27vjkkqACA4d3I-IKa_dmio1st7IHwa2rKgSspB0GdyksChOpqqH402OSTz0I54MqN0I3w6AblCfp_QJrmPLugP9csK95qoSJ0pwbrue3omDf5n8D4Ypw2lNBAAG4zoNBIBsInFH-p2945vv37lX0rTutChyNbc5bhnACM2mKhf5AyIG5BZAcmTtVE3MGO_NSbbGo5fA09IYzp3i2Ai15QtJcJQnTg4VonMrXcjjI9ORmE7F7TNLeorR2bsQ1zemW8P8xTut4KU6V-lOk28UC9fiI_PJaMtvTXYjgpbyszkYUkeHJeI8Gk0XvKYfvq_A_FdxjIznYa3hAZZaFNQ5W5EkzqPSck2PuqPdqMwZv5l2wBk_Jg0NRg92ScUrbwcj684CrqWVxuSoICcYDsyV6WrHth70mnexFQsuv0N0WSVrGH-3iyQHiHAUoXb6nsrSVwtcXFsQKWzYuoUIaNPl00xJMbnHRuZxrJ4N_te2Z0YgYf9SQRfzWT63odVBLmHqwAzFTJ36GQrQWFamJy3hlaPk4kdXiMM_FNEtfRmHKQzyvGkEQcsmQ5r9pVv3UC-AeOCjFM8ani0AsKRqpPdBTiZkaLaHDXta5hGtryycahKP9vZ6dEUH7Z8GByC1pWdp4M27Jow0XlDrQ-F6f6D_UcEnhwImY9uL6CW-qUNpW_07UUVD5SctaSvGcyqPdhmi9Volmyuc2pYM1TB3AD6zTBhR6oXXZMagfJElY"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mftato2oGYC3fbxyhPQIvRc1PuFDim3NtwoNoZwpsfPEDprfqCGcWF2RLMZWxsrKsd8Gauiqowx49N3KToHZO1kqB2jwD9%2BHWq%2BRala1QLRETTKgGc%2B1G0mSilBK3TLZ2VUtvIZ6Cbm3OuZTTuHAN%2BghcI8O5IG0y2Y%2B\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:27 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f9f88df5ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":788,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-11T19:25:09.51094Z","times_seen":24217,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/ethena.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.550Z","timestamp":1791362003550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /ethena.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ft19PfXYfuVW3PgWPkaWWZQPxuamha4UEyxxkFImuMXbNaXAAPZFztzSN65Ik7LQdUQHgSgv9gdZtZMziC4RQqkJ2GLSpt75%2FpedhqNorCfu2EbutIvmegVmM%2FLJOIAoP3ljA0SbtPBq\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-aa5\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8a3cd1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2725,"size_decoded":1897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e5101e7ef2d3329897bfdcea112aa0f","sha1":"e21e973be04058c17f6f4576119553d0cc51503a","sha256":"2f8399598e6271c12f49d694bafc090c982e5a6bba7aaf42541aa5612a484412","sha512":"1de7375a364d3892d1a301db85f5e65c5fbba17ef1c4b0a3c5f97afe1e668d5f75f6a87d1d27938b88389fad2d8f8aec519f50c3d12ba9c8601cae59d9d1a986","ssdeep":"","tlshash":"4c5174e552f473e4da02fbb0443ae5b1795f38bfa36dc3a84185bd04f55a0887d48c98","first_seen":"2026-10-06T14:34:19.041689Z","last_seen":"2026-10-07T08:34:03.453059Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-18.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.603Z","timestamp":1791362003603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-18.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1d77\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onQfFshcBiGR0vDYMbQy3sRcWf03fF8z5UQOwt551LjxF7Zd3IyogWd6KrMXYPJ%2BwE3HRv4C8qqhhNx1Ussifbr2Q1FD2XXoGe3Qnoa%2F4gomqVNQbvYsEoWVmcVZgAWlgFHHDeiv5TlA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a8d13c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7543,"size_decoded":8244,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0bdec4682bcd6ee6fe613c3c390df38b","sha1":"316909f1ff1906b21941edf8be4bc1fad3ced501","sha256":"6eb811912d86cf3fafda632b436037d39c6e488ca509439a02b53f77f7fd3e15","sha512":"ff2e47e6048016ea7ee6e3429f0fe1b3a29988dc445016c635ecca38d0e0cfbc39e3504d69a1e73087b1d78904513ad85a26d26f2b00f7360ccdce7114df6414","ssdeep":"192:7Pe7WMGQJiu4nmLdxRYzogsww0vCOWVLMD52qA5:Y1gnEMcqarVs2t5","tlshash":"35f19fbfe8d8b4c8706246a8c6770f7cf5f1d91b51d156a00d943c278a476d08a7a239","first_seen":"2026-10-06T14:34:19.126652Z","last_seen":"2026-10-07T08:34:03.453862Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/heading-glyph.