{"report_id":"6e190e3e-bdfb-40ac-a51a-6c2058fa2702","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-05-25T11:10:39Z","url":{"schema":"http","addr":"thequickkicks.com","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"title":"The Quick Kicks - Cepat, Taktis, dan Siap Menang!","dom":{"size":343292,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56066)","md5":"a99745035199328f82cef93886373b70","sha1":"2939e9483da7596321db7f5bba9a21ef2067fb73","sha256":"6ea5d72ae76ea755491c65c7b790ae29897b4d73f352822829d47ac99a276548","sha512":"f497bb57934f360d67d046d16b55f52ff873d7e2380acf19051dc0d6ef97e0b808754ccf36c9adab4a3c9368de1fea169686f6366bd0df6d7141410cf896524e","ssdeep":"6144:aOt8uGgr23Ot8uGgr2aOt8uGgr2hOt8uGgr2W:Li/grZi/gr0i/grfi/grj","tlshash":"8e74e033921f2d8a76170d90e41427082de9bc9fba24da98fdcc0596d7fd620cd9d8b6","dom_hash":"domhash4000acdb198e1f93d61c182a1c8eac20","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thequickkicks.com","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T11:10:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":8,"urlquery":2,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54316,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)","source":"{\"timestamp\":\"2026-05-25T11:10:20.449631+0000\",\"flow_id\":751265715647569,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":54316,\"dest_ip\":\"8.211.50.56\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058789,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"api.zan.top\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":877,\"bytes_toclient\":1634,\"start\":\"2026-05-25T11:10:20.390225+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54314,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)","source":"{\"timestamp\":\"2026-05-25T11:10:20.451836+0000\",\"flow_id\":1595007745979359,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":54314,\"dest_ip\":\"8.211.50.56\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058789,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"api.zan.top\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":877,\"bytes_toclient\":1634,\"start\":\"2026-05-25T11:10:20.390111+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":54312,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)","source":"{\"timestamp\":\"2026-05-25T11:10:20.452457+0000\",\"flow_id\":872439627969325,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":54312,\"dest_ip\":\"8.211.50.56\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058789,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"api.zan.top\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":877,\"bytes_toclient\":1634,\"start\":\"2026-05-25T11:10:20.389933+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59884,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-05-25T11:10:20.459162+0000\",\"flow_id\":1163292665720531,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":59884,\"dest_ip\":\"52.137.106.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3457,\"start\":\"2026-05-25T11:10:20.143059+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59890,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-05-25T11:10:20.497950+0000\",\"flow_id\":111287671235670,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":59890,\"dest_ip\":\"52.137.106.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3457,\"start\":\"2026-05-25T11:10:20.173142+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59904,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-05-25T11:10:20.520061+0000\",\"flow_id\":1175267034539430,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":59904,\"dest_ip\":\"52.137.106.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":909,\"bytes_toclient\":1654,\"start\":\"2026-05-25T11:10:20.206246+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"47.91.77.10","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":44850,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)","source":"{\"timestamp\":\"2026-05-25T11:10:20.617083+0000\",\"flow_id\":960561619441691,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":44850,\"dest_ip\":\"47.91.77.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058789,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"api.zan.top\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":877,\"bytes_toclient\":1634,\"start\":\"2026-05-25T11:10:20.563227+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T11:10:20Z","timestamp":1779707420,"ip_dst":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59914,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-05-25T11:10:20.890105+0000\",\"flow_id\":1086595287259378,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.59\",\"src_port\":59914,\"dest_ip\":\"52.137.106.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3457,\"start\":\"2026-05-25T11:10:20.563442+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"webanalytics-cdn.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"webanalytics-cdn.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"polygon-pokt.nodies.app","ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-12","domain_rank":0,"first_seen":"2025-08-27T09:07:26.238785Z","last_seen":"2026-05-20T11:42:36.234495Z","alert_count":0,"request_count":12,"received_data":9482,"sent_data":6056,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1rpc.io","ip":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-05-24T18:30:41.827562Z","alert_count":0,"request_count":4,"received_data":1396,"sent_data":1888,"comment":"","tags":null,"fingerprints":null},{"fqdn":"polygon.lava.build","ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-14","domain_rank":7157037,"first_seen":"2025-08-27T09:05:44.919474Z","last_seen":"2026-05-23T08:50:35.277456Z","alert_count":0,"request_count":12,"received_data":14425,"sent_data":5996,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"polygon-public.nodies.app","ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-12","domain_rank":0,"first_seen":"2025-08-27T09:05:52.160676Z","last_seen":"2026-05-20T11:42:36.16049Z","alert_count":0,"request_count":12,"received_data":9516,"sent_data":6080,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polygon.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.273214Z","last_seen":"2026-05-23T08:50:36.212095Z","alert_count":0,"request_count":4,"received_data":2165,"sent_data":1948,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"polygon.rpc.subquery.network","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-10-07","domain_rank":0,"first_seen":"2025-08-27T09:05:51.207004Z","last_seen":"2026-05-23T08:50:36.352442Z","alert_count":0,"request_count":8,"received_data":0,"sent_data":4148,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-05-18T11:37:21.606911Z","alert_count":0,"request_count":4,"received_data":258396,"sent_data":1876,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polygon.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-12-16T03:46:28Z","last_seen":"2026-05-22T09:22:04.121145Z","alert_count":0,"request_count":12,"received_data":7815,"sent_data":5972,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polygon-bor-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2163006,"first_seen":"2024-04-26T08:35:48Z","last_seen":"2026-05-20T11:42:36.487533Z","alert_count":0,"request_count":12,"received_data":8507,"sent_data":6140,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.zan.top","ip":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2023-03-24","domain_rank":1528343,"first_seen":"2023-08-02T00:13:55Z","last_seen":"2026-05-23T08:50:35.314276Z","alert_count":0,"request_count":4,"received_data":2776,"sent_data":1944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"biletors.cfd","ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-05-23T08:50:34.513662Z","last_seen":"2026-05-23T08:50:34.513662Z","alert_count":104,"request_count":24,"received_data":1768850,"sent_data":11880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":1960624,"first_seen":"2022-05-12T13:13:46Z","last_seen":"2026-05-21T21:24:41.686371Z","alert_count":0,"request_count":4,"received_data":2166,"sent_data":1972,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"webanalytics-cdn.sbs","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-19T06:22:21.325389Z","last_seen":"2026-05-23T08:51:20.098338Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":569,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thequickkicks.com","ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":66,"request_count":33,"received_data":905593,"sent_data":17001,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:27.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":841,"first_seen":"2013-09-17T06:14:42Z","last_seen":"2026-05-25T11:00:02.169033Z","alert_count":0,"request_count":4,"received_data":157647,"sent_data":2077,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/api-fetch.min.js?ver=d7efe4dc1468d36c39b8","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38342d2c2caf2a9f130f7452df61b8ba","sha1":"7dfc7582d1947e6464af64bc1db7c5c42a66a44e","sha256":"a44a6a8793a015613aa791e9281bc26c1ba3f3eeb57166ac58b828fe307eec08","sha512":"906e0363e416fa7f25593777039ba0b55b1806096d0b4766c769edc27a7bfa552d982eb8b7e914dd13c0ed5850ae65826d662520bedc1c27ab75a1997c782116","ssdeep":"192:waeC0k0oNI/DPyBLTWSS56mXw6ECKSZVFy9:KCCqBPTS56aw6OSZC","tlshash":"60d1e8d536c3e26763be46d8e8bd0421f68b99ec846d8400f6e1ec2961e9409c473f76","size":6437,"data":"","first_seen":"2026-05-04T14:45:17.38781Z","last_seen":"2026-06-17T07:18:06.723775Z","times_seen":1199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/burst/js/burst.min.js?ver=1779692175","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8235de0d15bad7e743da283b82a4f68","sha1":"39821d33e97f065ec328a8be1f2e865ddd8b129c","sha256":"ca27ee071a04a75e3495d0f7f2767c0e904c7f02387c098229030aa93dbac37e","sha512":"01a5792e1d6282c68573b525d3ba7b35e2486b27fbc83a8dba2c720e69f989552cf451b4e5df1a5d0db36f33bb43275e7e7db6682ac84b0672b5d9d61452d4c4","ssdeep":"192:+GnPLcA3CdHqmrBe/NB7xeRQN5kMr4ow1ueJW:/jl7kBe1CymBW","tlshash":"e012d6d722a19c7edbaf01a7b12c6b415b2b4f5b608960737a5e1ca4048ce03735bf75","size":9447,"data":"","first_seen":"2026-05-25T11:10:50.106757Z","last_seen":"2026-05-25T11:12:53.825138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/burst-statistics/assets/js/timeme/timeme.min.js?ver=1775107392","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"421e614656f7380a73fff0417c2c5c29","sha1":"3d78737fe7c0436160cda8678e9fdcd84525417b","sha256":"683c9b0530c613523f1b02a246d7bccaa9f68af46df061f4d9f72c178c01b874","sha512":"0e5e5ab37a621bdfa3b62575169025fc48cf7010897ab3eb23aec4c9c60d3d644d32ce209c1472ad1f4c5a86618bcdc46803e86a91fd385c1d63e63aa531d87e","ssdeep":"96:+beWvTIWfoXi8ULA+8SoCIDAF7kVhOQtrzFfQDwiA0DX35vUjsWRUm1k1rhbr7:+6WvTIWwX4E+7VIMmVhOQXQMIX3nr9r7","tlshash":"c7d1d6dae7691973cafed383b434a3e4693667601c0c109c66be1fbd7102e8561e067e","size":6448,"data":"","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-06-16T17:07:25.171254Z","times_seen":5024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/url.min.js?ver=bb0f766c3d2efe497871","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4aa4ac645f553ba863c940a9f60ceb4e","sha1":"8508d1d4ee58d82f93b553fe5d2782c7e5b62378","sha256":"f01eed02a2df74d6bd798890b905dc8147c381cfa35e0ac9f5d77d12f1093b7f","sha512":"9cbd9ebf7447d66b70f0007e12724bc24b879eb8ff7116a25286aced3d75b3461b33f83bd57b2317cfbe3e0e34b9dc50628991c2c69892813ef3ea6f943c2367","ssdeep":"192:3NkT4xiQTYTXgGh1SZAp4N3z2E3OtSAw1NNvgzE9JL8nYTAxinbZhXl:3O/QTwgKi64d2GOtg/4E9JQnKJnTXl","tlshash":"412212dd32b320c59fb65d51dd75d1daa17b0fb2046a00449bbf79d02a221ace383a7b","size":10335,"data":"","first_seen":"2026-05-04T14:45:17.370354Z","last_seen":"2026-06-17T07:18:06.734575Z","times_seen":1349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dce915e1876dd9ff440a950d7327862f","sha1":"8980ef3b3bb298d0e7f01d2e42f50e1b0c62b846","sha256":"3dbc601ecfa900bec9b0a713d30be21d2019e8fdce6aaf1b1f3a0f0b1f4f14ac","sha512":"da98be6ed85b5f8a6a00390c161ad67b541e4ab4a81d6c60caf6d185a6b8b6829fa0be0877731f050c4bde46093d3765428fecadfe26bfc98b41815c0d018546","ssdeep":"384:D+f8o/zTGQTswxoMAG5HXS6/M/tKK+deVju3pSpr9UMBt56iyIer1K8kmg4KkC4C:if8o7isxoMr5C6/6tIquZSpr9VBz6nIt","tlshash":"f4926c607b1d62cc0b050fba8ea63006d2d1772b76afc6bcbf176e05580ce6e7495647","size":19850,"data":"","first_seen":"2026-05-08T20:18:15.093624Z","last_seen":"2026-06-04T17:45:47.352325Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b676121d72c10a23f486f81394ca3cf4","sha1":"d00930127479768bb74a1e33b01e1354b8e91382","sha256":"be2c1699fa07cf0e05af1ed9bc180fae47091902b980ad7f6dc8851a60d069d6","sha512":"a31aa0263a2ccab80b3544af4d4ba231530675c018dbc5d4d32d1948dc520b23d2456579bfc834bc21bbfc9cc2425f756db86d55953ac6c03420d2cf3d8714eb","ssdeep":"192:USSHiqabdqbb58NuXQKkw90mt74W8S7fcT9A7bFJ4B7dWkTC2qgMLdUeTlqcs34t:hlbcr90W84bn4B7dWk+2qgMC34RNYzdo","tlshash":"4a62c694356691f543e70ee0002e1544fd3bea023d8cc4a4b2ab4ec7179f6b6a1b7a7d","size":14567,"data":"","first_seen":"2026-05-08T20:18:15.096587Z","last_seen":"2026-06-07T15:22:08.136323Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cb38ee188c9c1d9b9b3fa3b87f71e319","sha1":"65020765627520e3bad94c35cf7e70d9b4660f4e","sha256":"22ee05c5403259cd373935be00224649c60a712d8d91eb0b50c9d5b95855b735","sha512":"e8559578ce67e75933d6d31cbbad601e42bcb54278b904436b33a74aa0db563f43d8f535fbbba84daab4d2df389b44d3e977a7b92627583183a340fd52bc1e3e","ssdeep":"","tlshash":"618108fe2e730029553302566b7fa90a307d142b9cd9cc62bcadf5902fa5a110c1aee8","size":3856,"data":"","first_seen":"2026-05-02T10:56:27.937294Z","last_seen":"2026-06-15T09:50:51.181402Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"145e28c969252d967fd3a7e7137a8461","sha1":"9e435be9f6bf08df88c9633b0ba1e8e69bb03b94","sha256":"a3b0b85bfe9e85483d38dfb1f4e720f35c1755856d9afdf7868b9a013234f641","sha512":"e89b2d785c8c11c36cf2707108af86ffd13ebf8f1266388bcf096249ecb3b44700239f72f4ed505134d47f3bb34c10b351bce4cc77775976f8cf796de6f3975c","ssdeep":"","tlshash":"d461c6ff2e270055827f02a6657fa94d787754239c99c806fc9ef6801f95e46102adf4","size":3464,"data":"","first_seen":"2026-03-30T04:53:46.546262Z","last_seen":"2026-06-16T09:56:34.829907Z","times_seen":247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a647433a478bb4731656ca686430ac5","sha1":"01dc809f7ce3de4e655fe52456cb8bb9950e4b1b","sha256":"c2ff6df28bea9c7e1ac95692e3a2eb68b33be87031c45f96ebe5319876d9ea82","sha512":"86e4b04d95e4ce23562587241d6cdf96b72416022be638a6a6884f06242f4b7d690391e4c952f667c8ee8c15f1ead3edec9f84af4233e4103004991eb860e4e5","ssdeep":"","tlshash":"f8b0128b74ab3d50828fc7b44d23be014510208782afc50875e59d3096718c0b4c362f","size":99,"data":"","first_seen":"2025-11-18T21:59:56.555736Z","last_seen":"2026-06-17T07:20:59.818433Z","times_seen":12970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b676121d72c10a23f486f81394ca3cf4","sha1":"d00930127479768bb74a1e33b01e1354b8e91382","sha256":"be2c1699fa07cf0e05af1ed9bc180fae47091902b980ad7f6dc8851a60d069d6","sha512":"a31aa0263a2ccab80b3544af4d4ba231530675c018dbc5d4d32d1948dc520b23d2456579bfc834bc21bbfc9cc2425f756db86d55953ac6c03420d2cf3d8714eb","ssdeep":"192:USSHiqabdqbb58NuXQKkw90mt74W8S7fcT9A7bFJ4B7dWkTC2qgMLdUeTlqcs34t:hlbcr90W84bn4B7dWk+2qgMC34RNYzdo","tlshash":"4a62c694356691f543e70ee0002e1544fd3bea023d8cc4a4b2ab4ec7179f6b6a1b7a7d","size":14567,"data":"","first_seen":"2026-05-08T20:18:15.096587Z","last_seen":"2026-06-07T15:22:08.136323Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/navigation.min.js?ver=1.0.2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e989ca82dcbfbb13ea142424077c05d9","sha1":"ba4fa7758b4e1f8439eaa44fe10260697ed8200e","sha256":"bd7e9705573e01d301efe30f1dc3c4a488da6e7f65f23940e80bb819f029bfd5","sha512":"ad433664240d0b6dd12567ee36627d15102ed9abc946bbc80d5cb47965d0d3bcdbd8d5fad9b6d7f4e64700a14b2e855d36e2062213f2b207abee4041652bc219","ssdeep":"","tlshash":"c431cfbf298036b71ace31c772e295803a7320955885441155b6cc4b1a34de245b5bf8","size":1478,"data":"","first_seen":"2023-05-09T07:18:58Z","last_seen":"2026-06-15T20:57:22.338213Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"23c8933b7619ab5f62384033e85c6912","sha1":"1e156257d780e5e18b27946fd21cc46fda3e70b1","sha256":"eb114f28a84ad285a89ae232b5ea774c69ede96d47ca69f30e0d1de04957a797","sha512":"d336a95d825cd55e4fd1eb8f818ed20c4ef6f0a79733a60953063ec307688a56b62b9239bf9cd3942862dfbdb54564ef4f565f4adc13c1e2e54d236dfdc09083","ssdeep":"","tlshash":"4781b6fe3e324419417711a66a6f690931b64523acddc845fc6ef4a01fb5a120c3eae8","size":3837,"data":"","first_seen":"2026-05-02T07:56:14.009827Z","last_seen":"2026-06-15T04:49:23.727507Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"59d3bf58bc5702f1c9899173e05347c0","sha1":"99659ea033101310df36caa24403a11b456a5528","sha256":"8764c76