{"report_id":"6f004a22-e091-4b65-a033-9f14c0803114","version":0,"status":"done","tags":[],"date":"2026-10-09T17:03:47Z","url":{"schema":"http","addr":"arcuis.icu/","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"104.21.20.194","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"arcuis.icu/","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"title":"Arcus — Trade Stock Tokens \u0026 Perps 24/7 on Robinhood Chain","dom":{"size":511829,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43647)","md5":"c78dc8764ea647b09cc25e0b27bbc6c8","sha1":"2790dfaedf9ff3b69f41f6f62449486dc939f2ca","sha256":"edda7fe2bd344ca5035e3e991d418e987ab5da085a13f12c8ee4f5ad08339bb8","sha512":"19020aac68fb6d30eaa7937a7ec3035cb33f970688bcb75baa926d7211d9f660d89b1c977ea2fae007d3fbe5d54625bf415093855210d61b31e527dacecdcff3","ssdeep":"3072:8ORBiWk3E1Bq/S9Tl6wkqXTplNV2S9WzHnoAqFQegBHutj+UDhDwDxFJdDDR/t3K:8CiWx1Y/Ul6wkqXTplNcHnoAqFQO4DM","tlshash":"d0b4e8675214e43c5ceb667ee758a50c35299102ff33868f92dc513f81ceee82a1679c","dom_hash":"domhash34b22093688cd5197343ec90ae16b2d2","first_seen":"2026-10-09T17:03:54.802296Z","last_seen":"2026-10-09T17:03:54.802296Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"arcuis.icu/","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"104.21.20.194","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:03:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"base.drpc.org","ip":{"addr":"104.20.46.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-10-06T14:34:08.477959Z","alert_count":0,"request_count":2,"received_data":1541,"sent_data":1033,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1rpc.io","ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-10-09T12:48:30.57805Z","alert_count":1,"request_count":1,"received_data":454,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"3.173.161.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-10-09T15:50:23.2715Z","alert_count":0,"request_count":1,"received_data":2819,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"arcuis.icu","ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-07","domain_rank":0,"first_seen":"2026-10-09T15:47:55.806332Z","last_seen":"2026-10-09T15:47:55.806332Z","alert_count":28,"request_count":14,"received_data":9416273,"sent_data":7021,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:2.0.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"base-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3470079,"first_seen":"2024-06-07T05:17:26Z","last_seen":"2026-10-06T11:19:25.197859Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.meowrpc.com","ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2817504,"first_seen":"2023-07-30T16:39:25Z","last_seen":"2026-10-03T19:36:15.28593Z","alert_count":0,"request_count":2,"received_data":1553,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-10-04T07:35:13.58453Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-10-05T17:10:00.051896Z","alert_count":0,"request_count":1,"received_data":20835,"sent_data":1294,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gate-6b0a69d2.talewinesr.workers.dev","ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-09T15:45:17.462021Z","last_seen":"2026-10-09T15:45:17.462021Z","alert_count":0,"request_count":8,"received_data":968094,"sent_data":4151,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-10-05T20:23:58.256827Z","alert_count":0,"request_count":2,"received_data":2934,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arcuis.icu/81ca1a63-45fd-420b-83c5-1fda78ebe74e","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87b3f9cb75c998d7f1443b32f62ecf45","sha1":"30ae7b81ac4477845a3322247a5a411b1e97ddea","sha256":"ee6bd4af7f4f7cd43a76b765b936f6b8a8be3efa2668507c93b0b25c69dc3df1","sha512":"780227cd6ae5ab757ce817e688d678c0da4506d9da0b12e18705a965ad308f330040292606dda8a82436f0eb8dc982337f1eda74b48c09d758a78e6593b4b829","ssdeep":"3072:8WH6HIuLo0G1i1qS+jhB35xHD7pLRtg1xumIakppP:rHi14jhBzd9tg1cLakpV","tlshash":"7964a194184791d0ce4711bde4afd448f0783b638b9da1f6a43feeb0b16cb6045e71aa","size":310677,"data":"","first_seen":"2026-10-09T15:45:30.184955Z","last_seen":"2026-10-09T19:39:33.384004Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bed96558c46d7e6396c5a1483fe6603","sha1":"d1937d202cf2698867bfe5181d527479e53938f6","sha256":"79cfcc300a793a1d3da6f525a45e27dc9298ed82757c0dac8c038ce79e8680f9","sha512":"e05297bb57bb5d665fd70e1c72dbee8fc83f7a3128fe528b9f5621ceb9d0ecfc5bddfc03eaca99c4657e0d553f40e1d5dcc99a091ccb9664e12d7751e9ed9784","ssdeep":"","tlshash":"8d60000000c30030cc3c000030c3000c003c0c333c03f0300300030c000c3000c00000","size":14,"data":"","first_seen":"2026-10-07T03:41:39.925242Z","last_seen":"2026-10-09T19:39:33.38242Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-09T20:28:46.565062Z","times_seen":858092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/ae538dc6-5a95-45ff-bc98-d75c6ff3c493","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","size":30003,"data":"","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-09T19:39:33.380852Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/20a5015c-47c1-439f-8b64-1e7019525a03","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","size":528504,"data":"","