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.631Z","timestamp":1791362003631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /heading-glyph.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7OJkmkRSeMZs1SxWPwSMjqf5QORxL%2FlXZKpVXwb%2FaaL7S1BmFsQl%2FkoXbvHoQAyqfkdOL4VeLolckfyxclix%2F4u0bYqahV3hZ9XGvU5d30H3EFUbgYhHLz6n1%2F53x%2Btsa9d8ytAN6mi\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-f20\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8abd2bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3872,"size_decoded":1202,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c45aece8ab0b685a8b1a16cac7095a20","sha1":"9f093e367c33a7d932ec38728901b132cc3a651a","sha256":"5ee65441a9372238e4a24d66e295a4e86d291f312a64e880bc1accd06b8eb0d1","sha512":"63d95f8ea05ee451a071c69840e6aefe3613f24ed46542407590e1210bd9bdb1daef031a611ed842abfbc796c94edb2eb13b1a4567f0149069df62a34cdc9691","ssdeep":"","tlshash":"d781401c303ce4156f02649cb54fb586e61f13ca8f7d4fa62049a93eff845e619462fa","first_seen":"2026-10-06T14:34:18.986084Z","last_seen":"2026-10-07T08:34:03.454606Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.406Z","timestamp":1791362004406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 127\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"ktQu-F12kK6uIJMM6kP29Qm6IFo_Mpd6-YkktKTTgbVQzmMYFcGH7U4kaMhnecpQO41f7dBgTBwd-olXv4e6X8tddGnLZGzZxqNFOpTHNbOmHyyhjwoHFAJ8LqlONFg"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRKcPwJUbu6pdqz4nVNfGDwzJ5mCSXVsnGIdQg5asBwoFR00G9OaaRB8fgebYxPmKkUUVy54s02PQIsIW6DCwBimtZ2xX%2FuAnmkulQimzLP6qsYLP2nzYjXomH9c0GdpMlTJ%2FLeYuBqE8qGwvGxgG5GQPlQvedR2YsFe\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8fa9e65ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313498,"size_decoded":75098,"mime_type":"application/json","magic":"JSON text data","md5":"c7eae451995dfa84becf63d935083197","sha1":"37d7a86190a29532026c4f95f946895a768e9db1","sha256":"f5a126b99d8177aa9ff85e2cbee16fe6acb9293d7becc8a336c4441f1f4adad6","sha512":"c33d37bf00eca9af742bd6ad7008715f6695d9167a514585ff844c86bb0dd008cacc00fafb5611216dc3f6204eb121ecb4d8f8f0ca31b9637388a4f827b8b24f","ssdeep":"3072:Lw6Pks7Wi01mbkS2fhBJJjDRli4/5hgPTW+0aSfdV:kHmbGfhBpk4BhgPS/aSfz","tlshash":"4164a1d4184691d0ce4711bde4af9448f0783b638b9d61f6a83feab0b16cf6045e71ba","first_seen":"2026-10-07T08:08:16.438448Z","last_seen":"2026-10-10T14:22:55.093134Z","times_seen":107,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":4,"connect":10,"send":0,"wait":125,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:24.718Z","timestamp":1791362004718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cyou/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://allocation-mantle.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"_qM7p3K2tPkHLJicSCX1NFliKW6OltJnl8uis6xUu2sa-YXVAQtlLWt180yTJ5gA5cHDF5c_zbob36ynyspJQnuorH3hC7fwudLBUiK1"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwYearUWiIUftzAalM74NzOCtaoR4xx7W64jgFPMoYWuOtNROFxksRV3E1Q%2BHuLQ1KFTpKzNzAZnmxtV7kPc1RDc43wSu2utxk3ZE9xyJpDy5jY8juaZSlR7ZDUlLvt3Ylz%2BzX6yAfnViJXzN%2Bj2YVrGjAY9iJCOwTUS\"}]}\r\ndate: Wed, 07 Oct 2026 08:33:24 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f917a8e5ebd-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3269,"size_decoded":2155,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3269), with