c0b0b9bc8abb173cf8f5bfe60c42f6ea69b48c432ee973f22f68260bc","sha512":"c8a4b15d354e38df4abfbffa5d040e064b9b3db0ef61d935b06687ea7e4a3cfcec451f5c3d4ef5b1b93a4b8f40977902d16b103a29536b92db3f49cfbecb9efb","ssdeep":"","tlshash":"5f71879ae77638dfb2f900f2697a0d47e7614435d6c8d438c9bda3141cb5893c274a46","size":3590,"data":"","first_seen":"2026-05-25T11:10:50.124125Z","last_seen":"2026-05-25T11:12:53.832045Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-17T07:30:54.185161Z","times_seen":839143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e80bb5dc2def46f858ab4967c922f4a","sha1":"3ec30c882c1881ff3d6ed87e939c45bdce4ffc0c","sha256":"edfff66736bca6660c2eb4bd3f718db2453ae8ddbefc005e3d9a075aeddd1cff","sha512":"595435d2a2a7f7ac10b92f976098e4a168cd0e1524a2ab5e1e15cef64364253ef546d554f27dbe7661b51c637c782d510ad189aaa58b35271299f5ded47b4091","ssdeep":"","tlshash":"3c11635c1c5492274ad657c4224b3d85adecb30013fbac1ee3110d051a71b9ca2e3baa","size":1092,"data":"","first_seen":"2026-05-25T11:10:50.126287Z","last_seen":"2026-05-28T14:00:29.954381Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d42434789043f50236acdd66a4bc19e5","sha1":"d720c57d31b25cc4c62825278bd1463ccbb02557","sha256":"bc4f5ff4a44fa97db868643837f0be8c5b68f33d28ca02bb5dc74bcdff43cc31","sha512":"e9fac6cae9e6f87500bb1d68fda7888366206532f756ec95e7904bc6ea101f002124e1e205c5c49cefe5e502908bf1df571773c64c361e946e07b63a6158b05f","ssdeep":"","tlshash":"e3e0e5fd34900f06644ca90443f90371aae0ccccadb6c3004eb7ae4041d5881bcd8002","size":415,"data":"","first_seen":"2026-05-25T11:10:50.128502Z","last_seen":"2026-05-25T11:12:53.834943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/contact-form-7-js-translations","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8480540554a971b3ae4c189045222698","sha1":"49d0fde7236d1811bf4514507af6975bddaa84bf","sha256":"1f8b99ba4faa5347e5a34c83593d9a0aca81cbd962fa29fe59e1689e2742ca12","sha512":"a6e07f6ab6ac146bfb4ef734f80cab4218b1f863c8d57a84549db0b578b86a9a867375a4747d483e16cecc6771447b490eeeb024cb15c9f8e79d329e5df0a68c","ssdeep":"","tlshash":"ae210244dc38d92284d292fa35aa7905b068f510c37f1c06720e04090a50a7c9af390c","size":1159,"data":"","first_seen":"2026-05-25T11:10:50.130811Z","last_seen":"2026-05-25T11:12:53.833504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-17T07:30:54.173905Z","times_seen":911234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-06-17T07:24:09.129234Z","times_seen":202044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/jquery.marquee.min.js?ver=1.0.0","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","size":9029,"data":"","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-06-16T11:45:47.870959Z","times_seen":3981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-06-17T07:32:58.021125Z","times_seen":17850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93046a51e779c53dce34d9cf3a2a1c44","sha1":"8ee8d46eb60fa2500930d9dfb293cb16b98af889","sha256":"211967158c36493379bb95aa33c691112553d0c1b4b37b7f7e8277e2c33e11e2","sha512":"7c4150889d67702137540ef0cb0607c1ec1310d16985f02741a4f5e05fb5720d6de0df11ebfc3c6ce77bb295b88d25cc09737a90c029fbf2575e96b4d98651cf","ssdeep":"","tlshash":"f6f0e1841c7ce92684d2a2ce35aa7945b07cf910537f6d47b30f09091a50b7caaf3a1d","size":564,"data":"","first_seen":"2026-04-14T23:17:14.470017Z","last_seen":"2026-05-25T11:12:53.836872Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b676121d72c10a23f486f81394ca3cf4","sha1":"d00930127479768bb74a1e33b01e1354b8e91382","sha256":"be2c1699fa07cf0e05af1ed9bc180fae47091902b980ad7f6dc8851a60d069d6","sha512":"a31aa0263a2ccab80b3544af4d4ba231530675c018dbc5d4d32d1948dc520b23d2456579bfc834bc21bbfc9cc2425f756db86d55953ac6c03420d2cf3d8714eb","ssdeep":"192:USSHiqabdqbb58NuXQKkw90mt74W8S7fcT9A7bFJ4B7dWkTC2qgMLdUeTlqcs34t:hlbcr90W84bn4B7dWk+2qgMC34RNYzdo","tlshash":"4a62c694356691f543e70ee0002e1544fd3bea023d8cc4a4b2ab4ec7179f6b6a1b7a7d","size":14567,"data":"","first_seen":"2026-05-08T20:18:15.096587Z","last_seen":"2026-06-07T15:22:08.136323Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"145e28c969252d967fd3a7e7137a8461","sha1":"9e435be9f6bf08df88c9633b0ba1e8e69bb03b94","sha256":"a3b0b85bfe9e85483d38dfb1f4e720f35c1755856d9afdf7868b9a013234f641","sha512":"e89b2d785c8c11c36cf2707108af86ffd13ebf8f1266388bcf096249ecb3b44700239f72f4ed505134d47f3bb34c10b351bce4cc77775976f8cf796de6f3975c","ssdeep":"","tlshash":"d461c6ff2e270055827f02a6657fa94d787754239c99c806fc9ef6801f95e46102adf4","size":3464,"data":"","first_seen":"2026-03-30T04:53:46.546262Z","last_seen":"2026-06-16T09:56:34.829907Z","times_seen":247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b676121d72c10a23f486f81394ca3cf4","sha1":"d00930127479768bb74a1e33b01e1354b8e91382","sha256":"be2c1699fa07cf0e05af1ed9bc180fae47091902b980ad7f6dc8851a60d069d6","sha512":"a31aa0263a2ccab80b3544af4d4ba231530675c018dbc5d4d32d1948dc520b23d2456579bfc834bc21bbfc9cc2425f756db86d55953ac6c03420d2cf3d8714eb","ssdeep":"192:USSHiqabdqbb58NuXQKkw90mt74W8S7fcT9A7bFJ4B7dWkTC2qgMLdUeTlqcs34t:hlbcr90W84bn4B7dWk+2qgMC34RNYzdo","tlshash":"4a62c694356691f543e70ee0002e1544fd3bea023d8cc4a4b2ab4ec7179f6b6a1b7a7d","size":14567,"data":"","first_seen":"2026-05-08T20:18:15.096587Z","last_seen":"2026-06-07T15:22:08.136323Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","size":415769,"data":"","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-06-17T07:24:09.008229Z","times_seen":209500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","size":415769,"data":"","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-api-fetch-js-after","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c87d379ed9bcf5cfba41f7e68c33ac","sha1":"50d9f72ff16287811ce5a3ccecb7c2e65281af20","sha256":"81ccabb09514aef8f79479798bac842572149a0f0d41700712ae74fc83267e10","sha512":"0e6d97bfcd0c4536f0b192e11ccba5e26f6ac7ad651c4f9f936e062cfa82345fa29427e14c3e8a2a6061668b91a20f9d2950bebc1eb960cf839e530850eadc0e","ssdeep":"","tlshash":"fbf0e5fdf4900f06644ca93443f90371aae0ccccedb6d3004eb7ae4441d5881bcd8002","size":583,"data":"","first_seen":"2026-05-25T11:10:50.135289Z","last_seen":"2026-05-25T11:12:53.839031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/slick.min.js?ver=1.8.0","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e299ffe2a73f37d846ff0705429babe1","sha1":"4fff3bef8d1b965819b88481deb47e1e7eaddc70","sha256":"4e55b451621a060d376f1b31af3b370ea3d65ab7532ca82e875e52882deefbae","sha512":"c0764f57c349db8d498294f84884a747aa13fcb609eab7b3108cc73ab7c1f91fcd87e219b6f6d69deb85fdebe457aa1ce4bfa09957c810912789f9036c9ddfd5","ssdeep":"768:4rkk/123F9NHi6pWAFQGpNtYh81+bnDYdXRRMi2KYCQCsPSPzdGwKz7RFmYf:EPIFQGpNMxEGwKPiYf","tlshash":"4d13a549d205276289d721e62105c40eb3f7fb3cba22c0e475c9d3ea646dc4896d7bfa","size":43146,"data":"","first_seen":"2023-03-07T21:41:11Z","last_seen":"2026-06-16T12:25:41.356799Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/wp-emoji-release.min.js?ver=6988c0f99ac37185eb1cf46d703c15b2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-17T07:30:43.302337Z","times_seen":272466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","size":415769,"data":"","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","size":415769,"data":"","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/contact-form-7-js-before","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"397b62c18b21472ea456a747b0a28a3f","sha1":"1613a8a9e07b211a00947b0d01e71623da10cdf2","sha256":"1dc228472d35f90275e2682cee6a0739a0ea7263b67fba9757f43f72b9243d56","sha512":"8cc8c59cdab8872ff6a2c2f2ab735adf9d6a4899e32affce682e6d14b18aa5c539629b161f8b0a93de3242b913c951e07a776fadbca325fe51095a4b8d05ed7a","ssdeep":"","tlshash":"0e0180a6d9a91c4934dac574017c1320f114d517ca1f9f45f64d014c5ff847de9c4185","size":779,"data":"","first_seen":"2026-05-25T11:10:50.137963Z","last_seen":"2026-05-25T11:12:53.839684Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"699272a68f73378fc5dcf2a317c9cf4e","sha1":"1ff1a37e9a57a3be5ee390ba9e217713e795416f","sha256":"fb5b03c77aa817cac58c1df811309348706163c07a35b9b1244899d810c53912","sha512":"968d6f30a20989df290d400634f58c6cf9ef7014a497aedfec4a932017e9caa955b0733497d3eedb398548753bf00aae7acbcd6260ae4ff6009e88e365e7e7c5","ssdeep":"","tlshash":"36c080a699a91c4934dac544017c1320f114d517ca1f9f45f64d014c5fb847de9c4185","size":176,"data":"","first_seen":"2026-05-25T11:10:50.140123Z","last_seen":"2026-05-25T11:12:53.837874Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/custom.min.js?ver=1.0.2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38618c49bad790258efa6eb3eea220d5","sha1":"b0608cc6d5de1c3314d0350b785d1f02e963294e","sha256":"4c3454a9025a6c398c47cbe8909eb90dc638590b48055ec584b37b4aaf0e8263","sha512":"8d90b2c747ffa0dbfb88acacf95aeed5dbfff6f1e813a0b06cc9ccc259736759a90625d63bc895dc399a9af65f3dc7268e26e437d94f13883e22a4f978fd37b8","ssdeep":"","tlshash":"b87130227052a19a24fb26bac28bfb4031673f39dd0a5201d951cc7e16fdd1e6763e68","size":3635,"data":"","first_seen":"2025-06-22T03:52:13.917026Z","last_seen":"2026-05-25T11:12:53.806395Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-i18n-js-after","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e853179da3bd058e7abaa5bfe3d7bb9e","sha1":"dd052ed1c507e5159707a1bb24217b92b8788360","sha256":"0a6a7b0b4685e3cba8487fc1ecc0925e92e1fe0c719689244c05fcab1a2a90fe","sha512":"38910916b877c9ecfaf34050d1a1fbf8cd7b09b98089497a1492254f59d065d9b4394d8b6bb9c6fa3bdf496828305cb211742c93f006c0bcf93dd97d673d63f4","ssdeep":"","tlshash":"4fd012cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":253,"data":"","first_seen":"2026-01-17T08:52:15.413332Z","last_seen":"2026-06-06T04:45:02.605323Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-06-17T07:32:57.81274Z","times_seen":17504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-api-fetch-js-translations","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a58c4633d66fdd64d245a464252ca8","sha1":"ace3057f6802c1bfd1dc37ad11feffc0e3f68f21","sha256":"c3be63062116cdb31c6fd128507367e220a86f041aeafc8b444bfd355f94b1e8","sha512":"0da0d5dfee37c1800935a6a9f46e6eeb13b86a8bf378b6e27f1e49e3712aa1954d21d0e696b05a95949b0e4741a0970f86bde91ae2f6974de4dcc9ea99036d5d","ssdeep":"","tlshash":"2e21675cdc5492274ad657f4224b3d85adecb300d3fbac1ee3110d051a71b5ca1e37aa","size":1251,"data":"","first_seen":"2026-05-25T11:10:50.144619Z","last_seen":"2026-05-25T11:12:53.829558Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1rpc.io/matic","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 05:42:29 GMT","end":"Tue, 04 Aug 2026 05:42:28 GMT"},"fingerprint":{"sha1":"19:AD:59:BD:87:BE:FF:0E:C3:94:6D:87:DA:31:53:3C:B9:70:4C:C6","sha256":"DC:FF:05:18:D9:F5:7F:85:7F:F6:6F:AC:F6:11:02:4F:73:4B:5C:73:91:CC:F0:61:36:2B:A6:0D:12:3E:BF:82"}}},"request":{"raw":"POST /matic HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\naccess-control-allow-origin: *\r\nContent-Encoding: br\r\nvary: Accept-Encoding\r\nContent-Length: 107\r\nDate: Mon, 25 May 2026 11:10:20 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9527cf4b65b955dd3331afb8f054ac9","sha1":"08731596ff100efdff0a2d68bf080730474e1c2a","sha256":"5fb9480e8f21925a902c3006422cdfc3daeea608681574b15fbf23273b8db489","sha512":"34f5f3dad2b79f7b6e6e531d5f301242b498fa7a6f355e92fa5e3866b388508d3e95e3a3a38d40c288b2ad049c1d533cbb2bc7a90add06b62ec0d66634f23307","ssdeep":"","tlshash":"79c02be413ce193127070463250b320077d1dcc6c4433f046c1c00bc40c0245c213374","first_seen":"2026-03-21T20:15:30.727439Z","last_seen":"2026-06-06T20:33:07.720244Z","times_seen":508,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":2,"connect":155,"send":0,"wait":156,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a01417c8ffbd7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 2592000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=_hF8Rap7nH3SlaCcDbDyFMbmhR89cYrCzDcOrWLwbEE-1779707419.0207534-1.0.1.1-2.1r1HXxnCtjVRgGMtD8n1Sj85urQqjO5XvxRgtCeorJhnGPOhq7W3ljJKxr8epXfARnZES_nXTu_BX8.wvhavGFlA3I5LYJqs3CSo9Idb5ge9r91QdHh10wb59yAYUO; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=QrGstx1lvpCWKKuEZGClCEiD6WlP.7vyxm8dekvLjKA-1779707419.0207534-1.0.1.1-plCi68KKf6hUD2GBMScCRrefe3fIwfn8lG7rb3SoKuU; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c8dd5a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":22,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a01417c9c8e57130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/matic","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 05:42:29 GMT","end":"Tue, 04 Aug 2026 05:42:28 GMT"},"fingerprint":{"sha1":"19:AD:59:BD:87:BE:FF:0E:C3:94:6D:87:DA:31:53:3C:B9:70:4C:C6","sha256":"DC:FF:05:18:D9:F5:7F:85:7F:F6:6F:AC:F6:11:02:4F:73:4B:5C:73:91:CC:F0:61:36:2B:A6:0D:12:3E:BF:82"}}},"request":{"raw":"POST /matic HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\naccess-control-allow-origin: *\r\nContent-Encoding: br\r\nvary: Accept-Encoding\r\nContent-Length: 107\r\nDate: Mon, 25 May 2026 11:10:20 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9527cf4b65b955dd3331afb8f054ac9","sha1":"08731596ff100efdff0a2d68bf080730474e1c2a","sha256":"5fb9480e8f21925a902c3006422cdfc3daeea608681574b15fbf23273b8db489","sha512":"34f5f3dad2b79f7b6e6e531d5f301242b498fa7a6f355e92fa5e3866b388508d3e95e3a3a38d40c288b2ad049c1d533cbb2bc7a90add06b62ec0d66634f23307","ssdeep":"","tlshash":"79c02be413ce193127070463250b320077d1dcc6c4433f046c1c00bc40c0245c213374","first_seen":"2026-03-21T20:15:30.727439Z","last_seen":"2026-06-06T20:33:07.720244Z","times_seen":508,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.zan.top/polygon-mainnet","fqdn":"api.zan.top","domain":"zan.top","tld":"top"},"ip":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zan.top","organization":""},"issuer":{"commonName":"Alibaba Cloud GCC R3 AlphaSSL CA 2023","organization":"Alibaba Cloud Computing Ltd."},"validity":{"start":"Mon, 26 May 2025 02:31:24 GMT","end":"Sat, 27 Jun 2026 02:31:23 GMT"},"fingerprint":{"sha1":"C6:7B:1E:BE:79:E9:9E:E0:96:46:0A:3B:C3:33:7D:B2:5F:32:01:E4","sha256":"ED:66:F7:BE:9F:8D:4E:5E:E5:C9:D0:8B:96:E4:09:6C:08:33:35:99:F8:A6:71:6F:6A:F1:A3:1C:88:91:6D:B5"}}},"request":{"raw":"POST /polygon-mainnet HTTP/1.1\r\nHost: api.zan.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 142\r\nset-cookie: acw_tc=0a0ca97e17797074209624176e4d992bfc761653e3c75f4a7494735bdc42b9;path=/;HttpOnly;Max-Age=1800\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST,GET,OPTIONS\r\naccess-control-allow-origin: https://biletors.cfd\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nzan-trace-id: Zr91RZlcf1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":142,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd9fc578c88ed10c68d89943af87fe0a","sha1":"6d180730b57bdbfbb1455dbf169461c0d5f840eb","sha256":"a967f31f4a55570af8a88c5e166802865241110f9ab32469ab91529093aeb912","sha512":"85b5613237dbc6a7ab8c7e75c5984866d88f9a8963fe29d6585d259ee2b2c4ad74a7bef5af82fac94d69ab219d6cb1cdd2ed084eb3a47f659c5d88834c278b14","ssdeep":"","tlshash":"b2c02bc25cd72f15866748119d49bf00e6fcac4650850e72446c085c10ce52d4c17320","first_seen":"2026-03-12T21:34:16.080688Z","last_seen":"2026-06-06T20:33:07.733459Z","times_seen":408,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":372,"dns":1,"connect":21,"send":0,"wait":25,"receive":0,"ssl":355},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcMet7HX6%2BFd71cIfz9UADOiy%2F%2BTQ3dIkKshc9bRDBKtXnZcNSyY5UIrW7qfezKUeqFUMRvcw4HZJ%2BOa2rpO3Ga6HvviDX1%2F7vcGa1PtY5YvG1ITI04N6hYOjUNWCj0eavIbYnEUsydh7is%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c928111a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":61,"dns":5,"connect":14,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKQp8mF0i7cgL1MlotxXlgSAOLxBJKIXA2NsvmDZ3XkUTAwqDIwWMYwBHYxBKA4fSjfzsUPzHeZHrqP35g2j8IfVdt12iEhN845YuGPbcHXD5pLLNpPtEoM7ShA9Yp9Nb4KmzuaFmBsY6Lo%3D\"}]}\r\ncf-ray: a01417d00d5e1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 12\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=mqMvmGj4lTLwFXCKig","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"POST /api/index.php?q=mqMvmGj4lTLwFXCKig HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 179\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":179,"data":"{\"eventType\":\"view\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"screen\":\"1280x1024\",\"domain\":\"biletors.cfd\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWkeShAIAKb0QSzICmqrzRlXuSCYNg49QKD0n%2BFTrT%2FX7V5YHlw4FTJis47348QaDMgKpxF3bAd%2FTqaanYzYwiV%2FX1hGoaSpVZhXjRwXw1JeksUZFzWF48YSyGs3q%2Fk%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d3aa9d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/webfonts/fa-solid-900.woff2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thequickkicks.com/wp-content/themes/instant-news/assets/css/all.min.css?ver=6.7.2\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 150020\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\netag: \"69848c32-24a04\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://thequickkicks.com\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfM3wc0ZuJEdoU0xXQO%2B8VHsHiDcmndyrW0RE8qxpQE9%2BaGnpUGucw65pwisLBjz5o2Qhw%2B%2FoTWQXkDTw4vKaOAIhsAUazxtWz7o%2FV3I384TiDo6QkqiB3xuhkawud1QOybn8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c7b97e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-17T07:07:45.966653Z","times_seen":37454,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 2592000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=KMRtFDcVzMPFxU1Z5Ij3cUtTRIxUv62D8Y15iS3BskY-1779707419.0195475-1.0.1.1-Ckzizl.TbvrTI2.oIxHp6N6Y0cJZ2SbJWgOJ9qKxf9EOskRm2_vW3Vg7truIuuG.vYkyjALc0Uoisz9UBUqLMrDOW3pyOPh_btYB7ZQzYccCH2ZolnZWbC81pgBLpcv_; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=__5Rf8QTM1DYGOpRU9SAHzqooqZ6VSsKwoKmYlNmZMQ-1779707419.0195475-1.0.1.1-pfpCh2415RmcrZMOeK1_M9yL9cPt2z0czXo0Jux48FA; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c8dd540b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":41,"dns":24,"connect":8,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAAOVmsCOo6xEs7PzKbEsNWLMgKHusdjE8AakhAYdNVEwDlXJUYT32Z5QuWAfFtLmEPXtE33vmoEUBEOqZ5l7Um0EKGDE%2FGut4t8YgxLWJpL%2FJKLxtxy9StAjdBGoMNOcc0lK1lIyVCuQRs%3D\"}]}\r\ncf-ray: a01417cafe071a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.128Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.tenderly.co/public/polygon","fqdn":"gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST /public/polygon HTTP/1.1\r\nHost: gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 13\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":68,"dns":10,"connect":26,"send":0,"wait":70,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/wp-emoji-release.min.js?ver=6988c0f99ac37185eb1cf46d703c15b2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6988c0f99ac37185eb1cf46d703c15b2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 05:27:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fca34-58ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 5368\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7TxgaO%2FxrL%2B7gPRF4XfvmajIIODaLfBOdb6amsKJQOG0TEsjq24XFgvRc6lqIUUcepXqxVoryzA%2FpcyM%2B%2F1zvOktDlZpNu783%2BciYcxb%2BMDKm%2Fm9dxaDI%2BkSIXKHNWwhfOfEAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c929bf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-17T07:30:43.302337Z","times_seen":272466,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a01417ca09297130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CwHTlDqpG72snphjg%2FunTf79AIvlBFJ435UT2i88DbJ3XK9gSdQJDVwgqG1Jh%2FEjX%2BL1ARlAdHsYA739cueBBpzFzoU%2BWEgX3To0qgHSGrUMlNWbA5G6Cg%2BVY9O51p57hxrZdJ%2FE0CPkrA%3D\"}]}\r\ncf-ray: a01417caedb81a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=lCMpdGQj1iYnQ7KP2Q","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"POST /api/index.php?q=lCMpdGQj1iYnQ7KP2Q HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 179\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":179,"data":"{\"eventType\":\"view\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"screen\":\"1280x1024\",\"domain\":\"biletors.cfd\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 25 May 2026 11:10:21 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBAT%2B7qnDgqFsSevZDyy1eW1iQVM7HN6VRVcF6kHv0OYC0Iuz8fzIg3nQQvT%2BnH8rwQbkuSaSP5%2BCOCUT7xlJOnohRpq1Y%2B%2B%2ByDnDok2JaHC7Cgm2vvhimyFkDz79Sg%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d49ab05685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uxnq6urZG8q2rfmxbG8YZ%2FeCkjesG5mN6KYLL4Lsir8vPBPmoLygnlze2tbMJlACPjbG9FHL3Xfzf4O%2BClMLyIaW15BDY3JlMgAANYM0fJn03QnwYhysArkjYTd2tHoqexFLmh2uFN9iH5c%3D\"}]}\r\ncf-ray: a01417cfbc631a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6482bd64-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 4872\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNoCpxw9hPA58ap08n63F5V9teYR4ANptEJ2f5Bb7%2FKdZmJxeYx26n9zb1jkVp7APKgQOg4YUAMaFm9i1UcwI7y6FCXHOswSqDaPvBQbkIfXB4t4maQ3ifv9XPGhHo8P1MuIZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288ad783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-17T07:30:54.185161Z","times_seen":839143,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/2026/02/download-2026-02-02T012051.845.jpg","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/download-2026-02-02T012051.845.jpg HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12890\r\nlast-modified: Sun, 01 Feb 2026 17:21:22 GMT\r\netag: \"697f8b92-325a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73205\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=at2wEViWoM3FYT3EMWdOUBbeMt%2FP%2FhQOzOUKBJrYTBEUCkBfkowoilgBRp7ZYRYRMb%2FfOwupDfDrHqe%2BMkQp803o9DhL9RjSRTeHDy1feBpAuuHfmdgZSL0qQ3C96iM2Y4P5iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c8d9ae783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3","md5":"25203e26c1ae98b1abddc1dc91df0044","sha1":"30d5b0adc53e223daef6f6639bf5790f42013c83","sha256":"0dc183743dd6d50c2bbe1236880a655414df75cd0ad6f761b410aa30831cbe65","sha512":"23cfb5f3e8994548fce30e9c1147de02903854578ff13b0f11795f743149f81b3cc0457eace63ffbd30adbc325c02de55cf5cdc53f174ad207619c3c1426067b","ssdeep":"384:E2SJQeItcqnF5Xu53veC8bLY+R5c10Hk3mVmI:E2yQeItnF5K2CuMac10E3mX","tlshash":"9242bfbc8e6184a2f95b44340eb0250fdeb1651552a3b0cf26807781b6e59df5daa364","first_seen":"2026-05-25T11:10:50.035136Z","last_seen":"2026-05-25T11:12:53.788524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a01417c9f9117130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/favicon.ico","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\nage: 73204\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioAHmzrHYyt0k5Zw%2F4TmFA0e34KQeDkB4Dt0%2FxEN78WwcXkId%2F8AU5zC8PbIDyO1XdqP4e6%2F73LrKvHzx2FSHV7GK9Me69BnSxj6Na3W1V6MLWwf0U%2B%2BFUK%2BXYaf1K4hsGbO5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417ce0afc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=gupFHyoT5LjJQQIT7w","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=gupFHyoT5LjJQQIT7w HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UL%2FqetrRohIzvt0eIVRSxKBxIlYija4POsih62naPYLirYOKafEq0ufxq9gxjcn04yLiQdC8tDmYSZvmlYjhkOTbd9CgI4lKwnMJDQD5ZTUoRYg2wLh91TQkPp5JAFw%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d0aa605685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"683046d0de808506dd1c40d0403b5c63","sha1":"8622c524a75c2966c1cff94ee16f7f16322a468e","sha256":"ade0e2aac7fc48a1328ddcdbf6fca734f974502d73baeb19b0a39f7565878411","sha512":"00b1543a673f733fb2674893f4fdc64504eb29a1f3b817bc50cf58a57903a0ee78552fd4b8023efc125bf0e292d35342b0498e50d15e20a4d8571a6e5aaebe47","ssdeep":"","tlshash":"26b012120fe50352f51116c4306d019cf537c6f9f5c6123931044272e0a3582c053e7c","first_seen":"2026-05-25T11:10:50.037473Z","last_seen":"2026-05-25T11:10:50.037473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.564Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdZNGxl0bbJ%2FD6%2F5O44HiIRaS%2BqM69hRWdYXaRD5TxbSnPd0XfbgPlBLV%2FOcZxR3a2p9WHzmszd0MNau%2B90z9%2BGBME1VJzVxUEGtpIDwgEA7%2BWmUpF8a7RPqASJsm8HXLKnAVF7yEgpc%2BY8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c91fcf1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3iIbdoj7IfJW0ennKScNcwJ71ApBz1l8oNunRBLZmH1mr8%2F5bhgcqCFQjpZnQU1vaECnlaGR60I9bUWNAeuK3sUwT%2B%2BFIwmg%2F91Jrxd1NmJZESzqCP5GlyeLdYr%2FMrttVjag3X%2FPU%2FV\"}]}\r\ncf-ray: a01417cb7f671a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=EC0XSHq9fOHFO_XK_g","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=EC0XSHq9fOHFO_XK_g HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GgUZx1lYYMmhphZXmpQ0xoMD2JumfvNHvxN57wydUsxFn67vlxKn%2BOvE0VMrwUSLIyfYHVmC9i0RsSSVCzJPhUS1P0kitmrn3H83ct%2BdzngHBbQ1iyvVSYuzZ7P3Co%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d07a565685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"25927473719860f1913377d22945fae9","sha1":"f04d8a49d6cc0c3eca01ae35d963fd5e8365777f","sha256":"1f06450a42a63cb969629350431c5ce2608d6c8be41b8eb1424097e2b95fa20d","sha512":"3b60c932af78c5957d7ea7e6a46b1b236a1af5f8d722875270f45469a35c8e91e08e8f7a165899961bb90993c31bb1b4be38a4799fa6d0ec548e928e848d1ddd","ssdeep":"","tlshash":"f9b0123e07c4e1575419829b94750e0a7f3e8062bb14165d1281313240126d3c210470","first_seen":"2026-05-25T11:10:50.039484Z","last_seen":"2026-05-25T11:10:50.039484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/94/Cloudflare_Logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 05:51:37 GMT","end":"Sun, 12 Jul 2026 05:51:36 GMT"},"fingerprint":{"sha1":"62:23:EE:89:97:A6:C1:A5:65:7A:8F:23:C2:68:CA:70:93:B3:AA:FF","sha256":"5A:21:64:0C:22:9B:01:A0:D2:BC:CA:02:4F:E8:51:ED:BA:CC:51:27:0E:87:6A:6E:E6:0D:88:64:AB:D1:3F:30"}}},"request":{"raw":"GET /wikipedia/commons/9/94/Cloudflare_Logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 07:02:04 GMT\r\netag: 05982e81981f0f4d317c59d3008727fc\r\nserver: ATS/9.2.13\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: tqzc3404i3b6qqllzyx20sg0c8awofx\r\nlast-modified: Thu, 25 Nov 2021 22:52:08 GMT\r\ncontent-length: 63290\r\nage: 14896\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/63\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=M0dfb0b9D9yQvcmsQFjJ6QNrAAAAAFvda8LpqUewt26bYspXDuqbRMvCcrf2t6ej;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Tue, 25 May 2027 00:00:00 GMT\r\nx-request-id: fa463342-1f50-4f03-95ec-ff3457a3ad2d\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 1368, 8-bit/color RGBA, non-interlaced","md5":"05982e81981f0f4d317c59d3008727fc","sha1":"feae211bf6d65d064a33c7a87d46ee0b7c616dbd","sha256":"c3916862cfead3af678d0fe7cfcc90cdf69713c1d95bdb988320ffba20a57f0e","sha512":"3c7372405356ad6835968c2c227614a45cc3bc2f7296ff7dd8db5b979babb119aded114cb97a3a55774e05754ae22c7a2df03ce1eb71b65cb6261059388dced1","ssdeep":"768:k2L/oWPZzSgt4YwA0GUHz+sCoFEjzPQYclFK0flKkVFHoJfs/Ryo:km/LPc0wA07HZFEHPQYCFK14HoJq","tlshash":"9353be4acb59227bb5510019b7a3689398b12c733001de1e5bc7b46f5b07fb0ee72d92","first_seen":"2025-03-07T13:54:30.635821Z","last_seen":"2026-06-14T20:06:34.27607Z","times_seen":499,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":89,"receive":16,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=b-UMWvqKIEkanLQKmZ0","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=b-UMWvqKIEkanLQKmZ0 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1w0rwAM%2BHCoS3ewuvBguc4FbZ6AFt611bKKELY9nW9zoLdODtPLmptLFYBU%2FSbECoJDHmvUC28qz%2Bhb2D6qZUAXkfCnnebwYGWG5%2BeDKO5wDIyvNebhIrjfqeO1oi%2FE%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d4bab35685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d8bdd05de9987eb6f25d95268621d18b","sha1":"a093ecad839e06e586df0d3f8656c49f5ce4a77b","sha256":"c69cfe2cdefb5fce5a8897443a722e3570c556f57c450fdee4395a94463c95c6","sha512":"7bdef7fb33dda9d978ecbdcaeffe97b3c3caca6479a2738232c1e7c6045c1955235554046e6f0c5bed294f6a343fa7deafbc2fed54296f0d28f0dc601e2fc1a6","ssdeep":"","tlshash":"2741ebec1bb98e2817911368e4cc614cd39a341da2582736d357f7104bb47c4a84a7bc","first_seen":"2026-05-25T11:10:50.042233Z","last_seen":"2026-05-25T11:10:50.042233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAkgAl2sO3wR03hwR7XfJpbOQgILrdfBiDU3eC%2FIFFQnnJQuRF1il%2Fz29VmF7CiAGJslwVgWARbfaQnhqIdB5iGDM0YZkM4WP4PO1riVLzyYx3%2BLVutz3lYNv6ygLkU2fUJZ6WJEAx1K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c938631a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":13,"connect":11,"send":0,"wait":122,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.tenderly.co/public/polygon","fqdn":"gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST /public/polygon HTTP/1.1\r\nHost: gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 3\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 02:17:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e6b3a-1641\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 2438\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muZ3%2F1S%2FN7%2FKG%2FrsPkDyMt6RphXiae2%2Bg3Qmjs8uBs3ZIA6SOiTsTWQybIhyFyeqO5q3FpWsTLKrz8VD%2FPWsv3dZKBoSFXTvr%2BU3NQWMnca7qWepbRI1x6YXdVClluAhis1U1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-06-17T07:32:57.81274Z","times_seen":17504,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/fonts/titillium-web/NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/fonts/titillium-web/NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thequickkicks.com/wp-content/fonts/57733dd52b2ea1b840c4c6de7d90aaa2.css\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12372\r\nlast-modified: Sun, 21 Jul 2024 11:36:59 GMT\r\netag: \"669cf2db-3054\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://thequickkicks.com\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WX%2BjkiCnVqjJJBkpZ7Zy%2BO81V6wOjBdSN%2BiTPSXIEb9wwhGM4UZvciqxURMc%2F4RrtU1QgnKIFeNrS6IG%2FFe1P8CWmqbRlIKYQzC3DkJlc11scuyGgbqvE2CvJvDDbPOSo5UZXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c7b97d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12372, version 1.0","md5":"0ef99cf07a2a261ab43d5dc1937ffb27","sha1":"bd39f9cd13ef2a6f912dcba8fa916fc67b4a19d9","sha256":"557f6d0883db85be712c3a77baa38875ddf99ecbdfd6fec98e5c0b1f7a0e1532","sha512":"551e515e7e259e993566dfd8105905afbea27b1e628a0b459a6d7d1d52f1ff927dc0a4c10eeb62f7063e1848ddb3c5139f6ed206efef0f2005e609a9a3c854ac","ssdeep":"192:OzHkibZ4khg+uAoBXJUH+uO+SIeFK48oPDZu9n6eH6CwDuz1RvpEw+T7CXjl:Orkid4QgrpJ6Rjk/pZu96eH6CuuLAup","tlshash":"e842d08320d4b935d713aeb02d38e594181e1b4b3edcd1a5f4c8b98fc9929ad5b487ec","first_seen":"2023-04-23T07:32:13Z","last_seen":"2026-06-15T19:51:31.925964Z","times_seen":3962,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://thequickkicks.com\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a01417c8ce70b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":36,"dns":24,"connect":1,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: Cached\r\nprovider-latest-block: 87410119\r\nlava-guid: 7804552900313665961\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Mnh9vXxmt9NRJ0QVln3pWYbncbmaxbBQ98xxGuloVJ4-1779707419.2716396-1.0.1.1-0tXcApXv0g5W6C9aPQlbOCfsUUcw9XZhGOB8la8rDHK4Hx9UyiWujdndzdeI.vSn4NUze_qmYXhDgMDGWDmYpW2EnS_.P2l1pvgtNW8bKNY4.oxWTrZooQEuF_p2i8Jx; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=jS8usulKVA79BbPzrzjspd6o3utwWVYFNIVylptOncE-1779707419.2716396-1.0.1.1-kNPOTADcVFTlwu6PZMCMsQKW34NpkUiEaOBYb1DuSyo; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417ca7f040b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBW7g1On9gGRyFG4ctlE6iAoHwZhHIkeT%2FUZ1shdRuiZU1iM6sClBRbe%2FD0lZvpAmlpsdqSEunH%2FW9KQ8YZ61LZtqc8%2FjW37v4hd%2BAKPv11S8YtJZnLFkiSepGHZoKnOHEUEHlwLKvvN\"}]}\r\ncf-ray: a01417cb8f9f1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\npriority: u=3,i=?0\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a01417d03d02b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjkspS2MXL9CgVBIoPEAE1eH6CWoq6kA6zB2KTvTDSbHwhc8K0BQ2V6Wi4eIOdBEsKTJHOIISFlu5nTwRUFXfRgvWQjGYxG3NUVDfh1ErKsGZH4r623v8W43ci9rDLMjL79ll155CKcaP7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c90faf1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 15281d6d198fa994eeb9df02c5bac6a4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417ca2fb5b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: lava@144lcz84eryhpqs3vzvcgtvwhkevhsyd8a6a7u5\r\nprovider-latest-block: 87410121\r\nlava-guid: 8744020422878256752\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=gixRW.hy_pPkzme6TPy1iB6JX68aCLXMnCwF.5lzC3A-1779707420.166594-1.0.1.1-w_gut6AWNnWG1avVLan8xJDr43TpZwJG_E4dGsC7Z7Hbw6RbBMDcgTsVHlUasn8RC1L6_B8hexIeCx3rxugBe18JJvUb5UlKQEF9caQqQ5JTxvFxiROkiuB5gcecn1iS; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:20 GMT\n_cfuvid=cEl0EGcXXAXN5ykQ2Lkk2p3a6EXrzuRF4Pi2VqS._Mw-1779707420.166594-1.0.1.1-gcLrF4TOvlEmP3Y.UoEln1qhgveVUX_4ff0Y3_bgnCU; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\npriority: u=3,i=?0\r\ncf-ray: a01417d0080e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/94/Cloudflare_Logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 05:51:37 GMT","end":"Sun, 12 Jul 2026 05:51:36 GMT"},"fingerprint":{"sha1":"62:23:EE:89:97:A6:C1:A5:65:7A:8F:23:C2:68:CA:70:93:B3:AA:FF","sha256":"5A:21:64:0C:22:9B:01:A0:D2:BC:CA:02:4F:E8:51:ED:BA:CC:51:27:0E:87:6A:6E:E6:0D:88:64:AB:D1:3F:30"}}},"request":{"raw":"GET /wikipedia/commons/9/94/Cloudflare_Logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 07:02:04 GMT\r\netag: 05982e81981f0f4d317c59d3008727fc\r\nserver: ATS/9.2.13\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: tqzc3404i3b6qqllzyx20sg0c8awofx\r\nlast-modified: Thu, 25 Nov 2021 22:52:08 GMT\r\ncontent-length: 63290\r\nage: 14896\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/62\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=Fttck8szQCGNuaOej8RWyANrAAAAAFvdnn9nSscGIABNBSqBoN1xEqIBogHPXPtM;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Tue, 25 May 2027 00:00:00 GMT\r\nx-request-id: 32d29a82-27ba-4064-bc9e-5b06e5a135b8\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":63290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 1368, 8-bit/color RGBA, non-interlaced","md5":"05982e81981f0f4d317c59d3008727fc","sha1":"feae211bf6d65d064a33c7a87d46ee0b7c616dbd","sha256":"c3916862cfead3af678d0fe7cfcc90cdf69713c1d95bdb988320ffba20a57f0e","sha512":"3c7372405356ad6835968c2c227614a45cc3bc2f7296ff7dd8db5b979babb119aded114cb97a3a55774e05754ae22c7a2df03ce1eb71b65cb6261059388dced1","ssdeep":"768:k2L/oWPZzSgt4YwA0GUHz+sCoFEjzPQYclFK0flKkVFHoJfs/Ryo:km/LPc0wA07HZFEHPQYCFK14HoJq","tlshash":"9353be4acb59227bb5510019b7a3689398b12c733001de1e5bc7b46f5b07fb0ee72d92","first_seen":"2025-03-07T13:54:30.635821Z","last_seen":"2026-06-14T20:06:34.27607Z","times_seen":499,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":42,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Apr 2026 05:21:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cdfcef-b83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 1031\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjC4aZC1Vz8xmWkpE33xK5tNzoHS8ma4mCI2uk0yyDqXR9SBJ1GICBsrMndolgawI0VKsNZ7OoMVrW1oozi1cfDL%2FwLWX3khc7BdeW7dQ2aFKYHNe5dZ8hhiTRhNVdebhq%2FElA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-06-17T07:32:48.807899Z","times_seen":132913,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/thequickkicks.com/wp-content/uploads/2026/02/download-2026-02-24T171657.912.jpg?w=225\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /thequickkicks.com/wp-content/uploads/2026/02/download-2026-02-24T171657.912.jpg?w=225\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13906\r\nlast-modified: Thu, 02 Apr 2026 21:09:44 GMT\r\nexpires: Sun, 02 Apr 2028 09:09:44 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://thequickkicks.com/wp-content/uploads/2026/02/download-2026-02-24T171657.912.