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-09T19:39:33.380361Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-09T20:24:09.876617Z","times_seen":449675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/81b88889-113c-482e-8be2-15585ddb1879","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55318d68223f12689d49727ea2e37ef3","sha1":"37f0a24c657e7fbf830e10b396464189ba95824c","sha256":"41c37456c8347b469f9cab4401ec0215134d393fbae1c2446e2107d0d81a8ef3","sha512":"1d62a318049298fe708a671fac591e3900049b70cde68891ee9ce9df35073dd6ef8c3f179c45c097266c60b5c9a11caed7385a20ab38137e5538c253b5689707","ssdeep":"","tlshash":"18f08b194ffc178b828b8265429daead064c104773796f22c3a6cc2100e2ad02962a2f","size":531,"data":"","first_seen":"2026-10-09T15:48:28.160857Z","last_seen":"2026-10-09T17:03:54.847121Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/dcd66498-e22a-4ef9-8219-f6598228e188","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","size":70200,"data":"","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-09T18:49:32.759931Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/3692f1b4-b680-45c3-b881-ca06d26f68c6","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","size":3269,"data":"","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-09T19:39:33.376314Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/4d991878-f483-44ab-9481-54d85f1ca788","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","size":16644,"data":"","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-09T18:49:32.754938Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/bootstrap-2.0.5.min.js","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a91bb53b422d7c705a9228f41fdc36","sha1":"9e8287544ec6f0d323b01f8f736a48a58ac6f7ec","sha256":"4e41d9dd0d0f7738d3258b6bab6850a68d0aee4b814150c7b1e372f51538218a","sha512":"80d1ce3deda709a1b6a061cdeb5ca7d7ce4844de7159cfbb9449a66ae24fcf8a286688899a048fb70fac5095e39323f9dbd925df021e1d69d4a401e8b184b3d4","ssdeep":"384:D1grrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:SvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"b77219f87765206a03633532607f9102e177eb118d5b9050a2e28a917decf6be677fc8","size":17079,"data":"","first_seen":"2026-10-09T15:48:01.800754Z","last_seen":"2026-10-09T17:03:54.82332Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"arcuis.icu/brand-videov2.mp4","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.597Z","timestamp":1791565390597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /brand-videov2.mp4 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=32768-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-cast-cache: MISS\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:26:36 GMT\r\netag: W/\"838abd-1a1179e0b60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-range: bytes 32768-8620732/8620733\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pD4xNyGCl0tGYj1im7KG3JPR5lHReiVjUcX53JuQFxJnfS7jwDBbvnVA5GVhpi78t8%2BJKxOaUxrKcU0UufvjbvXAzL1Ld03W%2FnWfTvox4SQT4wxOHotR5aEPVnr\"}]}\r\ncf-ray: a47ef50b3c8b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8587965\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8587965,"size_decoded":8588950,"mime_type":"video/mp4","magic":"data","md5":"1672185f6f978e1d9039c52bb4738cb8","sha1":"3270fd2194ac268491e18c6413dd947646864de0","sha256":"ac3552d0e67137c658712ee0e5e7273d9cfd4978771412d0dc2cbc9fd886e5bf","sha512":"1322eea6c56dd5c1f356cb00427b88c79649af3e001587532b18a5d17c35b00d2d53b4ff221f44901d810be4a9fe7a2b75050c1685176419f413e8ea1bcb74d4","ssdeep":"24576:pDaR7kQ6UtoZtMtnOCOiVSZZIN+jkLqsc7oZ+4G2Nsh:pDad36vt81UIkjuGssh","tlshash":"a925234975f309e8ccf20d7199a2465e3f37205aa42d73fbb520d0e890e399d2db76a1","first_seen":"2026-10-09T15:48:01.875108Z","last_seen":"2026-10-09T17:03:54.805102Z","times_seen":6,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:11.131Z","timestamp":1791565391131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Oct 2026 22:43:09 GMT","end":"Wed, 06 Jan 2027 23:42:56 GMT"},"fingerprint":{"sha1":"7A:AB:E2:A8:B0:3E:E4:04:B7:F9:F1:FB:B9:9E:6A:24:51:8D:1E:0B","sha256":"01:3D:38:F4:4C:0E:DD:F8:28:D9:A1:3D:3A:96:8F:33:76:CD:6D:4E:1E:2B:73:2A:D0:1E:FD:E6:E8:86:C0:9B"}}},"request":{"raw":"GET /getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: a47ef50e9c0c32fa-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 10286\r\ncache-control: public, max-age=43200\r\nexpires: Sat, 10 Oct 2026 05:03:11 GMT\r\nlast-modified: Fri, 09 Oct 2026 14:11:44 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20376,"size_decoded":5474,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c01db5dfee3f863f4d14cd8a6067bbc","sha1":"f3b2050d63b872da1cf778078d91e98f06265858","sha256":"30a77bb0f6c954a8edc69bb8dea580debee574b39d3dfd09656361075f0e1afc","sha512":"c79d82ce5672d44426d9aadc7a16337a35aa3f2937fd971f48c9c782478351715d25456e52bd5706f528ec2392bfd345621a1346f7751f6aea15b7931e6ecc4b","ssdeep":"384:qJu9vMUwOkd77rzdoVWIMCtm9jGdU95wiDCDtl7:ucvVuNo9i2R5","tlshash":"d792229e47d09d96de70c788e7adf9ef947ee003c2cd189aa5b1497440fd8a3320169e","first_seen":"2026-09-21T14:26:22.574Z","last_seen":"2026-10-09T19:39:33.372426Z","times_seen":291,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.985Z","timestamp":1791565390985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"5UiSWv4B0RxBobb4j1ZPemBbSOcCLV3-sDnSS2G7ewZdvfS6QXJT_FMsuov81sSQ4r2GrqL9GViARJhrZejxhiI6vZfWo2vcmMUV0fH4"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a47ef50dabb056ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3CAU3ATwc4o9AMqnz213UeCKkaY%2Bc1D4gC%2FbIxD1q1zbIvMZRW9w2nCu%2BULxLtAPy48tZ%2B6Ug%2BMW5KplYVGNQNORD77e6YFu61JS4em3dZlWyMIPvwI%2F7zMbS8OvM0hoS4jNdHbvEtU43pRoaJRYJHBrHAku2URVXodV\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3269,"size_decoded":2133,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3269), with