no line terminators","md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-10T14:22:55.099119Z","times_seen":230,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:33:23.059Z","timestamp":1791362003059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 06 Oct 2026 10:18:07 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2FqpORvaAm2vbT5H%2BCRxB7WOhUpBtmXHnVCUMVfVfMHCH0SdQR0jOXKmgUv3geZax84Bq7Btwi7EBgvQ9%2FF34XfXJc0tBS6cYMPl%2Fn2fL9AJZRIK1RHLAae6I%2BMOmAS9AzGZZN3ZeaaW\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f87ebe7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166307,"size_decoded":20768,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (448)","md5":"8875a470b83bf6ad236227a53824887f","sha1":"e7c28ca3305f7d7a8bdf2ce341523f315d894c36","sha256":"d76a9215212b299859087deba8c794b38135cd3060cba5acda36c71b38c13cb3","sha512":"070604af5e7ff04ed8fc6a9339c7635ba9330b4e6f4b1c477f73e772b1bdeab15f3948f46220342a42f44da42e6b4863d62d195cbcfc41fcca62637936ad5ec2","ssdeep":"1536:gEBF7BCr7kY1JXBWayn9TOEgCMeyNN7DCd29Vd2dCd29V9f9Vd29V9f5z9f9Vd2l:ROXybyONW8dx","tlshash":"dcf3c76062b1263f224bc3e8f871eb0a6e999617ca5f494cb3fc21973f85d95c92315c","first_seen":"2026-10-06T14:34:19.030507Z","last_seen":"2026-10-07T08:34:03.459208Z","times_seen":9,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":108,"connect":17,"send":0,"wait":104,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/weth.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.573Z","timestamp":1791362003573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /weth.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1880\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8Xs65FCp1gEPJM8h%2Bd1jxiyeD1C%2Ft8Lc4S3H%2FXWLtM9k4nNSSKSgT%2F6JoHhOrE8Hz4mAx4czs7a8cDjZe3HY9IIXV4M6qmlW6UG7VkjPWLnPTxjademXQCzgCQliYAxj5ac3cfmdvpJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a5cf0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6272,"size_decoded":6977,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ea2a5428c3b64d8798c6f472710560d9","sha1":"a6d2308ec802c93a2fd1c31149bebecb1567b6a0","sha256":"89118618dba751413f184cbccfecb5f10535ce14a7791f838595aedea546cbfe","sha512":"e02e6bd7c32624a314274a132136485b3f690806b0ccce15c3d7a6a438274723d9440cad966f99838eeadc46daf9e43ae892ac71317fc6778563975699f2c96f","ssdeep":"192:04IYY/6TWUcTWDUTlNBAizX85Zidwc43qTl:0rYY/XWDUTXBAiLWZzv3i","tlshash":"c3d1b0eaa43d00b65d464cc8ec08cdffbff011bd541a16dcea939e0002912a96acdbc7","first_seen":"2026-10-06T14:34:19.079816Z","last_seen":"2026-10-07T08:34:03.461156Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/partner-27.png","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.617Z","timestamp":1791362003617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /partner-27.png HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1f1c\"\r\naccept-ranges: bytes\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhWj5lheJN3qKgm5MtGByuXgFxvgdSqeaNMFKSpplF5R86ce81T8Gw9R9G4Ee7Ga7h%2BxBLYBeAAwJQBwBeQf57PwKO9j3vFu9wa1%2F843Poh7ng%2FLczVyCiTszkhbBFP3jFNJKAMks0KW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b8f8a9d1fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7964,"size_decoded":8667,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2560f1fce4be05e7e7103b20399f043d","sha1":"4fbf20f0362d3e173deaf6ebaaa82e3d66175ee5","sha256":"64c81e656d7c41b6ac9ab86b8b0ca166503ea18500ef0338d3a59e302aa8a668","sha512":"9fb51cc657a297439fed43a62778a966154e872028ace157bccdb17bb1450b94aa90d9c340a9ada09555574cc3189727cba6cca1a980bb74b75a85389757b034","ssdeep":"192:imtd0eGte9ES7burwGRSHBzoQz2T1nnExjlftgnY:i/jyEuWwGR8Bzz6Fn08Y","tlshash":"11f19e8a5ccb850ffdc6c8752c7c0d215416b8af33e992a7b49a34a40751d5f5abc283","first_seen":"2026-10-06T14:34:19.004157Z","last_seen":"2026-10-07T08:34:03.46292Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/composable.