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"0f48a9990430edbf\"\r\nvary: Accept\r\nalt-svc: clear\r\nx-nc: HIT arn 31\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5c2af1eb831e9c54dad882f36e727a8","sha1":"ee3520094133e64815c741bbbce7adabb833cfef","sha256":"bacfde638663dd5c7932bb79147e715006aea22d5b412210ff27ba85693bc9b2","sha512":"055e0eebdd2301047e2459d0461d6349d88e4fe3be569ef56e4dec226f8da9df5e32607081d53ca9d25f328e348c194151c1215b6522a38e37351e29d8998efe","ssdeep":"384:DD1dBcs1mILVFB5unNfO7IeZDiiJ5JJbJ1qP6ft4Vt/JwTONB:7BbcCVv5swIeoiJ53my+Je8","tlshash":"b452bf580958ff5769a707091e6a965bc9bea50c3b3fc5f718286c85fe0c0de903a0d6","first_seen":"2026-05-25T11:10:50.050276Z","last_seen":"2026-05-25T11:12:53.791368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":8,"receive":6,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.998Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a01417cfbfa17130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/matic","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 05:42:29 GMT","end":"Tue, 04 Aug 2026 05:42:28 GMT"},"fingerprint":{"sha1":"19:AD:59:BD:87:BE:FF:0E:C3:94:6D:87:DA:31:53:3C:B9:70:4C:C6","sha256":"DC:FF:05:18:D9:F5:7F:85:7F:F6:6F:AC:F6:11:02:4F:73:4B:5C:73:91:CC:F0:61:36:2B:A6:0D:12:3E:BF:82"}}},"request":{"raw":"POST /matic HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\naccess-control-allow-origin: *\r\nContent-Encoding: br\r\nvary: Accept-Encoding\r\nContent-Length: 107\r\nDate: Mon, 25 May 2026 11:10:20 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9527cf4b65b955dd3331afb8f054ac9","sha1":"08731596ff100efdff0a2d68bf080730474e1c2a","sha256":"5fb9480e8f21925a902c3006422cdfc3daeea608681574b15fbf23273b8db489","sha512":"34f5f3dad2b79f7b6e6e531d5f301242b498fa7a6f355e92fa5e3866b388508d3e95e3a3a38d40c288b2ad049c1d533cbb2bc7a90add06b62ec0d66634f23307","ssdeep":"","tlshash":"79c02be413ce193127070463250b320077d1dcc6c4433f046c1c00bc40c0245c213374","first_seen":"2026-03-21T20:15:30.727439Z","last_seen":"2026-06-06T20:33:07.720244Z","times_seen":508,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":3,"connect":161,"send":0,"wait":156,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.zan.top/polygon-mainnet","fqdn":"api.zan.top","domain":"zan.top","tld":"top"},"ip":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zan.top","organization":""},"issuer":{"commonName":"Alibaba Cloud GCC R3 AlphaSSL CA 2023","organization":"Alibaba Cloud Computing Ltd."},"validity":{"start":"Mon, 26 May 2025 02:31:24 GMT","end":"Sat, 27 Jun 2026 02:31:23 GMT"},"fingerprint":{"sha1":"C6:7B:1E:BE:79:E9:9E:E0:96:46:0A:3B:C3:33:7D:B2:5F:32:01:E4","sha256":"ED:66:F7:BE:9F:8D:4E:5E:E5:C9:D0:8B:96:E4:09:6C:08:33:35:99:F8:A6:71:6F:6A:F1:A3:1C:88:91:6D:B5"}}},"request":{"raw":"POST /polygon-mainnet HTTP/1.1\r\nHost: api.zan.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 142\r\nset-cookie: acw_tc=0a0ca97e17797074209634177e4d99ca7f32c7dfc8037a04f04e14c4e47c40;path=/;HttpOnly;Max-Age=1800\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST,GET,OPTIONS\r\naccess-control-allow-origin: https://biletors.cfd\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nzan-trace-id: zLx5PlY8U5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":142,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd9fc578c88ed10c68d89943af87fe0a","sha1":"6d180730b57bdbfbb1455dbf169461c0d5f840eb","sha256":"a967f31f4a55570af8a88c5e166802865241110f9ab32469ab91529093aeb912","sha512":"85b5613237dbc6a7ab8c7e75c5984866d88f9a8963fe29d6585d259ee2b2c4ad74a7bef5af82fac94d69ab219d6cb1cdd2ed084eb3a47f659c5d88834c278b14","ssdeep":"","tlshash":"b2c02bc25cd72f15866748119d49bf00e6fcac4650850e72446c085c10ce52d4c17320","first_seen":"2026-03-12T21:34:16.080688Z","last_seen":"2026-06-06T20:33:07.733459Z","times_seen":408,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":187,"connect":20,"send":0,"wait":22,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: a6993eb73e93a2c96990267afc45f3d6\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417d2589856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T11:10:17.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, s-maxage=0, private, public\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nx-litespeed-cache-control: no-cache\r\nlink: \u003chttps://thequickkicks.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2Bh0kJh6J0DTdDhuvfPavgP5c7UxB44lyzSNjzpdpi79ia3%2FlZnJpbWuSznxka8cxqVjwTHlz5q69iE1eziogHpQioLelNl4SNgW3g8tVpPEloBo2Z2ejQQrmlK3zwe1VYdwkQ%3D%3D\"}]}\r\nx-cacheable: NO:Cache-Control\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: MISS\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a01417bc9b52c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:27.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":96395,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9139), with CRLF, LF line terminators","md5":"3913b55fe6b46b2b4bdfa1149c9f182f","sha1":"07383b92c1d7d7728e56bc82341f563de3e7f994","sha256":"6d1e3f6f6649729fa1eceb5cb901e41703516511536d3470b7ce3df31d60786b","sha512":"21b7435c98292ba744d838c9f971597d2337d0411ef885e5a4cae27b48b6e037c3e25386d88d1dbfdb20f46255ca2590223960d45117770456555701f089e32a","ssdeep":"1536:XDlpPzypp30Gj86ReYz9DCCug6LJAy898HhWmYKxkz649BJueAc66nsBYHCJGr94:XDlpPeH30GjXRbz9ouyEE4v56IXu7c+X","tlshash":"57932933167964bb770a43da41b87b98e887db16cf0297d0f6f1e2a84648df748d131a","first_seen":"2026-05-25T11:10:50.053292Z","last_seen":"2026-05-25T11:10:50.053292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":36,"dns":13,"connect":1,"send":0,"wait":791,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/fonts/57733dd52b2ea1b840c4c6de7d90aaa2.css","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/fonts/57733dd52b2ea1b840c4c6de7d90aaa2.css HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Jul 2024 11:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"669cf2dc-22b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 591\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPb3V5BbL%2FXR1S1BG74W5MPjdbKwfHNyAyUha9wgexGWM%2FgcaC48E2ll70laFipl3ZxEADW8y%2BVEFd4IeZH24S9ViWaqK76fbPIJy%2BO%2Fr5FqV9LXVCox5HVnIfxf6Uy%2FhvE1VA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8886,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"550402cb3e64a15919529b6a563c72ba","sha1":"64e5927a0d2902a8c197060488ce9e64c78a7315","sha256":"295ae98d758e21f38c479c8cf98c3fbc479faf34870365d7b80157465c7f03bb","sha512":"7e57f160924d9b9b110f89ed893457dc0a9f597379bef357221ef4633d10f498c64b10b86c6afb45aea8df41b64674ed7d6b3e3cc882e0d5f984dfdbeeb83ec8","ssdeep":"192:piIAikltAlvkRAki2CA22pKApKbsG2X8wqWvIebkTbZ/pN:pwJwJVtWHlx65","tlshash":"f7028b810c3b2204eb8399c653ee3d76ce0d7614e099a6349ffe09a89cd7d6a93d471d","first_seen":"2026-05-25T11:10:50.055635Z","last_seen":"2026-05-25T11:12:53.789948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a01417c8ffb57130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":16,"dns":24,"connect":1,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/2026/01/images-2026-01-27T130300.042.jpg","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/images-2026-01-27T130300.042.jpg HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6023\r\nlast-modified: Tue, 27 Jan 2026 05:03:06 GMT\r\netag: \"6978470a-1787\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73205\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpsH6b%2BLTJuI0O13D7WdyQ9Ud%2Fh5hXmzBKhA9lqa1Yd3lgxMv%2BoPXkZKmUH3VrMrWGx5XKaXlsBQ5RV0GQxB4EEUgAXS47jtcDt5BWmK%2FpY17fQOnmF6gugoxgfUwN231G9WSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c8d9af783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"97890e388722ebb6a416a990322017f1","sha1":"083eec76d53d81962a3088ed8e82b9ed4f282277","sha256":"d71d578b7683b470c5c9379cac932f2f95e66477bcf82d87066663f324cc58bf","sha512":"83dd6873c405bf3440cdd4fa4c2500b7814b377c702ae874d9d6f602bfdb235fd84215aebe2b3d159d2b7daff04031822396965647ad54fac0f25d0843e2813c","ssdeep":"96:DwXzMVkuNl4Ht4/JBxACZXFdplBg6u3Dif1BGBdzea9t46p0octmftWnOlQ:vVuN4zWaXFdps3+94vDamftWOlQ","tlshash":"48c18e26dec11444f705d930166590a6f387a0d88f25c7963e284afdc7bfac56b0d752","first_seen":"2026-05-25T11:10:50.058089Z","last_seen":"2026-05-25T11:12:53.794859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/thequickkicks.com/wp-content/uploads/2026/01/Aztec_U-Shape_artikel.webp?w=1200\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /thequickkicks.com/wp-content/uploads/2026/01/Aztec_U-Shape_artikel.webp?w=1200\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 121190\r\nlast-modified: Fri, 15 May 2026 21:55:27 GMT\r\nexpires: Mon, 15 May 2028 09:55:27 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://thequickkicks.com/wp-content/uploads/2026/01/Aztec_U-Shape_artikel.webp\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"ea219e95e5280c41\"\r\nvary: Accept\r\nalt-svc: clear\r\nx-nc: HIT arn 31\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"937082963a043f7730f94c873a829126","sha1":"28dde525fe358831c2ed3c2b5896828927a2c93f","sha256":"5ff5987519609139b4205c900f729f38b3a7648242b1783e89f1eac56e7dd814","sha512":"83186f11d13acabd313e656288945aff3c6559144b7961f8d71169c43e643bfbf3d98b0ac9ef60b8deb88de73f9e2d3d2b69066ef17e30665e5493af2f0e3717","ssdeep":"1536:JjdmKgj7jIsdR9SvbHue6s8EFQ7cPQkp4uyqw2MtLA44/26MlhraknXs/xbmJXXJ:JcZ7vSrzSIv4HnpR4/9dkn8pqz7+Y15","tlshash":"41c302ac06730f95c9fe893a4d5360f828359ef35f3848de6601e5fb3365982536b06a","first_seen":"2026-05-25T11:10:50.060338Z","last_seen":"2026-05-25T11:12:53.796326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: Cached\r\nprovider-latest-block: 87410119\r\nlava-guid: 8347385637609878701\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=cEXRk0irOrS04eHxxS76V6p.psFMAbcsSxyfj0Eki3E-1779707419.1244035-1.0.1.1-8ySw0dx.WGDAgS6S4Pmskh6BoA7BLRCku8WtKdqvW4nSRuWSUJfRKFuZAuvhbOT9rW1U20evJ5fuE4UUNLE5Y_.lDM6Hguv4DGPZPO17dpcDTXKJcsBMfxo0tdz.v0sS; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=t1aqcQF68ymqh78LWWREDvk1nexcszpqJXfpoJg7d1c-1779707419.1244035-1.0.1.1-7VPhcc1NJjjuwLpmXB.VyDKEZ_VngIETE7TKOMZLk2o; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c98e140b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 1bc5429106be191b3cd441fc4e660309\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417d03e5756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\npriority: u=3,i=?0\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a01417d26d18b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njC6aKIT%2BQkkt0ZAlPxIo9Qf4FQh7bM0ESjBkJzJRopZmBBYDXQ0haSegBXHiASSH7b2m9xjoS66%2BieadUhVmohLDY4fYZ%2B3HQqlX3zrICq3n%2BObJJdvHfBs42tneIcY6nk7jB5%2F96px\"}]}\r\ncf-ray: a01417d04e191a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: Cached\r\nprovider-latest-block: 87410121\r\nlava-guid: 6873079560189372764\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=ImC_Ott7ilg60mLHECiX_go96.c26AmfdNWaGsDhi3A-1779707420.5467732-1.0.1.1-GKO8FHS6ZspjJ1vhww0YMzKXkviCJGu4klVV3b_ESaR_QJ1Dt8sWY4Z7jvlCSyCAysfoj97iroAXuKISGEkLfVnYQuBhC0.gAk6TueDC9XZ66pCs6s9pBTE_gjMAsUR4; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:20 GMT\n_cfuvid=E_AKQCtj2JYMLxiSql8fyDpmDWkjmbm7MJjpqIpqhjI-1779707420.5467732-1.0.1.1-hDuKeeTbM69Qks2FI21C6n5fP1V8CZm0SVrFGOnaNZg; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\npriority: u=3,i=?0\r\ncf-ray: a01417d26ae656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/fonts/titillium-web/NaPDcZTIAOhVxoMyOr9n_E7ffBzCGItzYw.woff2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/fonts/titillium-web/NaPDcZTIAOhVxoMyOr9n_E7ffBzCGItzYw.woff2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thequickkicks.com/wp-content/fonts/57733dd52b2ea1b840c4c6de7d90aaa2.css\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12136\r\nlast-modified: Sun, 21 Jul 2024 11:37:00 GMT\r\netag: \"669cf2dc-2f68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://thequickkicks.com\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSRP3CDnOFSY0376kWc6POEkQt0LXUaMzVWuCFHZpZjgfoQGX5R89%2B4IZ9gl8ogFjII06cYUyHKlRzANlkoafFPScvehjeGSHmgwcPGCxsuauxMHHrHn6%2B5dFjegHpUTU8XGew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c7c984783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12136, version 1.0","md5":"5d7c6bb8fd4fc992c54e596ab7433d5d","sha1":"35fd6e4c125235cb7f9aa6e297da4b64ae45b06a","sha256":"dd870101ad4e95d687a2eb734707b0dd7c20808f76d7be77a71a5d13cf99401c","sha512":"079fba13bd688618fad8c7087970ae9fca98868da66b341b43f60298711e91a93e50782d48ee99ce16df888aae461654b38a1ee6cc4b5c5bfb8589bbb0147c0d","ssdeep":"192:QdjErxHAt1BQzVZ5/Q/wDzvQomteMLgWsPajiRbaQv5TITWqERBxhtp:gE1HAtv+3QEQZtw8GsuTITWBRPx","tlshash":"a642be4a34dbe56ec127a270e402234ae7c26ef1f7744dba0747f015be9e182162677d","first_seen":"2023-04-20T14:56:47Z","last_seen":"2026-06-15T18:45:48.692814Z","times_seen":2618,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-json/burst/v1/track/?token=ped48ap\u0026_locale=user","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"POST /wp-json/burst/v1/track/?token=ped48ap\u0026_locale=user HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nX-WP-Nonce: 539fa80da8\r\nContent-Type: application/json\r\nContent-Length: 390\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":390,"data":"\"{\\\"uid\\\":\\\"223bf5623b5d1de07c7ab481f0abfac9\\\",\\\"fingerprint\\\":false,\\\"url\\\":\\\"https://thequickkicks.com/\\\",\\\"referrer_url\\\":\\\"\\\",\\\"user_agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"device_resolution\\\":\\\"1280x1024\\\",\\\"time_on_page\\\":205,\\\"completed_goals\\\":[],\\\"page_id\\\":\\\"0\\\",\\\"page_type\\\":\\\"front-page\\\",\\\"should_load_ecommerce\\\":false}\""}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nx-robots-tag: noindex\r\nlink: \u003chttps://thequickkicks.