no line terminators","md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-09T19:39:33.376314Z","times_seen":206,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/brand-videov2.mp4","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.107Z","timestamp":1791565390107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /brand-videov2.mp4 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=8552448-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-cast-cache: MISS\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:26:36 GMT\r\netag: W/\"838abd-1a1179e0b60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-range: bytes 8552448-8620732/8620733\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Upsxnz3iff6f388cB%2Fz%2Fzv%2B0dNyre6Z4EEYHxtHXZxSJ7rSyPJ6SLrLmSVZyKTYKrwnk1nuBX6MW9q%2Fl3AwVUqNEnWyhtkHRqm7tHRY2wb6evXQbUCHHO1xrEpQ5\"}]}\r\ncf-ray: a47ef5082bf92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68285\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68285,"size_decoded":69274,"mime_type":"video/mp4","magic":"data","md5":"df322270dde7ee13bcf0d4e3dd18fead","sha1":"c32437b0940cada84a914ac52b5d0649d000a49a","sha256":"5c2523b72fca3587f48db3db159d7ac4d407738676bc4cf7025de7bccf75cab8","sha512":"f9cc17b10bac296bf100fea38905373ab69dcf88c894add13c60b102f44882958a2d9ff145398191706733652b222664a1cc711344acebaddcd3559d8410f387","ssdeep":"768:OGU3pXvYdni5RJktlx/yXzRL3d7GbIdHGhiDH8dVHOj9VATCSNm:yXvYdi5R+tTUzRTGoA2H8WVuf4","tlshash":"8063f669f3e05583de71473999e687107330e1b4234343cf56a8a73deca63999e874e2","first_seen":"2026-10-09T15:48:01.777248Z","last_seen":"2026-10-09T17:03:54.808107Z","times_seen":7,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.348Z","timestamp":1791565390348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://arcuis.icu\r\nvary: Accept-Encoding\r\nx-host-id: f1b546936d23e3b5-30e2d35fcbbbb927\r\nx-node-id: base_base-mainnet_ewr\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fgerkg6wlE3KfNNdImgYZYXYNsiiRQeTCqietIbgNnaCEyoNOLqGiVOdjktCoq7yhP6qfZZRpn5XyiHltMp0disZjxUJZAJcoG4i8sNnfJwTCTSFU0qjAKW0BL3TuR8CibVymqjtCDL5fspFhh6g01pz%2F1obrYYjuGdMceWk\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=FBeCZnKfqCWx2HBhkb8t3Q60XYAVZEs4H2kngNuj51o-1791565390.464202-1.0.1.1-4jOFqg2o8h3clKJK.XZ9P1eAA0giYARDWcmYD0hzGPF9VM3Pb1wcb7FQD2pF3fER8OjqoM1TopNts.2Rap2Icqrh7M678pvEcVmwK.nrCnr9KWJ5HUSdy2xC3tZNkWFI; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 09 Oct 2026 17:33:10 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47ef50a6822b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"FBeCZnKfqCWx2HBhkb8t3Q60XYAVZEs4H2kngNuj51o-1791565390.464202-1.0.1.1-4jOFqg2o8h3clKJK.XZ9P1eAA0giYARDWcmYD0hzGPF9VM3Pb1wcb7FQD2pF3fER8OjqoM1TopNts.2Rap2Icqrh7M678pvEcVmwK.nrCnr9KWJ5HUSdy2xC3tZNkWFI","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-09T17:33:10Z","raw_expires":"Fri, 09 Oct 2026 17:33:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=FBeCZnKfqCWx2HBhkb8t3Q60XYAVZEs4H2kngNuj51o-1791565390.464202-1.0.1.1-4jOFqg2o8h3clKJK.XZ9P1eAA0giYARDWcmYD0hzGPF9VM3Pb1wcb7FQD2pF3fER8OjqoM1TopNts.2Rap2Icqrh7M678pvEcVmwK.nrCnr9KWJ5HUSdy2xC3tZNkWFI; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 09 Oct 2026 17:33:10 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":486,"size_decoded":1471,"mime_type":"application/json","magic":"JSON text data","md5":"303732b01bdb033810b45f5cf9d2e608","sha1":"4161038f45f1e653cfeba4ae21a3532e93c845ba","sha256":"6888f5febfcb9fbd4ff2dfdc006b23375de7fc5d044a36cac70c6b878c424e2f","sha512":"5dec013c378015ce532797a5b3b860264190eceb1b6e34313fb8ed714cde68bc662f771ad4d6be628098db539b46bac6c2506e20f1e1e8bc78862f275f5042e6","ssdeep":"","tlshash":"74f086f89c26cac4f8c95886edd4f81510407cdc34da8f41451c793d39a51819f58aaf","first_seen":"2026-10-09T15:45:29.731872Z","last_seen":"2026-10-09T18:49:32.762569Z","times_seen":31,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.20.46.