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.635Z","timestamp":1791362003635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /composable.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lq0z2ghNJe3dbQYe5QntuiN%2FQkW3dk%2B%2FY2vtWVQii0GJ0hGAanrLpxlAKhtzZNMGRjU7M5DAj9UtHfGxbGjyC5XWVY%2BuIIR91rOqtzCJiJ0Bn8fHangRorzQAe%2BzzeAyxyDCv2le4wPu\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-862d\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8abd31c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34349,"size_decoded":4088,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e1f555f3d6f30109f89fd00bcd303d4","sha1":"2a07cdca1f47a21c2da74237c92d04b38c181524","sha256":"3750264d91c1fbe2cdf056415c25af324b63701adb6c367e0065259de7fe5102","sha512":"1dc4ceaf048e7edda0f4b1f5fb1b25d5b04f8e9aa58a305753f04dfb0fb5b773d98d160d39e47322d7ce760756013783adf58d5cc92cddfafe29b884e095673d","ssdeep":"192:zOgCYmnR5OJw0y2P6jvAiH1Hii8bhezQmqg3Svat0dJ4tnyNkB0HT62vxEWzuVQM:6BXgdY","tlshash":"0bf223fd71acc410288991b8e6d7fea84e4ed973230073e620254e9ef8e4d661b35367","first_seen":"2026-10-06T14:34:19.04581Z","last_seen":"2026-10-07T08:34:03.464669Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cyou/institutional.svg","fqdn":"allocation-mantle.cyou","domain":"allocation-mantle.cyou","tld":"cyou"},"ip":{"addr":"104.21.79.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cyou/","date":"2026-10-07T08:33:23.636Z","timestamp":1791362003636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cyou","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:37:09 GMT","end":"Mon, 04 Jan 2027 19:37:08 GMT"},"fingerprint":{"sha1":"25:7A:56:EB:9B:8E:00:BA:48:4B:B4:E3:69:1E:11:D6:CE:FA:86:A8","sha256":"50:0F:A2:BE:F6:DE:F7:18:8B:84:0D:21:21:73:68:7E:68:AD:B3:43:AF:C5:0A:3A:1D:5D:E8:CD:95:6D:92:66"}}},"request":{"raw":"GET /institutional.svg HTTP/1.1\r\nHost: allocation-mantle.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:33:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iuzGlOyQvY%2Fgfts%2FK9PfxEpQNQYcaaRNt6HAHGwdlOZmkU9RRcPVJQMZUc8hs4einZbFWfMCGQabg1YPA5JHPRaN%2BPxVzLFsqMios%2Ba1%2FGo6AL1TW9ByEB6RlTnwaBoTIdMSYZS1Lsl9\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-8cc0\"\r\nage: 764\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b8f8abd32c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36032,"size_decoded":4536,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"121ef75ebb89bd6a64769684b8a204fc","sha1":"60c36836ae9b94b8cae2c54cbcfafd6f1951f20f","sha256":"5ed9820a4797c9d72c16ac39e4dd9f04355cad4edb8d922d4e05ef26ff0afad3","sha512":"052cb3897c988d13d78d3556bbf36aa03b265779b0fc9d996dce5faa00ccda86e354271fef713cbbe7e860a859e6eb8017cb0a25efa0d81307aab93d25c06eb2","ssdeep":"192:AOxmSg0SgZgTg5rPyy5iAzj9ebCJIemcUQdNYd/KE0SR4DAPhuJ/8fES4zcuQ81o:7RKhGLEdvdT","tlshash":"d0f256fd71acc420288991b8e6d7fea94e4ed977230073e220254e9dfce4d665b31366","first_seen":"2026-10-06T14:34:19.109703Z","last_seen":"2026-10-07T08:34:03.466632Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}