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff, nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nx-wp-nonce: 539fa80da8\r\nallow: POST\r\naccess-control-allow-origin: https://thequickkicks.com\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncache-control: public\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\ncontent-length: 45\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5OeLYnKmrAJo%2BOLcSBrjnI3BDcrWkT5%2BMIMdnQL9Zm9gWhDz4xk60gpexEfwPLdH54quDMQkgv3Zfy92WcsT9XMBdUdxds%2BemP%2Bfq8fv0l9q5eHIOShMB4hdTe6YVJu8AlbWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c919bb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"60a02e8712a4f73d79ded31a617e847e","sha1":"5d970d11d29c04743aeed740ddd6b15ef596643b","sha256":"ff15e552ea42fdb9f26888e168f3a9c4a5738187eeec3d047d5dfbb9fec2a1aa","sha512":"4b7519af18ac4cefa2638413eef86f0ad53ce8f3124d487126604ba4d8dee1e421ddc0ec347b04b12025bc5dbe2e5ea6ed551357c38ab2546c23875c0a5fc812","ssdeep":"","tlshash":"5f7000ab02e000ce08202300303c0a2020c800e08008880cc22828088a0a280b082808","first_seen":"2023-04-07T20:28:00Z","last_seen":"2026-06-16T11:46:42.198464Z","times_seen":432,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=nHbRfYVDFXiaEuD8P8s","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=nHbRfYVDFXiaEuD8P8s HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIx1BqEkx0UtQOoq%2BmeDH4K8DmQTa%2BBrDXybbWuAbPUDFROMuKfAEVef6Q4pnrlVcTnsdZkwuDsNMMNj8UkMqvp7OpK8kt38wyKKG50I6jNpOG8CdtzX74SkukowjjM%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d40aa75685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2090,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a20d5e10d0c43fc20387eaa917d00fdd","sha1":"9d599f48bfb51d6f94950cfc9c872000949afe09","sha256":"0ad4b57cf148f616c9d0b270515298bb5dd7f875abc3701fcc81e5cae093db37","sha512":"da914bdf81eb3ec572523e9654b04a605070a1d2cdd42bdff84ce51fc99d25b604ccfad9959c7806395e256b047b3207c94e97610b761ce1b91f5b96a676aedd","ssdeep":"","tlshash":"94411a4c4df78961d3d387ea00c054c0d1a3b8b971674999ba56ae58076c6d092affce","first_seen":"2026-05-25T11:10:50.064678Z","last_seen":"2026-05-25T11:10:50.064678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/api-fetch.min.js?ver=d7efe4dc1468d36c39b8","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/dist/api-fetch.min.js?ver=d7efe4dc1468d36c39b8 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 02:17:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e6b3a-1925\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 105\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 2815\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkZTJatuWKIJUNopyhVbCnHc1RmNK85Qljz8f0%2BDPB%2FwLNvUx1kI%2FaPtL9unUVdEllgMm5zrsIWLiGfTUQrl7hHOtzER7sU6NH0QkMSCcBU32VICibJJUs9e40PM1tcSCfOmdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288aa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6337)","md5":"38342d2c2caf2a9f130f7452df61b8ba","sha1":"7dfc7582d1947e6464af64bc1db7c5c42a66a44e","sha256":"a44a6a8793a015613aa791e9281bc26c1ba3f3eeb57166ac58b828fe307eec08","sha512":"906e0363e416fa7f25593777039ba0b55b1806096d0b4766c769edc27a7bfa552d982eb8b7e914dd13c0ed5850ae65826d662520bedc1c27ab75a1997c782116","ssdeep":"192:waeC0k0oNI/DPyBLTWSS56mXw6ECKSZVFy9:KCCqBPTS56aw6OSZC","tlshash":"60d1e8d536c3e26763be46d8e8bd0421f68b99ec846d8400f6e1ec2961e9409c473f76","first_seen":"2026-05-04T14:45:17.38781Z","last_seen":"2026-06-17T07:18:06.723775Z","times_seen":1199,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/2026/02/Cara-Masak-Nasi-Goreng-Thailand-Asli-yang-Wangi-dan-Segar-di-Rumah.jpg","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Cara-Masak-Nasi-Goreng-Thailand-Asli-yang-Wangi-dan-Segar-di-Rumah.jpg HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14150\r\nlast-modified: Wed, 04 Feb 2026 07:06:01 GMT\r\netag: \"6982efd9-3746\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvV7GeLL6ycmXjn0US1yUIBR3V02MohcNaJSzoIFLdG0v9AkydcwI4jF%2FVhtov8fi9PuzgKDJO3e0zbtqnrFZIWG8nXUuln4IWAnGNst8%2FTmNZp6d1XGY%2FIzSg8ua0i5JdVDeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c298af783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14150,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3","md5":"0f3d4f9da72ddc574df18e2135b18ec0","sha1":"bd751dd1c66ada1837e35519388e607d9001bd92","sha256":"7802e5cc3a0d0e6fe296b7af926b5c294681186699ac1f94b4ac56a32fa21bc0","sha512":"0c94f561b1fd068a6688c87526c0299d0ebab53629cc6679bb1770dc2e53b69982b5f983e034edb9677e0317a5293adc460fe6989039c1c1f8bc9ed32ee554a6","ssdeep":"384:5znud1VNKkfqvuVUixcBTKtBW4eFe1BjY8:5e1VXWubbts4s21","tlshash":"3d52c032be48e22bda67dd31ca5af887d2d15c18c4a64fe9403a25231339651ded9351","first_seen":"2026-05-25T11:10:50.069203Z","last_seen":"2026-05-25T11:12:53.793813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420083","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420083 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\npriority: u=4,i=?0\r\ncontent-length: 42\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5pbpX5Ot7p5dwmtAMtonOU1d0L8jpOAH75y8adIhFSjtvq9J4ZqRfXROotENZYSOUOEhNni53I9nhKWFeCzp96rdtyWyOTij0%2BeHsHJ1WyHvnIpB0712fl%2FlwN6GzQ%3D\"}]}\r\ncf-ray: a01417cfba415685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-17T07:31:15.754909Z","times_seen":951917,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tW5%2BJGXSaVI26hqvSmvgGe%2F86NrwueV1EUxBRBD7ZkhVRds8NHNDH7ZFZITJOZlNH5C5vZXA7KZa4TNZ4nAtwEAzLgdfhO%2BZTJ8NdHlDS%2Ffu62v%2F%2BmW%2F1zY9BgG8hG1vy3n7ztlGFiIZ3DQ%3D\"}]}\r\ncf-ray: a01417d27d1a1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/css/all.min.css?ver=6.7.2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/css/all.min.css?ver=6.7.2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-120a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 21498\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwEjoidxLtPKfblNwGixjYmw6PFGwR8qcVZFsA2QYEX%2BWD3mtG5rpykcgC2mL4Lr6U2MXodrpJCX1%2FUChjXR%2FlvuFcAlGRR7gHGjX9NQhOTu2RDN3JkaVYj5kFRvW3%2FjWbwqrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73890,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49899)","md5":"7441465cab20b640d4156626d19cc63e","sha1":"8230c4590eee915e9b587a08f6e593fb77fffeb2","sha256":"74005d7c17d4a02f2f25404ec0655d9bc2fdaa53166874c87d7b7eec69d9088a","sha512":"12fbfce0caf892a54644d4a02062ff17f6880ea41bef1436bdcadd230c5f8d38521fc09247b3c111a902af9d4293ec3efd4eacc14d889b5bd55f449593d00186","ssdeep":"1536:/bM1MvMaMfMRQZm0grfT/QypZhzZHpcjA691m:SlgrLXzZJ2191m","tlshash":"14730f12ad84019bb4568d7f3895bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-23T14:25:51.255422Z","last_seen":"2026-06-16T17:27:40.894623Z","times_seen":28254,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Apr 2026 05:21:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cdfcef-348c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 4265\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AS1yQjoASoZalXElipfiYnYQ%2BTFDJTzLhWAcg2CStbdH54ejq1ZDbJxkORHmxBZVlwpsQYUj4Q2K8Blnq7OPwWPWw%2B%2FJZTISUTRlWfUhuvMGwu06fTvT4qcvqWOsdEORY4R%2FRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c298b3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-06-17T07:24:09.008229Z","times_seen":209500,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 2592000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Pm7N69foRC3zLs8iX_HcUitSvByffX3qykatGetlhFI-1779707419.0199728-1.0.1.1-WYXUSE_gJ7ZR4jtT7rUzPTJNTIb46baerUWUJBd8AzknuGKimgHLqfYM81jBHzjGiWuDosy0Wz2jXJfVh3shkFu5lGXQ7yBAyXl9Aj8_u17ToPlgLll12ekRqyBZ0SR4; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=nEnvtlSBUhezf7uKptRo1lRVfgcbLcMjbrpDzf35SIA-1779707419.0199728-1.0.1.1-8mAdKxhIRVpI9Q4PUjrUFHVMcKrvC8gy1r4lOujKb0Q; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c8dd570b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rq5NSK6o9KU6j%2F%2FMeAxlnRAmvTgrtwRF%2F5eL6aPk4wtiC1UU1SZOERX%2BlCwo063OyETsd48UDgUSkbZkzRYeGo9VxBo5eA0gvVlvHwU%2B8Bj5E3gA8OVk3LNf7wJ61FE5LLWqtLeI0LJYMuo%3D\"}]}\r\ncf-ray: a01417cb5f281a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 2ab7d0ad2192cd2b03605cfad27c9bd2\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417cfbc9ab4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":23,"dns":0,"connect":26,"send":0,"wait":62,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420507","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420507 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\npriority: u=4,i=?0\r\ncontent-length: 42\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=039Pos91v%2B3K1WaGLpOTqww6Fb11o%2BoRsIENjW%2B0rWThqbw3Y%2BOdSIJ3I0U2jqL%2B9FYqGQJl0Fx7AOVcuIKXoVj3nWrbQHZyak4QhfkIxVy0xgBQO%2B2EMlXY%2FpzieMQ%3D\"}]}\r\ncf-ray: a01417d24a825685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-17T07:31:15.754909Z","times_seen":951917,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/2026/02/download-66.jpg","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/download-66.jpg HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9354\r\nlast-modified: Sat, 28 Feb 2026 14:13:29 GMT\r\netag: \"69a2f809-248a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnlIl7PiHnSpp0x9jjktCgomeIqftWvOxS80zp36FN2tYoiU0Aj%2B0KUi4gcHs7Odi%2FeDwTYUuFHNMxEPXW%2FG%2B5b%2FRJ0wDAifCgIKXC1AUq7olJqV8fuUHMIxZsWqEKfRJEP0%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c298ae783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9354,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 295x171, components 3","md5":"dc760843dfd680540e569f8e9ff82716","sha1":"fdbede399f5d6968689bafc5551c16f847158c05","sha256":"9c8394aa69d6eb5ca91eced19de2529b532b2a10e3f1139d5383f2320f407935","sha512":"cb50304f66f19b273552082690d225fa46fbf4457ba51f431243c6eabfe818332abe7fb79232af1e4de06e10a2290ca0e4c3368d9e48f28771d8b02a289035a0","ssdeep":"192:U+0z1ekI0TgP7/yrOHZapllhaFHxCWf3FiisRaugjOrr9h3U3+RKtUE4aWgB:UBRekPMP7/EO56lOC638ZRaugjONh3iH","tlshash":"5c12af93acd0ac56f568c2f0fa940082fb1b2517a094eefe63b7a6501010dca4a5d3af","first_seen":"2026-05-25T11:10:50.073952Z","last_seen":"2026-05-25T11:12:53.798588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: d2a5d6e116a72c9fb8a57333eddf86cb\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417ca3fcdb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 02:17:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e6b3a-1397\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 1799\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gy%2BESWxL111pFl9rKNxSeYz14sK23ObdJ5MPS15k24eI9qRoV3Cgo%2BN%2BfWGyvGziZ0uw1UaACVS4WCQmiM0o70p0Hwe4qvFWR5XlUqbm5t%2BwGX2yOrbLy9Ct8MhGnQlW92J1mw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-06-17T07:32:58.021125Z","times_seen":17850,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 18eee799559a6b692b2887fa511f3d3c\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417ca5fe5b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npKMCUffGc01rAcXVDg9ftJaj3bfxonMdxAD3uZ3p%2FVUsvoTxtjacEenPVyQTteg%2FU5%2Bp6ztM5KtUDuSRdsb2%2FhXRx1vDnuRa%2F%2FU%2BDdslEkAdlp6f0ARAzGO6d%2FVX2p2VoN6D74HlnK7\"}]}\r\ncf-ray: a01417cbafd31a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /?src=thequickkicks.com\u0026r= HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 02:09:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7heHr8VNdbykHb0gjDFCqQ%2FYjdC9zUtZURAvAVTvFh%2BGLv2TR6ZVa0bYfscU7I%2F8fi1WsJeYO1BmMZ3SDir6wbaugHx%2Ff1hvgJ%2BvOtvPIwZS5JB1Z22oZThqQJNr5Q%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a01417ce2d7b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19984,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (19848)","md5":"0b16254c45961029754f5eba985b6e79","sha1":"51edb26ed51ba78bc3cfd5fd7cdabbccca192a5e","sha256":"52692906d65bfe7956a351aa1baf947da8e3ffd38d7d0d89d5bf8a4e6ab6afc6","sha512":"d5f4e7ac849cd9a783425916745975f445bdb9d16993d1b5496768a4b9e9721a4ab89298b401b72095cd2d342d7171e497dee8c86261d8fd3c82a88df58da802","ssdeep":"384:3+f8o/zTGQTswxoMAG5HXS6/M/tKK+deVju3pSpr9UMBt56iyIer1K8kmg4KkC4Z:Of8o7isxoMr5C6/6tIquZSpr9VBz6nIU","tlshash":"03926c607f1d62cc0b050fba8ea63006d2d1772b72afc6bcbf576e05580ce6a7495647","first_seen":"2026-05-08T20:18:15.046038Z","last_seen":"2026-06-04T17:45:47.343271Z","times_seen":159,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":50,"dns":13,"connect":4,"send":0,"wait":68,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\npriority: u=3,i=?0\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a01417d00cfeb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420121","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420121 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\npriority: u=4,i=?0\r\ncontent-length: 42\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0xdNeEqt6wgxHjCUyI07oxpQValBIDJFJwshBXHFB0U77hP7NOudZ9ZLLOsptaa%2BKDoSAm%2F20xFB3kc8wwLA%2FlvoOk3rIuWOxrfAmiXzq4sfPn0qYXpnnlRJCYB19o%3D\"}]}\r\ncf-ray: a01417d03a4d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-17T07:31:15.754909Z","times_seen":951917,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=O-HvwLwckdrQcWEsaw","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=O-HvwLwckdrQcWEsaw HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBBLX%2FTeVNBZaQkUQYx1O5nf%2FELfNJVlulMU%2FlJ5ddgOgPnrkzpdVxdsCUopCasKRyUr585OuXcAvifyhKX%2BXW9%2FjX2M8PepiRfgPQA%2B7%2Fjzhh51YpCqs7AmFQotoyU%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d2da8d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e6e068dbeb26d24034fe094a57e447fb","sha1":"3d9720f017658b19e4f67c541dd4cae6d329784d","sha256":"4d3b8da03ca92991859a2032c9b0f3398ddcdac6102202ae227918e6a9729d8f","sha512":"cbd69a79b39189fac0f43aa3d8acaa69fbc997f139facc8c8b6d9c5874152f1f63f656d3f10fe7c06199a1d36ed7ddfdf361d789240b8377e833cd0a357dc904","ssdeep":"","tlshash":"2ab012a412b88f3a7a8dce080adc66415b31e0505bcc1e5c817cc350497d4824d4de30","first_seen":"2026-05-25T11:10:50.078229Z","last_seen":"2026-05-25T11:10:50.078229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /cf.js?v=2 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Apr 2026 09:33:14 GMT\r\netag: \"6581b-64fb8c1302a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scCxLH%2BcNNSHgCUrIf9kmOFyths%2FN89OX%2FzrCzGVMYnZgswacR42nhETRyMlFYDCOu3JxM%2B2fpUHJrG51XRyPU3vUFmQkVwVLAFBFZyoFJ5shUfMdvGYSmGu36NvDp4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nage: 7531\r\ncf-cache-status: HIT\r\ncf-ray: a01417d2ea8e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415771,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55100)","md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ecd5ef-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 30419\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0py1cEUHdTHNEaUvutsdjDjsTuqXerG88Siiaw4fLbZM3E8FYaOlCVotZLOgnNaTyGnUJnID24H8vL%2FAysEtCTensZeO3i1EqEGsIH8ss3sf00UEEl76pmTyfC34DISciHQqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288ac783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-17T07:30:54.173905Z","times_seen":911234,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/2026/01/Bisnis-eSport-Dari-Game-Hobi-Jadi-Karier-Serius-dengan-Cuan-Fantastis.jpg","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Bisnis-eSport-Dari-Game-Hobi-Jadi-Karier-Serius-dengan-Cuan-Fantastis.jpg HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14199\r\nlast-modified: Mon, 19 Jan 2026 20:37:51 GMT\r\netag: \"696e961f-3777\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73205\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewO%2FkMzsJRfrpeUFhuJ1z7WCjM%2FVR2fwyn24k1LgG3IBc1CajNouoJuM2ZTqxQjyjgtn7NLu9o4%2Bpl0d2shKDUVz87B82tvAhgtb3uIfCkgrqGfrapCso9SI69yRT2TdxVIW9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c8d9b1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"05819f14d0beed77ffe63a71bb418bed","sha1":"df7a0a64facdd48a43109778603da7cb8e7f63cf","sha256":"3cc19fa8a0d71b8905a091cec83a13440f6734f5b49dad3381bc92779169d8ae","sha512":"a2c1f39a93aad0e014e0b71c204d9d6b09db51ffb7bbb91cb495f0f3db63f369f7752346b36b28cef5225fa36a0cad113b06e8ab80a114caf81511759c7f3a04","ssdeep":"384:DPeZ+41zEs6+MNm91FaZEEG4XSRTK4tyZMWP8W:6ZR1osHL9+1JXzMbW","tlshash":"e452d0c0ce46a0359d00e7a3de42975895e4053ffc9662ee8ec158af0a6797c5c3dadc","first_seen":"2026-05-25T11:10:50.082292Z","last_seen":"2026-05-25T11:12:53.803455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a01417ca99de7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c39c48112581130f9ac989967d4f93e","sha1":"862f075cbfde63f6aac8a47266be82fba78a5fb2","sha256":"fd2ad1f874c8d6c302850566aa841b612122a618cabc65ea4d3fc50a8a2e54db","sha512":"b97ba8ee87b06c5314815615d39ae5c7b0566b1c3e05ecf51986b225076123ff1bfb0e266be229e9dce8dc595fb520e2d590ed55074e7c767dc08ab05bd6f826","ssdeep":"","tlshash":"a1d02280208f0333c28c8c02f20c300020003f2f8ee00e00028c000003cc2aaa2083fb","first_seen":"2026-05-23T08:50:42.398672Z","last_seen":"2026-05-25T11:12:53.792684Z","times_seen":38,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=gEoL85qt0GPlFvjQ6Q","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=gEoL85qt0GPlFvjQ6Q HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2Bb7Mju0W4JrO6B8li2YJv9Mtgk0OTZWH9zjCXTjNkM2ROoIhhIeodsl4SnKAiiSpP%2BARgXy3lkXijKcnU%2BVXbq5W0IsmhCY8HKByE2BcBSzvgne2gV1C1R49yxzAHU%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d0aa5f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"921556f081a59554c12ffeb2d3a64526","sha1":"e56717a9cb84f4c87b28bb6d866ca557398ea852","sha256":"f891b31917b5d7610e6a70167fcd3ad3473159c504fa6bf377cf28275188496e","sha512":"12d42f9da19c0e1aff735991a96391a118322758e54e338c82403414f779e8011dc15d26050d74267930e9d0e46d6ef1db6ce4551e4190b33e6046be94eea8a6","ssdeep":"","tlshash":"90b012742f0acf7024210a00040812268e1b3c3d6ad9028a0108071514d0615c793871","first_seen":"2026-05-25T11:10:50.08468Z","last_seen":"2026-05-25T11:10:50.08468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420105","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /log.php?t=pageview\u0026src=thequickkicks.com\u0026dv=desktop\u0026r=https%3A%2F%2Fthequickkicks.com%2F\u0026_=1779707420105 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\npriority: u=4,i=?0\r\ncontent-length: 42\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5S3mzj4MWEJYmQGKF%2FJEimG4HsIMY17FAj3LZ4vCBkpfhay%2FYekRkDZyBEU9tL%2FqIhDfBSnMxa4vNbNHkAUAD1LsIV7GmEBfNHzIoBp3R3d%2F1tm5Dn8uAyKXjKFcew%3D\"}]}\r\ncf-ray: a01417d00a485685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-17T07:31:15.754909Z","times_seen":951917,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/navigation.min.js?ver=1.0.2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/js/navigation.min.js?ver=1.0.2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-5c6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 599\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDB7131DoDMxVPhdOVXhXx4urEdfyZkQRcuhx%2Fx%2B5ep3fX8yDYQ0zOfBWXoAcC%2F2D98%2BkLYA0o%2BmUBedwVP%2FpDe4VSlQh0ZAslaM9bX1NnpMhIJrUh4mW7IMk6Snpao%2FeffD%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c298b4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1478,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1478), with no line terminators","md5":"e989ca82dcbfbb13ea142424077c05d9","sha1":"ba4fa7758b4e1f8439eaa44fe10260697ed8200e","sha256":"bd7e9705573e01d301efe30f1dc3c4a488da6e7f65f23940e80bb819f029bfd5","sha512":"ad433664240d0b6dd12567ee36627d15102ed9abc946bbc80d5cb47965d0d3bcdbd8d5fad9b6d7f4e64700a14b2e855d36e2062213f2b207abee4041652bc219","ssdeep":"","tlshash":"c431cfbf298036b71ace31c772e295803a7320955885441155b6cc4b1a34de245b5bf8","first_seen":"2023-05-09T07:18:58Z","last_seen":"2026-06-15T20:57:22.338213Z","times_seen":302,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/fonts/titillium-web/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/fonts/titillium-web/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thequickkicks.com/wp-content/fonts/57733dd52b2ea1b840c4c6de7d90aaa2.css\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11796\r\nlast-modified: Sun, 21 Jul 2024 11:37:00 GMT\r\netag: \"669cf2dc-2e14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://thequickkicks.com\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LcDLCX7mFwgnC46oguijcioEeuMYsI2SuG74sJfvoahVsp08%2Bnba%2BpWkPEru1USEo6LmHZl%2BMLquwaHbUeXhAPy3aWYbpZB1iqNZYzQNT80C7P4XK%2B9YIpRELHBR7AAOtIHwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c7b97c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11796, version 1.0","md5":"8d4079c3aa4f01e6d9bbd4f1bbcdf114","sha1":"52ab47c062d0bfdbd34dbd31784008bd0e4c4227","sha256":"d5c1172f24f4f49f780c65cf5be897527fd08f3662a2ba8db0cfe0057d92e367","sha512":"b88062412ab83f3e77d74258689c07b66f3af3f934bf9823b6fc860b21eab4f24c5cb0ce88517da9c466ed9e0ec814d6d6e8ed9455615d969cdb4e330e05bff4","ssdeep":"192:OeUmVx9GqKSPP7AFAXxTrrwImSnZLNpjL+QbsEN2kiU8YWeYO/g94ZQv:JUmVqbAXxTYWZpYQIEry/QQv","tlshash":"a132cf08cd4f231fa98585b942c44fe5dd16698cb20c3c4fa8c975a1b3b7df92491f99","first_seen":"2023-04-11T10:14:19Z","last_seen":"2026-06-15T19:51:31.907496Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webanalytics-cdn.sbs/i?d=thequickkicks.com\u0026ip=96f60706f79d99fcf2a985d25eb67731\u0026r=\u0026m=pageview\u0026u=%2F\u0026l=en\u0026dv=desktop\u0026br=Firefox\u0026os=Windows\u0026f=325ebe20496fe3d9\u0026t=1779707417","fqdn":"webanalytics-cdn.sbs","domain":"webanalytics-cdn.sbs","tld":"sbs"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.959Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /i?d=thequickkicks.com\u0026ip=96f60706f79d99fcf2a985d25eb67731\u0026r=\u0026m=pageview\u0026u=%2F\u0026l=en\u0026dv=desktop\u0026br=Firefox\u0026os=Windows\u0026f=325ebe20496fe3d9\u0026t=1779707417 HTTP/1.1\r\nHost: webanalytics-cdn.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"webanalytics-cdn.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"webanalytics-cdn.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a01417c91fd87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":81,"dns":7,"connect":2,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a01417c8ffbb7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 2592000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=fOxkkg_VQTeqnFk3HhCPMOfy7F1gfyVgycvivYv3CTc-1779707419.0535781-1.0.1.1-vGT65MLmpZvrgbgcNIXIb0mtP.JZocOizpUsLFlB.8UBasTJ_YDfTeCgfcRhIfaNn7JFhg3AN2DYahaNFBqUT3649H9mjstwo1BnJwiGPCz8gFT34euDr1CVfuYaWKVK; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=e6eGPGpl0H75nlt3rhgrhuWToeHJG.O0eVYEVZeXF28-1779707419.0535781-1.0.1.1-DFnqqOuuwTBWrfVl6ZIRd6ADvf4qWG09R26rp_V9qNI; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c91da40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":56,"dns":7,"connect":1,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://thequickkicks.com\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a01417c8ce72b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-includes/js/dist/url.min.js?ver=bb0f766c3d2efe497871","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-includes/js/dist/url.min.js?ver=bb0f766c3d2efe497871 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 02:17:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e6b3a-285f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 105\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 3875\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVss4KB6QCh7QXXegLVyE1ZWL8AM%2FfhPNW3Sp6OTejXrCf6UIkgpTqzD3iWGBD7tpsceVtGDvNuR56RVVrQKdsOTCuFV4kW2diCNfSRyXNfRkb8nYY6Bj2omUePY8Tgb3sFh3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10334)","md5":"4aa4ac645f553ba863c940a9f60ceb4e","sha1":"8508d1d4ee58d82f93b553fe5d2782c7e5b62378","sha256":"f01eed02a2df74d6bd798890b905dc8147c381cfa35e0ac9f5d77d12f1093b7f","sha512":"9cbd9ebf7447d66b70f0007e12724bc24b879eb8ff7116a25286aced3d75b3461b33f83bd57b2317cfbe3e0e34b9dc50628991c2c69892813ef3ea6f943c2367","ssdeep":"192:3NkT4xiQTYTXgGh1SZAp4N3z2E3OtSAw1NNvgzE9JL8nYTAxinbZhXl:3O/QTwgKi64d2GOtg/4E9JQnKJnTXl","tlshash":"412212dd32b320c59fb65d51dd75d1daa17b0fb2046a00449bbf79d02a221ace383a7b","first_seen":"2026-05-04T14:45:17.370354Z","last_seen":"2026-06-17T07:18:06.734575Z","times_seen":1349,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Apr 2026 05:21:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cdfcef-30e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 3503\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWBng%2BfhkEVKx4%2F4m%2BsR1uaKz5SB%2FAlmF%2Bjlws2fJi%2F7ttUyS7F5iKfZ2lkKz3XSwNXXHfn%2BQcOyEaDbT%2F2mHLsSiU5lrvy%2BrRiDd4n9JgsR9BghWMd7rX7ZvadUe7nwZLus1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c298b2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-06-17T07:24:09.129234Z","times_seen":202044,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://thequickkicks.com\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a01417c8ce71b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /?src=thequickkicks.com\u0026r= HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 02:09:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQ%2F%2BmlXLkF0g6xwlpKHAGy1rR992Ii%2FHi4%2BNxl67KQ8uEEV0fLlbAdL6Y7aqp2SeAR280lHV9mOunab5BOhmKr0%2Bmn%2FDn2h%2FDNZOHz9pyKg5focUAeVr4HvMEV84LrQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a01417ce2d835ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19984,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (19848)","md5":"0b16254c45961029754f5eba985b6e79","sha1":"51edb26ed51ba78bc3cfd5fd7cdabbccca192a5e","sha256":"52692906d65bfe7956a351aa1baf947da8e3ffd38d7d0d89d5bf8a4e6ab6afc6","sha512":"d5f4e7ac849cd9a783425916745975f445bdb9d16993d1b5496768a4b9e9721a4ab89298b401b72095cd2d342d7171e497dee8c86261d8fd3c82a88df58da802","ssdeep":"384:3+f8o/zTGQTswxoMAG5HXS6/M/tKK+deVju3pSpr9UMBt56iyIer1K8kmg4KkC4Z:Of8o7isxoMr5C6/6tIquZSpr9VBz6nIU","tlshash":"03926c607f1d62cc0b050fba8ea63006d2d1772b72afc6bcbf576e05580ce6a7495647","first_seen":"2026-05-08T20:18:15.046038Z","last_seen":"2026-06-04T17:45:47.343271Z","times_seen":159,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":56,"dns":15,"connect":4,"send":0,"wait":606,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /?src=thequickkicks.com\u0026r= HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 02:09:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TK5Ub3U8dap594R8Vcoxj9vehkoOLxGZgo64i4xCTiy5M6WLZpJkN8YxeUEJckj5kW5borCNs2yxQqcureLtDSrPRjjHcqQa%2FrBF7LnyiCPS5%2BMyC7tZ8p00kQeJDUM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a01417ce2d8e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19984,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (19848)","md5":"0b16254c45961029754f5eba985b6e79","sha1":"51edb26ed51ba78bc3cfd5fd7cdabbccca192a5e","sha256":"52692906d65bfe7956a351aa1baf947da8e3ffd38d7d0d89d5bf8a4e6ab6afc6","sha512":"d5f4e7ac849cd9a783425916745975f445bdb9d16993d1b5496768a4b9e9721a4ab89298b401b72095cd2d342d7171e497dee8c86261d8fd3c82a88df58da802","ssdeep":"384:3+f8o/zTGQTswxoMAG5HXS6/M/tKK+deVju3pSpr9UMBt56iyIer1K8kmg4KkC4Z:Of8o7isxoMr5C6/6tIquZSpr9VBz6nIU","tlshash":"03926c607f1d62cc0b050fba8ea63006d2d1772b72afc6bcbf576e05580ce6a7495647","first_seen":"2026-05-08T20:18:15.046038Z","last_seen":"2026-06-04T17:45:47.343271Z","times_seen":159,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":53,"dns":25,"connect":5,"send":0,"wait":65,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 21cfdada8ac5009e7d4fbb173477d4a4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417cac84db4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.zan.top/polygon-mainnet","fqdn":"api.zan.top","domain":"zan.top","tld":"top"},"ip":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zan.top","organization":""},"issuer":{"commonName":"Alibaba Cloud GCC R3 AlphaSSL CA 2023","organization":"Alibaba Cloud Computing Ltd."},"validity":{"start":"Mon, 26 May 2025 02:31:24 GMT","end":"Sat, 27 Jun 2026 02:31:23 GMT"},"fingerprint":{"sha1":"C6:7B:1E:BE:79:E9:9E:E0:96:46:0A:3B:C3:33:7D:B2:5F:32:01:E4","sha256":"ED:66:F7:BE:9F:8D:4E:5E:E5:C9:D0:8B:96:E4:09:6C:08:33:35:99:F8:A6:71:6F:6A:F1:A3:1C:88:91:6D:B5"}}},"request":{"raw":"POST /polygon-mainnet HTTP/1.1\r\nHost: api.zan.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 142\r\nset-cookie: acw_tc=0a0ca97e17797074209584174e4d99af18c1c3e949cd01a4261f742a297417;path=/;HttpOnly;Max-Age=1800\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST,GET,OPTIONS\r\naccess-control-allow-origin: https://biletors.cfd\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nzan-trace-id: SRWE7Pveao\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":142,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd9fc578c88ed10c68d89943af87fe0a","sha1":"6d180730b57bdbfbb1455dbf169461c0d5f840eb","sha256":"a967f31f4a55570af8a88c5e166802865241110f9ab32469ab91529093aeb912","sha512":"85b5613237dbc6a7ab8c7e75c5984866d88f9a8963fe29d6585d259ee2b2c4ad74a7bef5af82fac94d69ab219d6cb1cdd2ed084eb3a47f659c5d88834c278b14","ssdeep":"","tlshash":"b2c02bc25cd72f15866748119d49bf00e6fcac4650850e72446c085c10ce52d4c17320","first_seen":"2026-03-12T21:34:16.080688Z","last_seen":"2026-06-06T20:33:07.733459Z","times_seen":408,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":752,"dns":0,"connect":23,"send":0,"wait":25,"receive":0,"ssl":527},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4K%2BbJachd91I31dpJ6nrWiowqzNiMKYKsRt2%2F24FJ238TVvQFxAurvSAR%2BN90sLRZ%2BYEOpbyfY%2FyzwQL3nkr1GlakKu7IlKNCpYbRnYjJlj1JDmCedJxYTCty377xboHabQTcezSnyO\"}]}\r\ncf-ray: a01417cfbc6b1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.zan.top/polygon-mainnet","fqdn":"api.zan.top","domain":"zan.top","tld":"top"},"ip":{"addr":"8.211.50.56","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zan.top","organization":""},"issuer":{"commonName":"Alibaba Cloud GCC R3 AlphaSSL CA 2023","organization":"Alibaba Cloud Computing Ltd."},"validity":{"start":"Mon, 26 May 2025 02:31:24 GMT","end":"Sat, 27 Jun 2026 02:31:23 GMT"},"fingerprint":{"sha1":"C6:7B:1E:BE:79:E9:9E:E0:96:46:0A:3B:C3:33:7D:B2:5F:32:01:E4","sha256":"ED:66:F7:BE:9F:8D:4E:5E:E5:C9:D0:8B:96:E4:09:6C:08:33:35:99:F8:A6:71:6F:6A:F1:A3:1C:88:91:6D:B5"}}},"request":{"raw":"POST /polygon-mainnet HTTP/1.1\r\nHost: api.zan.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 142\r\nset-cookie: acw_tc=0a0ca97e17797074209614175e4d9937e0f712a08205363aac8461690a4443;path=/;HttpOnly;Max-Age=1800\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST,GET,OPTIONS\r\naccess-control-allow-origin: https://biletors.cfd\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nzan-trace-id: VVXt7lSCEr\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":142,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd9fc578c88ed10c68d89943af87fe0a","sha1":"6d180730b57bdbfbb1455dbf169461c0d5f840eb","sha256":"a967f31f4a55570af8a88c5e166802865241110f9ab32469ab91529093aeb912","sha512":"85b5613237dbc6a7ab8c7e75c5984866d88f9a8963fe29d6585d259ee2b2c4ad74a7bef5af82fac94d69ab219d6cb1cdd2ed084eb3a47f659c5d88834c278b14","ssdeep":"","tlshash":"b2c02bc25cd72f15866748119d49bf00e6fcac4650850e72446c085c10ce52d4c17320","first_seen":"2026-03-12T21:34:16.080688Z","last_seen":"2026-06-06T20:33:07.733459Z","times_seen":408,"resource_available":false,"data":null}},"time_used":1612,"timings":{"blocked":809,"dns":221,"connect":23,"send":0,"wait":25,"receive":0,"ssl":524},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/plugins/burst-statistics/assets/js/timeme/timeme.min.js?ver=1775107392","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/plugins/burst-statistics/assets/js/timeme/timeme.min.js?ver=1775107392 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Apr 2026 05:23:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cdfd40-1930\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 1960\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXQ8HSMPVea3RFA2Mwew5loJXrHu8LfiJnuOzlhL6sSSr3q0FwWfA5TpQ0zl7JD1htpgl6Gw8hMukAE9ne9vyj9FXoTpJ8%2BTBOpVqah3cWvr%2FeQfpw1BlGoHgDfoYfN2zRXXHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c288a5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6448), with no line terminators","md5":"421e614656f7380a73fff0417c2c5c29","sha1":"3d78737fe7c0436160cda8678e9fdcd84525417b","sha256":"683c9b0530c613523f1b02a246d7bccaa9f68af46df061f4d9f72c178c01b874","sha512":"0e5e5ab37a621bdfa3b62575169025fc48cf7010897ab3eb23aec4c9c60d3d644d32ce209c1472ad1f4c5a86618bcdc46803e86a91fd385c1d63e63aa531d87e","ssdeep":"96:+beWvTIWfoXi8ULA+8SoCIDAF7kVhOQtrzFfQDwiA0DX35vUjsWRUm1k1rhbr7:+6WvTIWwX4E+7VIMmVhOQXQMIX3nr9r7","tlshash":"c7d1d6dae7691973cafed383b434a3e4693667601c0c109c66be1fbd7102e8561e067e","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-06-16T17:07:25.171254Z","times_seen":5024,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDYQyzdkmOU6AXF%2BXNNJBwpljKTJFauFMz5BcHd%2B%2FXh06RS90joQmynPtAPY2Wj9gEeGVL8u6sCeCT9HSH7h1PQXgo2dQkWPRGbdYenDTHXxC%2FKWJIh6NWIattmyz%2BcKN2u4TDn%2F2n4x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c928281a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":86,"dns":39,"connect":14,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://thequickkicks.com\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a01417c91ec0b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":78,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ci6I3tT5cJXMn5Is8Hi5nMJQZvf6uSbAMrDoTxKwpaRlMExDcbQj8RpTKm%2FyqU%2FTpurcLaXcMzSL4EHAZ5Rp%2B2x%2BFC1kn21Jsn7Te7IzpKflmvN9S46A0d6GnymvLHewpipWqz3AF%2BjQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c91fe81a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":36,"dns":6,"connect":7,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: lava@1dqk0627kl3lkdlj3sjl8yyz5kcw3fgn0qnmg54\r\nprovider-latest-block: 87410121\r\nlava-guid: 9500651666390371282\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=mL0VHrmLorxdYkeVSWxiL_SJr3zHujhOlk7Cvr2_RTQ-1779707420.1196067-1.0.1.1-BQs56NEqp.caIdy4l17YtoOovV6zXT4xg0WS8bF8PILJHYlJ6LxGZjHkcKNq5G9BGENsv2URsYBhrBQwXDtvFOdeboygHN5zGm6TTvSsJ_JjQjP748547DMIaED.laxT; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:20 GMT\n_cfuvid=mNuGDNhiZg5YGwno3nsToi2MOLFc0_tO.bPWRXeBpuU-1779707420.1196067-1.0.1.1-5pdMTSY7fccwdaKE9zWaB2t6AFlnHEyZ8H5ML3Tun20; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417cfbbfd0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.215Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.977Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/thequickkicks.com/wp-content/uploads/2026/01/HIIT-Workout-Cara-Cepat-Bakar-Lemak-Naikkan-Stamina-dan-Bentuk-Tubuh-Ideal-Tanpa-Lama.jpg?w=225\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /thequickkicks.com/wp-content/uploads/2026/01/HIIT-Workout-Cara-Cepat-Bakar-Lemak-Naikkan-Stamina-dan-Bentuk-Tubuh-Ideal-Tanpa-Lama.jpg?w=225\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11614\r\nlast-modified: Thu, 21 May 2026 17:14:47 GMT\r\nexpires: Sun, 21 May 2028 05:14:47 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://thequickkicks.com/wp-content/uploads/2026/01/HIIT-Workout-Cara-Cepat-Bakar-Lemak-Naikkan-Stamina-dan-Bentuk-Tubuh-Ideal-Tanpa-Lama.