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.356Z","timestamp":1791565390356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 45a98ece240f528f1fea3617a87da0b3\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a47ef50a5b695ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486,"size_decoded":813,"mime_type":"application/json","magic":"JSON text data","md5":"c883053fe498ddd7af008bf1f9f572c5","sha1":"42bad5b18ef52649ae39d58f3640390afc9136f6","sha256":"f69eb99e16d7798f874bef1cff2b0ea687af50187f84dde1905aad86fff148b9","sha512":"46a0d314ff97e9533fa7add767123aeca41b067933de7dd2401607c185de0df2c63641639314093ae747558f79c8ec822a5225337139368cd52e193822966e2a","ssdeep":"","tlshash":"d6f086f89c26cac4f8c95886edd4f81510407c9c34da8f41451c793d39a51819f58a9f","first_seen":"2026-10-09T15:45:29.986353Z","last_seen":"2026-10-09T19:39:33.37538Z","times_seen":37,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.973Z","timestamp":1791565390973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"cLEEo83NA2Ns_5feTiMPm06G00k6zREgsumF1t8R8xA5ROOYXHGHpEyi8Inrl00hyjZ97OPZyExxs5Qfu96n7K_xH1yHxS2T_H2bg_A"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a47ef50d8b9956ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEJVBHSOnRC0dw09ZfpDm%2FxfmjaV6s6e04SYaKW22Nz3VDmdOBpklTfBgGxLgrnHWLOgsGQjH6vYN4GdFuhhzrYmejcIr%2FTYL5bfJPBYoXrxKTCAaHNZAzFV7YOzzqIP2poCcF%2BnKMVnNgjtA%2ByWXB88UF%2BbmVD4g6Vk\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70200,"size_decoded":21192,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-09T18:49:32.759931Z","times_seen":185,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/guf5M0HuNqEnFtbTOGRhtZGfWsU.svg","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:11.650Z","timestamp":1791565391650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /guf5M0HuNqEnFtbTOGRhtZGfWsU.svg HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:00 GMT\r\netag: W/\"495-1a117962bc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRzwDsI%2BIcnpx%2FCjrMCD6EkZJzzJlsRDWcbrNRBDDihPJd9q7L7G3L33IfcIGtU7nx9u6HmPP0xM8sX1uErwgkHiuId0sHnBVHNbVJqOj847hrOROInLQvGuIfec\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47ef511cdfc2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1173,"size_decoded":1340,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cf60a2e57cea63f374484354f5411b7","sha1":"82e7f93341ee36a12716d6d3386461b5919f5ac5","sha256":"8e3a0ef1eae6b2eaec4c980d8b6338e40b590eec2026e4e04d33f45aff2e39c9","sha512":"6cf8a89f519633130837960c70871787ff74a2620b74c0257d26a0100a1ef91f903f3a20d43bb5103aba9b16aa96e193e524fac9c40ceb06b7ff2cd3602eedab","ssdeep":"","tlshash":"5521bef81df864ccc87327fde5b525801a8d2538b1126728c94e39b572c67589603e34","first_seen":"2026-07-14T10:07:42.424669Z","last_seen":"2026-10-09T17:03:54.811585Z","times_seen":8,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/OD5cuN2I2mekHmyoU1Kj2AXOd5_7v7gIDn_wghc.woff2","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.727Z","timestamp":1791565389727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /OD5cuN2I2mekHmyoU1Kj2AXOd5_7v7gIDn_wghc.woff2 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:24 GMT\r\netag: W/\"8764-1a117968980\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BFWTzieKpR4IWZb8uWzU4Lq7jE6PKcF9n6ck1qO0bvm3%2FSJFdNbNHb42rk4XFxr7rd%2FxmfxbC0sbO76ndjHGa1zG6I17pP2rpNUOaTIougkZ7uwrhO0tiJtOKha\"}]}\r\ncf-ray: a47ef505cb892678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":34660,"size_decoded":35622,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34660, version 1.0","md5":"a378a5659b2019568dabf84c876aa6f7","sha1":"77234624d8dfa389c9bbdff15a9c1134b0a121d5","sha256":"23f595c947a367e57ec14ffe0e193cd34cba064e4e2fc748d677e0f05468ea0c","sha512":"fc63783774f66a2b602684858e542f47a51d314e73994703506c799a5c79851bd6508bd54d945f559839f62c87d0c794bb73008b8f9a91b139dfb1b4aa6e9eb7","ssdeep":"768:p/IfsZuNTTRy9GVs8/dNwPGnHodaiGfTsVcR+47Oyryp1ayrFZ6i:BIfsWtHVs8/dNGGw+RN3UTFZ","tlshash":"ebf2f13b1b9d726fd0e110b07dd3a62e1575d8594c4cc60b0e0e6663e6a77694f40bbc","first_seen":"2026-10-02T22:11:30.562688Z","last_seen":"2026-10-09T17:03:54.81233Z","times_seen":8,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/UjlFhCnUjxhNfep4oYBPqnEssyo.woff2","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.728Z","timestamp":1791565389728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /UjlFhCnUjxhNfep4oYBPqnEssyo.woff2 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:56 GMT\r\netag: W/\"6d5c-1a117970680\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zDpiP1NNmTm4UiFAGv349yaUIKOPIr41wtKwPJv29NTgI9DSsS%2FAnRXW63GVCdxI4F0XCQ0GXUpVjVG84MbRbjtHI8hg3hZFbp95O%2BTjwcS48FI1dMpYuZiKrtT\"}]}\r\ncf-ray: a47ef505cb8a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":27996,"size_decoded":28956,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27996, version 4.0","md5":"cd9ac96043f129635debf6a875b2a70d","sha1":"5239458429d48f184d7dea78a1804faa712cb32a","sha256":"216fcca1239e2ce6a2cc6009eac87e7a90ae36e3e0bf1992fdf712f83f58ef06","sha512":"a4a3397cb6b1c33e0140502fdd095c29605175d1a3f8b8eb13c2fd6909f5cff141843309af1e5ccab5b0ac83f782bc69d883e47b73dca5121346b3400cb74d33","ssdeep":"384:Ji7vtprS/cnThX+VcOi/iOWEdsSru/eJDz8qlWp9dzdCmT+n7sgjT98BM96uLXCd:JiBpl5rllJDz1y9dz8AG+MNDSxysECKE","tlshash":"18c2e1a3620c6ad1e7b778fcd99bbf64171453043c15c48296640a0cd3f08dea9afa67","first_seen":"2025-08-19T03:50:16.115417Z","last_seen":"2026-10-09T17:03:54.813086Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.729Z","timestamp":1791565389729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:34 GMT\r\netag: W/\"6af4-1a11796b090\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nESXF4pzPv9sik3Q415R7UW6r3L055DwXF4%2BL9Vzfpj8wlc7GFvtHwy69c6%2Bd68lvYo1n7nmm4Twe%2FmS39cSawgSIytjbNZm6NUhJ9vF%2B7nqOdRUCW%2BM1Vjv0wlZ\"}]}\r\ncf-ray: a47ef505cb8b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27380,"size_decoded":28346,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27380, version 4.0","md5":"e092f17f85b5a6e5a73296c5819acee5","sha1":"1ab81cfcac2b37a777533f04c1c2c7671c047c2e","sha256":"362b168da82d69bc67d2a358fa20c59151cb4ceac8a5506be6baef5e6827fa42","sha512":"37756285b8dc6d24f04f40b3733ce2e3414f1242b0cf4715ad1a1082901d81caf10582dbcd2060ac8886902aa33d4fc2b1bd717215802f933aea929d181cc5c9","ssdeep":"768:uVmFXapd3t+i2J0dlFlL9baVrL0c8yMErCOtRPCM:uGXabqJsl5urL0xErT9CM","tlshash":"e0c2f1e694653af9ed0d707b065af62b539068bc436e807d9cf960b077a3bd1020f496","first_seen":"2025-08-12T17:14:20.779189Z","last_seen":"2026-10-09T17:03:54.813857Z","times_seen":4485,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/brand-videov2.mp4","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.737Z","timestamp":1791565389737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /brand-videov2.mp4 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-cast-cache: MISS\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:26:36 GMT\r\netag: W/\"838abd-1a1179e0b60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-range: bytes 0-8620732/8620733\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztdN8DRucdHQZXJdMcCWoXi3qblHMRWs6%2FGvTwN%2Bund4%2FCuzHXqtTE6GP5y2UbMDEqZnOxVTh%2FGDTFUV1EhgAODipUj0b5AT6n1161QyxM43T%2BGg5GOmiduPamTB\"}]}\r\ncf-ray: a47ef505db8f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8620733\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":48262,"size_decoded":49249,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d42cac741bad7bf3cb8a01107d556904","sha1":"07ce197172ae1bca834c2bb056f2d6834183d1b3","sha256":"0f0f66d5dc0e006a411154a69278f8ac316ee5cf7e614db21185b1a05cc67988","sha512":"69f95926c7df2e60e2caa7993117faeec9335ea47daca7db23e35b71172d2d65b98cf51f30cfb0d2fe20370a85e7120b47bdabaa4ff04933b8984b6fdf1a0811","ssdeep":"768:diC163bGHWQtmWk0vEC+Fnxru4FLzJnn6bHFQumPapeJOYv/0YiB/0KPIxz4b8XJ:d70oWQtgbRuiHJSHFSPapeYYylyuwO+","tlshash":"9523f23927f3c505c75e9e3359667f2a90b2a0cb43d05773a18a7a8f8c12614e84b5ed","first_seen":"2026-10-09T15:58:22.366935Z","last_seen":"2026-10-09T17:03:54.814593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.352Z","timestamp":1791565390352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://arcuis.icu\r\nvary: Accept-Encoding\r\nx-node-id: base_base-mainnet_ewr\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jygtdy%2FJ2CThrN0cH2VKUqAxlXKPrvhmo5Y9xeTPIlmMkvz7X5sIvKYH3LYE52IZeYNQmM1JG4xrT0WbSDioEXHrl1bmQh8%2F12bsZrhRzkHPaSzdMBWoI0UDqh4RmiygQizEgQ18OI1pXaZm1809DcTm50HJ4vIyRjFVr9Vs\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=PHcrV6RUMqYkJX3S9.QHFSYtjGr41XOwDX3xTfZGeA0-1791565390.3596592-1.0.1.1-kLc7XgVPCvrB9gey6EfwaYHYIXRAtBl9tsHSJbGuk.ZjJSAi2eQNvmbBYTW1CsTo5KEMkyAQTdgEyKwux_iEFAczgerGP880nLvCS9PM9mln1l9N972tVUzyTpom3JsO; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 09 Oct 2026 17:33:10 GMT\r\nserver: cloudflare\r\ncf-ray: a47ef509be14b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PHcrV6RUMqYkJX3S9.QHFSYtjGr41XOwDX3xTfZGeA0-1791565390.3596592-1.0.1.1-kLc7XgVPCvrB9gey6EfwaYHYIXRAtBl9tsHSJbGuk.ZjJSAi2eQNvmbBYTW1CsTo5KEMkyAQTdgEyKwux_iEFAczgerGP880nLvCS9PM9mln1l9N972tVUzyTpom3JsO","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-09T17:33:10Z","raw_expires":"Fri, 09 Oct 2026 17:33:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PHcrV6RUMqYkJX3S9.QHFSYtjGr41XOwDX3xTfZGeA0-1791565390.3596592-1.0.1.1-kLc7XgVPCvrB9gey6EfwaYHYIXRAtBl9tsHSJbGuk.ZjJSAi2eQNvmbBYTW1CsTo5KEMkyAQTdgEyKwux_iEFAczgerGP880nLvCS9PM9mln1l9N972tVUzyTpom3JsO; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 09 Oct 2026 17:33:10 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1183,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":97,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.353Z","timestamp":1791565390353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 6\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a47ef50a3dee5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":721,"mime_type":"application/json","magic":"JSON text data","md5":"00f927ce79058712f5af630b5ba280b1","sha1":"33a46b7971de59c6a0ec55647d1f3f17dd8079dc","sha256":"438c4e26ddbd090b307d4caa3163f02b9fd1a0dcc6b4a509e6c4744b541771c3","sha512":"92c869e3b0628051295a6b6d88c49fa758f22bfdecf2f885a4225357a840d87bdf2b2365dd18299238b7598f64d8c8efdc4b162e37ac16133f8e915c80bd730f","ssdeep":"","tlshash":"86f086f89c26cac4f8c95886edd4f8151040bcdc34da8f41451c793d39a51819f58aaf","first_seen":"2026-10-09T15:45:29.984531Z","last_seen":"2026-10-09T19:39:33.379842Z","times_seen":28,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:03:08.831Z","timestamp":1791565388831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 07 Oct 2026 21:39:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BikAEcAY6XdfyqqueLqIn8gbY0MoKyUcMc38G1ZC0tpfEb0k72JahJeWmj0XJKqsw1OlI9n9w8S4t0qNqZMlDcAh%2BUO51ZEs2PUnIB3Jda6KB8yw%2FlgJDnimeVz7\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ef500ea072678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:2.0.