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"fb5da3f3342c60ca\"\r\nx-bytes-saved: 3203\r\nvary: Accept\r\nalt-svc: clear\r\nx-nc: HIT arn 31\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f0e517459946d1f37a41963712ce55db","sha1":"0f106efebbbbda1bac1cc3ffb7d098e8502eb5c3","sha256":"5894812185301f065c22c728ed8bf798e89a9babe75e3758401f90ce7abe5cec","sha512":"7c7c99f7c57c7477c655498270d7d44324d2d97de974a03c2b6e13d9b5a2c96793bb5343f500d03fa6b437ecf51797403dee6b0a3c9ea3f28b3d911e31c4a7b1","ssdeep":"192:4oFWKD7KbTJsveGWgT7DXXnPaHwo3olNX1FQiOiaFTEPd5jhHfETkX5FUuF/fvUl:4oFWK429Het4rleiOiaG/l/GkX3fsCoR","tlshash":"7d32af4c028de9689d5e6d70f5d43bfc96bc4238bf220510c2e410f48aae56d1a5d6be","first_seen":"2026-05-25T11:10:50.092533Z","last_seen":"2026-05-25T11:12:53.813127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-load-rate: 0.0015\r\nlava-provider-address: lava@1vuavgpa0cpufrq60zdggm8rusxann8ys76taf4\r\nprovider-latest-block: 87410119\r\nlava-guid: 7641725839417713714\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=phf_SRhzK.bgHi3IDvwyg3L62qyEkel16cVPJqNfNNY-1779707419.0846446-1.0.1.1-jagMaE9.4dj3Jj5r8QZqgw78os2ETZ8iy856J1K.7pIz5u3mK.nmRg5_zwbPW1khdfwvxPzlwL2g0qqLMIlFsr3Ek0NFatJm6JrdAFEufI_NbLqxxz7_UDtr8u0ZjA0i; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=p1Na.ETmFgm8ariJoZrl8y_5KKIznMAtbZNff1LRvVc-1779707419.0846446-1.0.1.1-A.1SKN_CqeP8IE9NDKrtuVAFd_3WYUnMt4PbYdll5PQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c94dd10b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1DWjT8oLaEEFf4%2BtzijT1Xarv1yjsRa4t4GKNUn3qKIUyJglT9lXN2t7PgKetQErIT05zQosOHCxh43LFNq10GLSmEUgprCrQaAU3aJ%2FFevQGCDeqB6IbOfpwA1RrcCT9mMuU2VH0%2B%2F8Kg%3D\"}]}\r\ncf-ray: a01417cb2e951a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/matic","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"52.137.106.240","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 05:42:29 GMT","end":"Tue, 04 Aug 2026 05:42:28 GMT"},"fingerprint":{"sha1":"19:AD:59:BD:87:BE:FF:0E:C3:94:6D:87:DA:31:53:3C:B9:70:4C:C6","sha256":"DC:FF:05:18:D9:F5:7F:85:7F:F6:6F:AC:F6:11:02:4F:73:4B:5C:73:91:CC:F0:61:36:2B:A6:0D:12:3E:BF:82"}}},"request":{"raw":"POST /matic HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\naccess-control-allow-origin: *\r\nContent-Encoding: br\r\nvary: Accept-Encoding\r\nContent-Length: 107\r\nDate: Mon, 25 May 2026 11:10:20 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9527cf4b65b955dd3331afb8f054ac9","sha1":"08731596ff100efdff0a2d68bf080730474e1c2a","sha256":"5fb9480e8f21925a902c3006422cdfc3daeea608681574b15fbf23273b8db489","sha512":"34f5f3dad2b79f7b6e6e531d5f301242b498fa7a6f355e92fa5e3866b388508d3e95e3a3a38d40c288b2ad049c1d533cbb2bc7a90add06b62ec0d66634f23307","ssdeep":"","tlshash":"79c02be413ce193127070463250b320077d1dcc6c4433f046c1c00bc40c0245c213374","first_seen":"2026-03-21T20:15:30.727439Z","last_seen":"2026-06-06T20:33:07.720244Z","times_seen":508,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":324,"dns":1,"connect":161,"send":0,"wait":162,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/style.css?ver=1.0.2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/style.css?ver=1.0.2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-28a93\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 23360\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=548eh6JKZwHzaw5xIsn%2FKR7UHou%2F1ObLupnD5LQXnUZ%2FhRwP0SVXZoS8geV%2Fl9E0z2lyW%2Bg9fSjyDOOwADERmvL7JXX75rSMw2WSmp%2B7k5M%2FYSRR%2BsAerKjMZoOf0v0dcmpbtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166547,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (983), with CRLF line terminators","md5":"44c5042ac2bc426c533fda199813fc9b","sha1":"201ba7ffb05e4676098f728844ec8b00a919443d","sha256":"f126fd922d8357af7a3849754802d9a20a554459c3e64f6d4dba5920936c276c","sha512":"79932bbf6fd6765eea7925fbbb3de2802e2d0ccd7a762a9231342d96dab32864e2682dc823f592fd5ae3cada2b1c50b72fc91558102945ed3532666edc34053e","ssdeep":"1536:LHhk0IqmYRJVTd2gf/wrn4EjQn555MIl5D+gAs9T0H8:WjGAY","tlshash":"f9f37194ae5235dd0327d72de7b96b04dea140b1db0a01ecf0e2921942cd7e936bf68d","first_seen":"2026-04-14T23:17:14.454546Z","last_seen":"2026-05-25T11:12:53.822196Z","times_seen":5,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/?src=thequickkicks.com\u0026r=","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /?src=thequickkicks.com\u0026r= HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 02:09:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTW%2BBcsJqCUzPOUy3KLEw5M2luAZo2NaXCm0DuyCRd7GS4wCTnGFgL6tFZsov5mmO3rM3PF5Oi6Upt80HsaaLqyPxnoT3aQ%2FwSPTXMx2W4pbLOTlMN5T7IYBHsBtdcY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a01417ce2d755ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19984,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (19848)","md5":"0b16254c45961029754f5eba985b6e79","sha1":"51edb26ed51ba78bc3cfd5fd7cdabbccca192a5e","sha256":"52692906d65bfe7956a351aa1baf947da8e3ffd38d7d0d89d5bf8a4e6ab6afc6","sha512":"d5f4e7ac849cd9a783425916745975f445bdb9d16993d1b5496768a4b9e9721a4ab89298b401b72095cd2d342d7171e497dee8c86261d8fd3c82a88df58da802","ssdeep":"384:3+f8o/zTGQTswxoMAG5HXS6/M/tKK+deVju3pSpr9UMBt56iyIer1K8kmg4KkC4Z:Of8o7isxoMr5C6/6tIquZSpr9VBz6nIU","tlshash":"03926c607f1d62cc0b050fba8ea63006d2d1772b72afc6bcbf576e05580ce6a7495647","first_seen":"2026-05-08T20:18:15.046038Z","last_seen":"2026-06-04T17:45:47.343271Z","times_seen":159,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":55,"dns":22,"connect":1,"send":0,"wait":71,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"gateway.tenderly.co/public/polygon","fqdn":"gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST /public/polygon HTTP/1.1\r\nHost: gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 3\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":47,"dns":1,"connect":29,"send":0,"wait":61,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=Vm7DK08M3L7qny53mmk","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=Vm7DK08M3L7qny53mmk HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6raWng4UwYf42Q3inrHvhagpwvr0nvlAXv%2FSfkZmX%2BW4b23II2BhjmV%2B2THpPPyl01KBVq8Py9xENCJ8iBZD8%2BeY%2FJDtZsdkK2cMyYO2es%2BM9ohGiwsKyZV%2FjkQV3Q%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d43aab5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbc21a68dec4940fa1cf7fe92eb40c61","sha1":"b84b30c9fc4400f0d765c7c6f1240c5276f90533","sha256":"9db43ff3d38021b35269b24f5622f39125f938df21f09c69bb96630e24bd278b","sha512":"216511938832f7e9cfc80c10419bb768786f44ed921cd980ffcbf1ba8cf893351a3984dab2c24b7aa329ec4d4e45d79657a0c6d5352836976bdc34f8e5f18dbe","ssdeep":"","tlshash":"4941f8582bfc496c54836bc1f1758e2848b48c4362214be9b565ca8c99308fe912ef0b","first_seen":"2026-05-25T11:10:50.098602Z","last_seen":"2026-05-25T11:10:50.098602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 18:57:31 GMT","end":"Wed, 15 Jul 2026 19:57:24 GMT"},"fingerprint":{"sha1":"29:DF:72:3C:C4:08:05:61:23:A7:6E:9E:35:44:4A:4D:E1:E7:67:7E","sha256":"D3:D5:73:E5:27:98:A5:7C:64:E1:82:6C:59:11:09:64:8E:9A:E2:34:EE:B7:72:8E:63:C5:83:3F:7B:77:04:1A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 53cb80211338f75aa5c5f4af3878ddb3\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a01417d00e2156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/slick.min.js?ver=1.8.0","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/js/slick.min.js?ver=1.8.0 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-a88a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 10479\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VO%2F1G%2BcVY6iplFzLq6lfXufjCbK%2FnYOpDMCQ%2BPg%2BMGSDg15KTgWtoCghr3Wpb1lqywd7kHTpGCziT6dNttp0SthBncviNC1G8VenpJWH%2BLOdFJ9wDPyS80S1fTLnDElQka3pQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c298b5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43146), with no line terminators","md5":"e299ffe2a73f37d846ff0705429babe1","sha1":"4fff3bef8d1b965819b88481deb47e1e7eaddc70","sha256":"4e55b451621a060d376f1b31af3b370ea3d65ab7532ca82e875e52882deefbae","sha512":"c0764f57c349db8d498294f84884a747aa13fcb609eab7b3108cc73ab7c1f91fcd87e219b6f6d69deb85fdebe457aa1ce4bfa09957c810912789f9036c9ddfd5","ssdeep":"768:4rkk/123F9NHi6pWAFQGpNtYh81+bnDYdXRRMi2KYCQCsPSPzdGwKz7RFmYf:EPIFQGpNMxEGwKPiYf","tlshash":"4d13a549d205276289d721e62105c40eb3f7fb3cba22c0e475c9d3ea646dc4896d7bfa","first_seen":"2023-03-07T21:41:11Z","last_seen":"2026-06-16T12:25:41.356799Z","times_seen":588,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJ8fd8Wh8iBsebTax7gr6Z9MSMqTK0ZuoDAhb6EhwGXinADVQqqGKcxiFX%2FhUldesCPAIc3uKWd1xODDWZS1QEu2tQmTGVNAeQmFBGeQSZ1QdK5ibpVTKFJCtZDKNlOJm9b0xmFqk%2FTlG4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c8ff951a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":58,"dns":24,"connect":5,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thequickkicks.com/\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN9SEVjBvBskCK3byNGL7%2BAfeUdnC8qLpPokMxyrxl%2FVSskRE%2Ffy4ILSli2NH%2FsvtljRc529F8EoQVIuRxc30mLcqwe5b%2BVP1GrWe1%2F4ISJIlaF6mcY%2FAUIi7EPmgSt9mgO3mf2w1gOr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417c9486f1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":5,"connect":7,"send":0,"wait":118,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/94/Cloudflare_Logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 05:51:37 GMT","end":"Sun, 12 Jul 2026 05:51:36 GMT"},"fingerprint":{"sha1":"62:23:EE:89:97:A6:C1:A5:65:7A:8F:23:C2:68:CA:70:93:B3:AA:FF","sha256":"5A:21:64:0C:22:9B:01:A0:D2:BC:CA:02:4F:E8:51:ED:BA:CC:51:27:0E:87:6A:6E:E6:0D:88:64:AB:D1:3F:30"}}},"request":{"raw":"GET /wikipedia/commons/9/94/Cloudflare_Logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 07:02:04 GMT\r\netag: 05982e81981f0f4d317c59d3008727fc\r\nserver: ATS/9.2.13\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: tqzc3404i3b6qqllzyx20sg0c8awofx\r\nlast-modified: Thu, 25 Nov 2021 22:52:08 GMT\r\ncontent-length: 63290\r\nage: 14896\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/61\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=JB-WOP1lvqHqJSkczPYHtgNrAAAAAFvdDwavLZQPzFPu1475mNZMA4v1ocwpYAh-;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Tue, 25 May 2027 00:00:00 GMT\r\nx-request-id: d3dd1d47-2720-4fbc-80e6-d30aceef0dd9\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":63290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 1368, 8-bit/color RGBA, non-interlaced","md5":"05982e81981f0f4d317c59d3008727fc","sha1":"feae211bf6d65d064a33c7a87d46ee0b7c616dbd","sha256":"c3916862cfead3af678d0fe7cfcc90cdf69713c1d95bdb988320ffba20a57f0e","sha512":"3c7372405356ad6835968c2c227614a45cc3bc2f7296ff7dd8db5b979babb119aded114cb97a3a55774e05754ae22c7a2df03ce1eb71b65cb6261059388dced1","ssdeep":"768:k2L/oWPZzSgt4YwA0GUHz+sCoFEjzPQYclFK0flKkVFHoJfs/Ryo:km/LPc0wA07HZFEHPQYCFK14HoJq","tlshash":"9353be4acb59227bb5510019b7a3689398b12c733001de1e5bc7b46f5b07fb0ee72d92","first_seen":"2025-03-07T13:54:30.635821Z","last_seen":"2026-06-14T20:06:34.27607Z","times_seen":499,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":123,"dns":56,"connect":23,"send":0,"wait":42,"receive":49,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/custom.min.js?ver=1.0.2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/js/custom.min.js?ver=1.0.2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-e33\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 1186\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AczRpSMI3pvA6vv3o7xBL3SqjgyLfJGnj7stHvOZdXzonCNaK2a8pFczZAaXu5KYhxIamvet8%2BY6x%2BSfsxCivYVOE%2FyNDQtTEQkfzMxGXkt8Hk%2Bh3tOgOA%2FgnqxRVZ37ks6S0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c2a8ba783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3635), with no line terminators","md5":"38618c49bad790258efa6eb3eea220d5","sha1":"b0608cc6d5de1c3314d0350b785d1f02e963294e","sha256":"4c3454a9025a6c398c47cbe8909eb90dc638590b48055ec584b37b4aaf0e8263","sha512":"8d90b2c747ffa0dbfb88acacf95aeed5dbfff6f1e813a0b06cc9ccc259736759a90625d63bc895dc399a9af65f3dc7268e26e437d94f13883e22a4f978fd37b8","ssdeep":"","tlshash":"b87130227052a19a24fb26bac28bfb4031673f39dd0a5201d951cc7e16fdd1e6763e68","first_seen":"2025-06-22T03:52:13.917026Z","last_seen":"2026-05-25T11:12:53.806395Z","times_seen":10,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 2\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":97,"dns":49,"connect":26,"send":0,"wait":60,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /cf.js?v=2 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Apr 2026 09:33:14 GMT\r\netag: \"6581b-64fb8c1302a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EH9R%2FSpLsqmkGBXbm%2BRJYsmgXSwKCPTSiRhHcqwNtWNuY0DdGtaJyniEwcmJuEAl%2BmPmLLQfY31gy4xEf2FeB43HIrTMdra7mf5AjtV40f8B15nc4T86AetDaUd%2BkD0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nage: 7531\r\ncf-cache-status: HIT\r\ncf-ray: a01417d38a975685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415771,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55100)","md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /cf.js?v=2 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Apr 2026 09:33:14 GMT\r\netag: \"6581b-64fb8c1302a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njUKu3mCP4J7PokFfKwt8NeO%2BoZZlUwtV%2FoxGXknAmTucVvvTyxW0LpqmBq689YzQxxjA5LcsKsWgqswX9HGlGCmmlg%2B9uof4PYVbrqj3t6xUsa8yI%2BmsBvhwa6%2FLUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nage: 7531\r\ncf-cache-status: HIT\r\ncf-ray: a01417d39a9a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415771,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55100)","md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=01rW-LJJC78EuQXZhgs","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /api/index.php?q=01rW-LJJC78EuQXZhgs HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMxROWp1D9t32hxpOLV7U%2B%2FIdskGiHjzHCgYNmGVAe9vb4NjZvfrZH1bj%2F84BKH0zF%2BAkP5qf9BvMkaRoERh3YM%2F%2Fi3lTqJfAMB3%2BAjhC6AbWnR8tgDi91x2kChtogk%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d3aa9e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1da0b0ecd4771cd56a38eb4796ecf9f2","sha1":"f3ed8e4e66159982b0cc6736c923f64889c16fb6","sha256":"b325ca24482d47e9369890aa3566775c276fa5d72bdaf94717a751b6824832c7","sha512":"219470a87157180721f42f7ef39daca6b216c4c8e1f06cb451cc40296774bf6c70a2f24af7b188dc2636f8664be2a06cc9f3ebee0842270c43e59c364642f1dd","ssdeep":"","tlshash":"d941e78a58be5b94d2d562667533b4828ef40cfc017425b13b6bc28d0e683c086ef9e2","first_seen":"2026-05-25T11:10:50.104491Z","last_seen":"2026-05-25T11:10:50.104491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/94/Cloudflare_Logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 05:51:37 GMT","end":"Sun, 12 Jul 2026 05:51:36 GMT"},"fingerprint":{"sha1":"62:23:EE:89:97:A6:C1:A5:65:7A:8F:23:C2:68:CA:70:93:B3:AA:FF","sha256":"5A:21:64:0C:22:9B:01:A0:D2:BC:CA:02:4F:E8:51:ED:BA:CC:51:27:0E:87:6A:6E:E6:0D:88:64:AB:D1:3F:30"}}},"request":{"raw":"GET /wikipedia/commons/9/94/Cloudflare_Logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 07:02:04 GMT\r\netag: 05982e81981f0f4d317c59d3008727fc\r\nserver: ATS/9.2.13\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: tqzc3404i3b6qqllzyx20sg0c8awofx\r\nlast-modified: Thu, 25 Nov 2021 22:52:08 GMT\r\ncontent-length: 63290\r\nage: 14896\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/64\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=kHp1EjmMXDxVTuaQqWcXPQNrAAAAAFvdZh8iNcbBNzXcyZhJ1NNj_g6LOAGY3VDG;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Tue, 25 May 2027 00:00:00 GMT\r\nx-request-id: fd34e8b8-4433-44de-a443-41f39abe96a1\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":63290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 1368, 8-bit/color RGBA, non-interlaced","md5":"05982e81981f0f4d317c59d3008727fc","sha1":"feae211bf6d65d064a33c7a87d46ee0b7c616dbd","sha256":"c3916862cfead3af678d0fe7cfcc90cdf69713c1d95bdb988320ffba20a57f0e","sha512":"3c7372405356ad6835968c2c227614a45cc3bc2f7296ff7dd8db5b979babb119aded114cb97a3a55774e05754ae22c7a2df03ce1eb71b65cb6261059388dced1","ssdeep":"768:k2L/oWPZzSgt4YwA0GUHz+sCoFEjzPQYclFK0flKkVFHoJfs/Ryo:km/LPc0wA07HZFEHPQYCFK14HoJq","tlshash":"9353be4acb59227bb5510019b7a3689398b12c733001de1e5bc7b46f5b07fb0ee72d92","first_seen":"2025-03-07T13:54:30.635821Z","last_seen":"2026-06-14T20:06:34.27607Z","times_seen":499,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":97,"dns":5,"connect":23,"send":0,"wait":76,"receive":12,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=Lp9kJwK1c3Fcu-mciw","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"POST /api/index.php?q=Lp9kJwK1c3Fcu-mciw HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 179\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":179,"data":"{\"eventType\":\"view\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"screen\":\"1280x1024\",\"domain\":\"biletors.cfd\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3h4J5mHZ8rsYhqrn9dOD%2ByqvPwU8sy6mxDTQxQlL8STmu9EiUJKwi4k6P1JDwKC2%2BRfPGksHkHw5u3G1SoUNi9oGmKsrcW85C7LqLBCVWk4anYnCDo%2BNoDU37aXiDk4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d40aa65685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 3\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/cf.js?v=2","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"GET /cf.js?v=2 HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Apr 2026 09:33:14 GMT\r\netag: \"6581b-64fb8c1302a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEGl9gkR%2BHmosEUViD1RxeAs6ckgHZTuagPLBY0RheKUyXIlUHNfXf0P9EP2l6lPtK5vJYcITa4dCdjf27JbvG5aVnm3yTQiUd5Bo49OYZyb%2BJ853K%2FrWRLUv3vL4R4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nage: 7531\r\ncf-cache-status: HIT\r\ncf-ray: a01417d39a995685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415771,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55100)","md5":"89447f240dbedf42aaf80e8887167d7a","sha1":"bd6ea0e4ce62f0064d5665ebae4eec5a71b5c0ca","sha256":"36cc73c786f8ac5958267473dd92f377af2b15ae7e1e0d363378e88614c951af","sha512":"be857dc665df784e83e0dd62e49c5da178a361557938c639110013512ecb7a104ef9574cded7396cfd83cb6fea8e3805cf22c982a341bf40231b5a29b280de42","ssdeep":"6144:QXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pjFHco3qG:Q+i/grRi/grGi/grXi/grIjFHco5","tlshash":"7694d037196f6f4475175c45a0083b182ce938abfa14cae4bcdd48a66be8630dd3e6f4","first_seen":"2026-03-27T19:33:35.460662Z","last_seen":"2026-05-26T20:12:11.185349Z","times_seen":300,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/uploads/burst/js/burst.min.js?ver=1779692175","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/uploads/burst/js/burst.min.js?ver=1779692175 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:56:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a13f28f-24e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 4415\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 3349\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qW9eM0MBZdZ%2FcBxHWVmwD32ioXrfbhxaa4nQLr0yacOCaaWJs%2BoHA7arZdPbYw3YGQhTuRcNVzoR%2FV3LaK3o5MgbhSk3DfCIopdddTBFsahEvOOCQqRgCHZQXjCxbqLPlROk4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c288ab783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9447,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9447), with no line terminators","md5":"c8235de0d15bad7e743da283b82a4f68","sha1":"39821d33e97f065ec328a8be1f2e865ddd8b129c","sha256":"ca27ee071a04a75e3495d0f7f2767c0e904c7f02387c098229030aa93dbac37e","sha512":"01a5792e1d6282c68573b525d3ba7b35e2486b27fbc83a8dba2c720e69f989552cf451b4e5df1a5d0db36f33bb43275e7e7db6682ac84b0672b5d9d61452d4c4","ssdeep":"192:+GnPLcA3CdHqmrBe/NB7xeRQN5kMr4ow1ueJW:/jl7kBe1CymBW","tlshash":"e012d6d722a19c7edbaf01a7b12c6b415b2b4f5b608960737a5e1ca4048ce03735bf75","first_seen":"2026-05-25T11:10:50.106757Z","last_seen":"2026-05-25T11:12:53.825138Z","times_seen":2,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.tenderly.co/public/polygon","fqdn":"gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"POST /public/polygon HTTP/1.1\r\nHost: gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 10\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84022687226a43f69b6c76ecc6069d0d","sha1":"d5cd5b90c72cfd1209fb9f4462aefa94dc835877","sha256":"e608f356ad7266e1e3f859a2497938f5199841d151b268686655946fd85dfc90","sha512":"57abf068c4d49b0061338acc7e4002f8ecceaf05082d4e7155ee2293123e1fe35b2536fcb1c15f5c248d8a51e02e349d54b8e1aa7ee54f9d17c232ca35a01dfa","ssdeep":"","tlshash":"a2d022c0208f0333c28ccc00f00c300220003b2f8ee00f02830c000002cc2aaa2083eb","first_seen":"2026-05-23T08:50:42.223616Z","last_seen":"2026-05-25T11:12:53.783956Z","times_seen":39,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.rpc.subquery.network/public","fqdn":"polygon.rpc.subquery.network","domain":"subquery.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.179Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /public HTTP/1.1\r\nHost: polygon.rpc.subquery.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCazBJFfTnlyG5epQ5TAduFcIZIiCq0Ha1qnVhQD%2FAHbDH1K16veCsiBsrFVv741gY98eAUYJw1ejniPE31%2BwTlBivyDxx7sFl%2FlxJAOwNMg4AQB%2BCJTsj9j5uSVrzwTJTOo8OYJ1yn7\"}]}\r\ncf-ray: a01417d00d661a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/css/slick.min.css?ver=1.8.0","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/css/slick.min.css?ver=1.8.0 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-52f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 483\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F28UgiMLLGeC%2Bq8MNtDIEq%2BAZs4nY79MXb5e6VKoRccxvba%2BfU6%2FjKxwUbu7rAN9tNlvNk%2BiEErCslboHXUinvElG3x%2BXda2DC85lYIoa2d%2Bpd8dZcjCjzvNPRvXtDn6R1ZKGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a01417c288a1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1327), with no line terminators","md5":"da4e146913da6966d85a6b8686886edb","sha1":"03a28dac9dfc6c33e6175c9c185911c56525d31b","sha256":"fb3ed351cd5c0f1f30f88778ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9","sha512":"ce91402c696e30eb15b619130772f48fafe922170350c7f5637634611e41fb8ef391f9e8ba44d74b04b8230b944faf41d0e92e6cec5b1ded4a92a4125b38d94f","ssdeep":"","tlshash":"b2218a591496115a4027e3125ed3da9a38ebf1121c3607cef7408309ce8fbae1dd29e7","first_seen":"2023-04-08T11:01:14Z","last_seen":"2026-06-16T16:21:44.139367Z","times_seen":3610,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/webfonts/fa-regular-400.woff2","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thequickkicks.com/wp-content/themes/instant-news/assets/css/all.min.css?ver=6.7.2\r\nCookie: burst_uid=223bf5623b5d1de07c7ab481f0abfac9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24488\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\netag: \"69848c32-5fa8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://thequickkicks.com\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s17kYuX2WOfUdIBaJ3P6ty7Ndc0Wf%2FNzYZK%2B4OcWEBQ3JenhISvAzWvQRo%2BP6GuZiuFJX4YaX%2FgTi9IJCk7ptjvvyBMSwybpYVYx5jPVd9M2g9%2BCXy%2Fl7TBKvzfy%2FhnI9ztV1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01417c7c985783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24488, version 772.1280","md5":"747442fa76f1d9a31f9a54a2e8a4b448","sha1":"07fc0ae14bb3187839082aed3bca11dfb1e04524","sha256":"9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849","sha512":"274dbe5bc31c560d2cc2d15afe5485687b2f7dd0ee24ffed99627310ea36a6a3cc1c91e22368f909d056f4faab051838d469e0bfe8a30169b735aca5eb0f402f","ssdeep":"384:Ok8mTTNu15tM1xuB9dYY7YRHmOdjzUJsAr4p8Oq7kpPyXBpqrhDRBybCpMuT33SI:OGg15tM1xuBYY7YRHmcjzUJJr4p8Oq7a","tlshash":"0cb2df2cebab2746c908513a2ec4deef3dac1b674d0461298c45edece8847281d9c964","first_seen":"2023-08-14T23:16:18Z","last_seen":"2026-06-17T06:56:58.254641Z","times_seen":9396,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 99\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaIZo91NteS8bEaM2i9grlxtOMoMJLXKqvvrT0acohNYzTlxCt7Tp4FHJTV%2BV0kKzQ9UZ4jnC%2FxkI2WzURYv9qWScrMoCbVZCppKWbp5u62FNrUbmwZK8498GHue93vKJwMs3CGs0wle\"}]}\r\ncf-ray: a01417caad011a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c841228019c4f4e3ccd75f4283b9bc0","sha1":"bc7335d88d3a4474215ab30d55902fcbd4cad921","sha256":"6539a175c55b9a1bb1d99b3493c9eaf3c9e2835f73d755cc77e96e9a8b068d98","sha512":"2ff480a4793be24e15cb5132dbd5529ab7b9c941dd9a7bb4c7fd62d64236dcb3b2f951b00ad80323e5b043c8cef88eff4fc0d37813fe51c32c38397e2326be33","ssdeep":"","tlshash":"9fd02280208f0333c08ccc00f00c30022000bfaf8ee00f02028c080003cc2aaa3083f3","first_seen":"2026-05-23T08:50:42.151162Z","last_seen":"2026-05-25T11:12:53.785742Z","times_seen":39,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-pokt.nodies.app/","fqdn":"polygon-pokt.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-pokt.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0c%2BAd%2F1%2BSOFH7LiYiIIuQlnLv72b8m6VfqgY5FulKpb7JNqSI1uaxZOoG07qtZGHPrfoN93%2FFjdzpY53z4kf3Z8ozYUbFojO1ivwWNEbQ6FYu9LkFIrxqLyG2J3ewx76L%2F%2Fc549h7%2FbZ\"}]}\r\ncf-ray: a01417d27d3c1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://thequickkicks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: Cached\r\nprovider-latest-block: 87410119\r\nlava-guid: 10488327649352404705\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=D2WbFMaYzHZksYNCIoZg1fBrHMwQuzdE8EvZs0RGLPI-1779707419.149572-1.0.1.1-AWPD8C8W3LAQVAFKyirmrXPyu.rD0snYTW82k0BjzuW2z9RS4YI4OtwKqmTrDKLQl3gHxy_QF002LZX_I8c6SLVzMh_Hy3hWYa4eypxQxmeRCJqOFjpA_NRQusb2Lgwl; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:19 GMT\n_cfuvid=7aKR9QJ.9N6ttdCNC3fe2HqYEEaP6iSDCrJSn.5UamA-1779707419.149572-1.0.1.1-NVAtoWAwUYUcfEs.MEX.AGVEqibwCJ7VYoZZAesX1jw; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\ncf-ray: a01417c9ae570b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 15:27:05 GMT","end":"Sat, 25 Jul 2026 15:27:04 GMT"},"fingerprint":{"sha1":"35:1A:0D:25:A4:1E:F9:20:89:65:8E:1C:C9:98:78:A2:13:30:9D:48","sha256":"0A:75:7D:61:6A:45:14:4D:1B:22:EC:24:9B:57:9A:51:18:7E:F5:75:8C:83:6B:1A:6E:E3:04:64:40:F6:67:CA"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 146\r\nserver: cloudflare\r\ncontent-encoding: br\r\nlava-provider-address: lava@1lfclpayagj75p5zx2mls0v89xxfn8yw8fcy6g4\r\nprovider-latest-block: 87410120\r\nlava-guid: 4648576928601855388\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Y5HE0UQSj8_G.vp92AWnA0fn6rvhC6vZym.B3JO1Q_s-1779707420.2055078-1.0.1.1-OxwZaZfeCZgxlTDFkwvg4ZXDL0kcnWmTX_eZcBdrgBrhICntYc2AZhK7cDRcg6vMudI9VekJQzVTfaKuc0OtealOJejNjkyfnECONRBjIgirjATzCXPCXbqbSxOfzjyU; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Mon, 25 May 2026 11:40:20 GMT\n_cfuvid=RivQ_8RbnSjXcclq.EurZwWXEkjizcXaXPbeA8mpjWU-1779707420.2055078-1.0.1.1-piG_G4bj6QC7Ft6GbrLzlZYCPmkpwlzxoVO3lNiPBio; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\npriority: u=3,i=?0\r\ncf-ray: a01417d0485d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"527709d5543346abf5a9c4afad703932","sha1":"47037cef6b9578eb685014c4fc2635863ebd131b","sha256":"6be440b16ddd41be88a826aa4536c73345b13b10dc8bb3074593660d13d9d93f","sha512":"fc3238de338a881268f8f0b8d1ef72ebd50793dff302c8e6c7dfa871eecddecd616ed7d205c0a305f116d30defedd1b5b10448a81899c051c2f7285b6e49b6a3","ssdeep":"","tlshash":"96d02280208f0333c08ccc00f00c300220003faf8ee00f02028c080003cc2aaa2083f3","first_seen":"2026-05-23T08:50:42.401393Z","last_seen":"2026-05-25T11:12:53.789365Z","times_seen":39,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biletors.cfd/api/index.php?q=cg4tHcJJXX0M8c7n7Q","fqdn":"biletors.cfd","domain":"biletors.cfd","tld":"cfd"},"ip":{"addr":"172.67.217.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biletors.cfd","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 13:20:38 GMT","end":"Tue, 18 Aug 2026 13:20:37 GMT"},"fingerprint":{"sha1":"27:39:6D:8B:BA:16:ED:6F:7D:F9:62:D4:D5:26:B4:24:42:B4:11:D1","sha256":"B5:73:58:7D:8D:38:07:67:92:4D:83:E3:8C:70:66:8E:B8:2F:D1:C8:36:70:F2:3D:06:AF:78:1A:6F:65:09:BC"}}},"request":{"raw":"POST /api/index.php?q=cg4tHcJJXX0M8c7n7Q HTTP/1.1\r\nHost: biletors.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 179\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/?src=thequickkicks.com\u0026r=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":179,"data":"{\"eventType\":\"view\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"screen\":\"1280x1024\",\"domain\":\"biletors.cfd\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzx%2BWm1HEIy3zsEsrH2Al8Wl7fL7az46W91wrO0qHznEkUc0Q4IDjujTvSTup35sytf3LXI%2FwOvysPh26G5WsyKW%2BYEFg5l0EhAdfGQp3TbtRdvWcZhP6q57jntUtk4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01417d42aaa5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T07:31:11.386118Z","times_seen":16477982,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"biletors.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thequickkicks.com/wp-content/themes/instant-news/assets/js/jquery.marquee.min.js?ver=1.0.0","fqdn":"thequickkicks.com","domain":"thequickkicks.com","tld":"com"},"ip":{"addr":"104.21.75.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:18.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thequickkicks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 15:02:54 GMT","end":"Fri, 17 Jul 2026 16:01:05 GMT"},"fingerprint":{"sha1":"16:0A:F3:5F:D3:D2:5B:C6:20:DB:81:BF:DB:EA:10:E0:C0:DF:6B:2D","sha256":"FA:B6:C7:6E:6B:20:B4:E5:5A:58:73:6E:CD:C6:B1:9E:86:E5:21:09:60:9C:BE:9A:4E:DE:4D:58:FD:BE:E4:28"}}},"request":{"raw":"GET /wp-content/themes/instant-news/assets/js/jquery.marquee.min.js?ver=1.0.0 HTTP/1.1\r\nHost: thequickkicks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 11:10:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 12:25:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69848c32-2345\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 73204\r\naccept-ranges: bytes\r\nx-cache: HIT\r\ncontent-length: 2336\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsOgdIk1ANkmL%2Brz90woS9qpgavhHtSDlrS4s%2BV8oQV%2BsTvVBMadCoDnkf8%2BsD%2B8j8Uy15Xs%2BRiB9Cxu5hMXgYQgeUFIX8u70wvS64I5RJuHy70t1APXu1XubfTFqu3cK1KfUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a01417c298b7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9029,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9029), with no line terminators","md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-06-16T11:45:47.870959Z","times_seen":3981,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"thequickkicks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/thequickkicks.com/wp-content/uploads/2026/01/download-21.png?w=341\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thequickkicks.com/","date":"2026-05-25T11:10:19.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /thequickkicks.com/wp-content/uploads/2026/01/download-21.png?w=341\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thequickkicks.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 11:10:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8312\r\nlast-modified: Thu, 21 May 2026 17:14:47 GMT\r\nexpires: Sun, 21 May 2028 05:14:47 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://thequickkicks.com/wp-content/uploads/2026/01/download-21.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"7cc79eb2728d01ae\"\r\nvary: Accept\r\nalt-svc: clear\r\nx-nc: HIT arn 31\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8312,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e411653e375dda8eeee661676734ed0e","sha1":"b8eca0209f2a18fefdea5e65e010e35820c607d7","sha256":"2f5326b724319ca05be582c202b4bb94127244208249d3440bf2a5653c1879a2","sha512":"89adc8d27d344b9e56c0c426e1e922c90fee928f4c6c300eaf92bf4f9f0f10cb860805ba51c57f7aef6a3d31de04e6232630037421190db974320bc1ceb4ace3","ssdeep":"192:SjIOb7VZSBF09CxJ+XfKHwh6uAz+pUv1snTpMjPj/rA77:SZEBiwxJ+C8UCOAtM743","tlshash":"1802af8452c84008eeeb53e187f8f8fc4cd34427e1969dda845e453ef56e6c452da07e","first_seen":"2026-05-25T11:10:50.112238Z","last_seen":"2026-05-25T11:12:53.817553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-public.nodies.app/","fqdn":"polygon-public.nodies.app","domain":"nodies.app","tld":"app"},"ip":{"addr":"172.67.70.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biletors.cfd/?src=thequickkicks.com\u0026r=","date":"2026-05-25T11:10:20.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nodies.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 20:29:20 GMT","end":"Wed, 08 Jul 2026 21:29:05 GMT"},"fingerprint":{"sha1":"0B:E8:CE:B8:C2:4A:10:75:30:76:8A:C3:7B:F8:DC:45:11:45:AB:8B","sha256":"F1:1F:A7:CD:9A:6D:41:B4:4D:0B:25:79:3D:7C:8F:76:65:AA:2B:38:DA:8A:1A:76:12:B2:F8:19:7E:9E:5C:37"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-public.nodies.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://biletors.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biletors.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Mon, 25 May 2026 11:10:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 79\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWvsUr%2Ft%2F2aIsq06fDu%2FVywknpgRgLLRGkkK2Aat2Ig0uJiDX3XBr7ybXXl61xnORiQXIb3HzQY%2Bea9AVPz7cB6rV76KqSx8SsBiNvZyRPtQW59RQjgnOVld146f%2BEwOIuh7DvgMqUUwh68%3D\"}]}\r\ncf-ray: a01417d04e161a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a6b43ff666fdace2b8eba7f3588c37f2","sha1":"8a30f58cebc0554359b86837069efeac91730753","sha256":"47e603818bcb97881bda4879383d3174cd26cff43da5696a3ed6bf6f4fd9ac19","sha512":"1ed8602ef4bcdffd207288aa90c752d975316a9e96f6be26d91947fcc65bc2bf004014d596f56b24d49d0f8eda420c239adcc7656a143a7f6597b335e55d58ee","ssdeep":"","tlshash":"2f9022b0000000000bab02fb2c00bc822ba0803c0c80200c208800000cc00a88203300","first_seen":"2026-03-12T21:34:16.105445Z","last_seen":"2026-06-06T20:33:07.724052Z","times_seen":414,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}