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":519760,"size_decoded":83565,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43554)","md5":"802c5f78cdaf94f79bf9e5029657ae91","sha1":"c2d156dd363eb31d331d3db9699859d964d3d725","sha256":"f8e0fab70856b2604aa8ebcf82046750c916b55eb1d35b82407bfa21e7d050a9","sha512":"dbaf382e2d433161399522610b385626e5b37e1ee43539a2c1b877d6fd4f0101a7c4c9b8dcae03452e12437278ec120c223efcaa71d897e70837595df7876c6b","ssdeep":"3072:UORBiWk3E1Bq/S9Tl6wkqXTplNV2S9WreF9fSkxu+5DwYDrD6vJdDDR/t3Z1M+Xq:UCiWx1Y/Ul6wkqXTplNuV+2jO","tlshash":"4db4e8675218e43c9ce7667ee758a50c35299102ff33868f92dc512f81ceee42a2679c","first_seen":"2026-10-09T17:03:54.817926Z","last_seen":"2026-10-09T17:03:54.817926Z","times_seen":1,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":0,"dns":92,"connect":22,"send":0,"wait":328,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/33T2f1RhtYF2Q8umP2WpmYIXRU-2.png","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.739Z","timestamp":1791565389739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /33T2f1RhtYF2Q8umP2WpmYIXRU-2.png HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:06 GMT\r\netag: W/\"8efb-1a117964330\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yuhRl7n6llfJAeY%2FPIogUhoKJLqPD5euzyAh7cxmGgM4q%2F1O1cHvvYfmUNR0e8i073KNWUUunNLie8T9Ndp0bic7ZWWt2jvuUSKRBnkKtCPOQ6Vz07BPpG5z68O\"}]}\r\ncf-ray: a47ef505db902678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36603,"size_decoded":37559,"mime_type":"image/png","magic":"PNG image data, 946 x 1024, 8-bit colormap, non-interlaced","md5":"e603d61ea660cf5f6a17c92ea7765661","sha1":"930b52535e12d613731020bc7fea26b689b82c41","sha256":"e3e31230dceaf79075b319a1c97b4e9f06f0f7aaa67737b7bfe382ab44acd9d8","sha512":"652ed54b7278f62dd5d375c94b62aa8ee5464206be48a576e653cf3031f400d3bf33d16b39c8010b601131c8761797410c8c38fe384bfe9f7a3d476c1199139c","ssdeep":"768:HrPPjkswU3rrJAXx478Igm4wC9VCD4wWwrbG9gPnm+ct8eLcY5O8cs:HTLkswu+x3IguCc4Jwu9gfm+cNbnR","tlshash":"13f2f229d05a77cda6e4d86d40fc723bb05de6caafecc5b081273512473ad50b09529b","first_seen":"2026-10-09T15:48:01.795219Z","last_seen":"2026-10-09T17:03:54.819865Z","times_seen":7,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.359Z","timestamp":1791565390359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9eWEfB%2ByJgT4su9E0h8pU%2B1o%2FPeTRHdEz%2Ftxh8qmlSqd7BFseK%2BO9n3ZMggaDA%2FM5guSMaxhx3XCMhTzWPw01OtHrDCBTaeX2Is8GOBZwFkHWFOhlc8IHy5IRwcifycneE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a47ef50a2e0256ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":720,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-10-09T19:39:33.369549Z","times_seen":835,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.512Z","timestamp":1791565390512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 127\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"pDrPQW_l5I8idwdUr4q9GIRTsBs5vgJM4NGVlxL7SqQlKkaVCpvniEFn3sR5upmEU6bhKLASXYLYDsHY_1QHyvpoeODzuBjZV5-BwJQrp7jHn5ESpHQi9tpveVT-DaQ"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-type: application/json\r\ncf-ray: a47ef50ac93056ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J95jlBueB4moZWP5QYBWYddVAc7XHWTzZf%2F5crfAcTj34DYkaLcsb%2ByMTFmK%2B%2BanOcfB0DvqUeOcOihHae%2FQRdPD4NXhnO2nBwEXhg%2Bbz2bZseso0qP3B5fXpr2fPKHR4Gj%2BqZut1h7AxI%2BpeN5kKsrqXdlGzZ9b0xev\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313344,"size_decoded":74956,"mime_type":"application/json","magic":"JSON text data","md5":"61be42b4bf5e73d7f40e816c16edd0f6","sha1":"59e26c2d7f18d5b6c7c1f6b9886a06650781f878","sha256":"42ebb6a982fb9ea39978853ed18c86599a4d825c39893a9108f6b2661ec125bc","sha512":"91936cbfb2ad8e4aa0a7e2c3607d5f3851b67798edd6a73a3bd9dea54f9f681d830cabc9bbb671662d061511b47f5d82ad3206f249fb0fd53ecb5cf6deed6c7f","ssdeep":"3072:bw6Pks7Wi01mbkS2fhBJJjDRli4/5hgPTW+0aSfdV:0HmbGfhBpk4BhgPS/aSfz","tlshash":"0064a1d4184691d0ce4711bde4af9448f0783b638b9d61f6a83feab0b16cf6045e71ba","first_seen":"2026-10-09T15:48:28.138469Z","last_seen":"2026-10-09T17:03:54.821601Z","times_seen":5,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":202,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/bootstrap-2.0.5.min.js","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.635Z","timestamp":1791565389635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /bootstrap-2.0.5.min.js HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 21:36:52 GMT\r\netag: W/\"42b7-1a1184c3d20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CnwoLxsBi2dsIHnO5iGEzC4t13m4HJ%2FPsJTCw0wHm06FQJSDFvod2YBKtDhclRjCydkT3IG2x6RIZEWBnw9OX3%2FDJ9vSMyzyZauqvzsZJHjU095oKXzMyCGY5LNI\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a47ef5053b5f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17079,"size_decoded":7973,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8594)","md5":"e4a91bb53b422d7c705a9228f41fdc36","sha1":"9e8287544ec6f0d323b01f8f736a48a58ac6f7ec","sha256":"4e41d9dd0d0f7738d3258b6bab6850a68d0aee4b814150c7b1e372f51538218a","sha512":"80d1ce3deda709a1b6a061cdeb5ca7d7ce4844de7159cfbb9449a66ae24fcf8a286688899a048fb70fac5095e39323f9dbd925df021e1d69d4a401e8b184b3d4","ssdeep":"384:D1grrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:SvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"b77219f87765206a03633532607f9102e177eb118d5b9050a2e28a917decf6be677fc8","first_seen":"2026-10-09T15:48:01.800754Z","last_seen":"2026-10-09T17:03:54.82332Z","times_seen":7,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/eEcU42GCP9eiliYyHNBp3tQSZiU.png","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.640Z","timestamp":1791565389640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /eEcU42GCP9eiliYyHNBp3tQSZiU.png HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:20 GMT\r\netag: W/\"5c6-1a1179679e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRXzP2cYKDNKsYxfPni9Qqqc%2FQ5iWfh9zfYtZlPMNSIN%2B3zpjqmfKC0Ij%2FtWhqUNmoaGDkIDu8d4qAkak7oLjcKOaTiwL%2FCxTi%2BCXVNnL1nJJYXmgLu%2FPDLliXuA\"}]}\r\ncf-ray: a47ef5053b612678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1478,"size_decoded":2440,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"89a884fc812dba4f17e28aa75230da4a","sha1":"bc1ca239092b4e31600e7dcea87cb10d48046a14","sha256":"b7557b03fa2a9857a7991fbd22d358a5fbad159b707ccaf82425638b8c157a74","sha512":"43662f6e3fcadd3b9a5e824acc33314361e50c6503202dabec5b6d7e18e3ab644db0f6df1757956fc5ebddb6e5316893b59fa3a57facd665efd0534c4da7b0b3","ssdeep":"","tlshash":"4b311e1379a1ea2ead10a40d91b638c91c08e27ed1493ce0e2176b3c5c1c519fe8e7e6","first_seen":"2026-10-09T15:48:01.764155Z","last_seen":"2026-10-09T17:03:54.824166Z","times_seen":7,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.364Z","timestamp":1791565390364,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.20.46.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.365Z","timestamp":1791565390365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://arcuis.icu\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a47ef509db2b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":439,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.366Z","timestamp":1791565390366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 09 Oct 2026 17:03:24 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a47ef509eff156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6360\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":14487,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":14467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.367Z","timestamp":1791565390367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjQMnOsMTJ6W%2FmWLIR%2F%2B9O218ZpRSGZk7YZ7w9XT0A%2FCzvWiNO38KS479EANmg2Ksuc8UrXWo1HHPkS9aaMfQ8dkM0CpQ0FgBwJy%2BH7uINMxrhP%2BOlYeVvu8ucVOVVYNg54%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a47ef509edd456ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":815,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":3,"connect":2,"send":0,"wait":32,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.984Z","timestamp":1791565390984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"QWVyJRYibpamsCoqPKsm5inlJgTZH6oMvEL1asf21qRggUzHbLEuikeL8F1eZsmgmajZrxoNq1XqC1-WSGdZA0RhTFxSRiuJyM9A2P4"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a47ef50dabab56ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvSsc4mDwJPMsSV9CHqpu0dIcRWlKJ1cN8ivjo40oJviAv1rkG7zY6IzBbA1XOuq%2BM%2FLyxQStMCga94P2iSXRWUjjur6mQOw0E8Q0wMBXz3X0yWWzh8N1PfeGy7SXiurp1kPjJ%2BYnOUvfP%2BOSR05fKLa2%2FayPAs%2FvJrD\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16644,"size_decoded":6209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16644), with no line terminators","md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-09T18:49:32.754938Z","times_seen":183,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:11.349Z","timestamp":1791565391349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 752\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":752,"data":"LbuHscVBRPX!YRpxkE20c%@k5Srwt%q#WhFM0mzzAmh%kcu66r2@m30mFxXB6jL5DzX1%x@Np62Ycb9nMsvVfBKY6$WGeT#A%UYGuMBm#uE^Zk77ZfbT2wR#nne1e!JRcFSwy9sGf\u0026gx5zWeMG6^vxjyUbKv\u0026P^02L!W71j@S9v@R#ZxUy8dzvfhE3f$fxeu4$Ysv8u1h!X7H1u@59U@qWYF!$3jyhENzu^Vkuq0yfeN1awKnC03UTdeZDm$stBUnWeQJzS07qpWhCpp9Cf93M83^U2mKh3NJXu0Zx2v$zDbQmRfx6F93XKQGy3WQ0HS%5NZD4\u00262xVb98VXqeVCY4EqmbccyFVD88QRyuDfBz7UGAffRX50c6B7SCq1YHpUDNjS8Wg\u0026K\u0026Yv0bC\u0026VCGtyr\u002628\u0026\u0026jHm9eABqyVP^82nbWuGpMR8FUMtRQhY!2M9d#s0UR7ZzjQwv^R$KvD6ZsXhZHm%Dmrjd2rXV@FvsdgNxeg3UpdsDdcM#7nED88JcbSSxZhRr\u0026#GR86pveGDtAFXMfwQEzh06r2C0X1d2ASe%afY7DRyAARXM!NsD7SBWhdU2@uDGxxuV@7b4DArP#TJNC6JLbB$24TrdLu7pD4a%MZ%^#TKAaVBMVumpWyeTWD$3G4MmSUwvJfA%UYEkJ8K03aqk2L0PhamLE40fkH@SEB%^QBVFXDMedzNNW3SYr6\u0026xRR1QdK7sWCrKUqf7E^X48AJDD6@b0cS4@fndUDrP%kPszx"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0yLjbVvUOldeBWqLBQEps3Pk7Xwo6CUG5E2OQJikbzFsQBfosHiwicHmQLKNzADgitz2yNTsxZE%2Fy1NXQc%2FcvTTRQcmmRgh0h5K7NCvlwdcFkJH702TnMl%2BHP6rag2EuahjKANEZ%2Fu26aESP046dgWv13TfO611EiNi\"}]}\r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a47ef50fede44e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":874,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d9c8010e4393663be2c460e4158f0eb6","sha1":"a9118e250067db9e8bafa5b4bc17d919d550ea4c","sha256":"66d9ce48984f8cf6e285b0a1cd933ee92f81b20246cd09ba7c9db7f00ff6b770","sha512":"f23a4c1dde9e9cc835ece20a0257c45f2d7bbb1aaf51ee6364d17a6d58079b6a3a281ac60f48501a4ae570184707da0b283e8c2546284942b111c2f5c9aa4b4d","ssdeep":"","tlshash":"7fb01201d3127ac07182182226293120e02e31f37431035f1320a1562213c54c984348","first_seen":"2026-10-09T17:03:54.826344Z","last_seen":"2026-10-09T17:03:54.826344Z","times_seen":1,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.642Z","timestamp":1791565389642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 11 Oct 2026 17:03:09 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKJvMqkn2M4Y8XV9JdPLuFOsPwXeK1fnQ4bi7zGOtGItF3cFZe%2BGDMrmxIwwSLMUCgZphG96FP9LQcle0N%2FHZWLxTtLt9Y0ByLKEBung8ws5gHjJwACy6%2BGCOAmD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 09 Oct 2026 17:03:09 GMT\r\nserver: cloudflare\r\ncf-ray: a47ef5053b642678-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1280,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-09T20:24:09.876617Z","times_seen":449675,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/index_1.html","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.684Z","timestamp":1791565389684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 07 Oct 2026 18:17:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VDJ2GgSPZZ2GIix7Vqj8MwKvRo%2FD1rWAkgQEOG18Vcfb3Zp4F2AzDmaFz%2BXj5I1avW5vPw%2F23w3aDjGLJ%2BiM5b2bDdGDMfwXVqeQ5eXQ0QBWUTlrNqif8xWVBQo\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ef5058b732678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":766,"size_decoded":1450,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (389)","md5":"7dc7be46c06f9be0f96052bf2cf45d99","sha1":"cca34161ae34d2c0a7cf961ff99a23536bd9a2a4","sha256":"45fe37d8dd2b2f900f82e82e4c3600cec32b9bc850959aedf0a365b7ac01ce73","sha512":"be6b10efb76c5046bc4942d61ea47fa88bd4cd8c15cde476e3e3acf5fabbf77f8d9a009a6ee58e0a61d2de223e88ac67073c89a2fb693548717b671a484c0f85","ssdeep":"","tlshash":"260120a3e074442d05539236d984f18806588d68fab5a8e0bdc5838d9c99ae8c67b1bc","first_seen":"2026-10-09T15:48:01.789819Z","last_seen":"2026-10-09T17:03:54.829845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/weaNn8qbfjHjx2EYBjRNEHCT6c.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"3.173.161.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:11.649Z","timestamp":1791565391649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 15 Sep 2026 00:00:00 GMT","end":"Wed, 31 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A6:0F:A5:97:7E:1D:DF:B7:B6:87:60:B7:8C:F7:57:14:93:9C:5A","sha256":"D2:A0:3E:5C:B8:C4:2B:5F:20:14:16:A5:5E:DB:4A:88:8E:B5:8E:CA:C6:4F:EE:76:16:02:F2:BB:70:89:93:09"}}},"request":{"raw":"GET /images/weaNn8qbfjHjx2EYBjRNEHCT6c.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: image/avif\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"AMS56-P1\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"mMBO683gkflfSV3uO9Vv-jUxMjn-rP_9czO8rtVZhxdIazKkarTp5w==\",cdn-downstream-fbl;dur=9\r\nage: 5779151\r\ndate: Mon, 03 Aug 2026 19:43:59 GMT\r\nx-amzn-trace-id: Root=1-6a70ef7f-1cdd81d554cbfcff67eab5c1;Parent=0b97168495822f7b;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: 426fa3e2-8a61-4449-ab0d-33729dbfaa3d\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"d9c878295766431ae5028d67ea7339a0\"\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: mMBO683gkflfSV3uO9Vv-jUxMjn-rP_9czO8rtVZhxdIazKkarTp5w==\r\nvia: 1.1 451af4a70d8933189a255f25ad3828b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1547,"size_decoded":2819,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d9c878295766431ae5028d67ea7339a0","sha1":"b80a9b9f230765af80d14dbecd90512e3e128277","sha256":"bea6dc6ed2616069c6f6ec032ac15b36e85f4ce98780abe02c437b1bd6e7e675","sha512":"2824dfdbd5484b109e3b3a61a7de495cdd3f2e992b9e9f05bb121f208d0019e0b87c6019bef4d537cd9f9d8751221c0c23e9bd2bf1f1216a2e73d2cc8d28fbbd","ssdeep":"","tlshash":"43319436b3b52d27d50d6b7a054e874423f22874eb8737368cebb7068db49a3c80a915","first_seen":"2026-07-14T10:07:42.393774Z","last_seen":"2026-10-09T17:03:54.839542Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":15,"connect":41,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arcuis.icu/OD5puN2I2mekHmyoU1Kj2AXOd5_7v7gIDlX8quj7viQ_N1HixEAZerfcvSGpZg.woff2","fqdn":"arcuis.icu","domain":"arcuis.icu","tld":"icu"},"ip":{"addr":"172.67.194.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:09.648Z","timestamp":1791565389648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcuis.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:49:02 GMT","end":"Tue, 05 Jan 2027 17:49:01 GMT"},"fingerprint":{"sha1":"9F:D5:AD:5F:57:74:42:6E:B7:76:E7:F0:23:87:F7:2B:36:D6:FF:1B","sha256":"41:5C:DA:E3:05:5E:14:5E:D7:2E:CC:40:78:4A:A5:30:D0:D7:8F:75:02:FF:4D:6A:76:09:43:E6:E2:D0:1F:75"}}},"request":{"raw":"GET /OD5puN2I2mekHmyoU1Kj2AXOd5_7v7gIDlX8quj7viQ_N1HixEAZerfcvSGpZg.woff2 HTTP/1.1\r\nHost: arcuis.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arcuis.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:03:09 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 07 Oct 2026 18:18:24 GMT\r\netag: W/\"7720-1a117968980\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfKBcoYiOQdzsKJdeNG7uaQk%2FwdT2D1Gv0E5T2PY4fdKiGq%2Brz3YrIOiWLtFn8BzPpIPL3XiR9UKtubIbVcYQ7PSbErw0%2FcRMRcwxpx%2FumlBPMkb%2FHt2M7XWTLa8\"}]}\r\ncf-ray: a47ef5054b692678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30496,"size_decoded":31462,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30496, version 1.0","md5":"1df44952fdd52f864f3594d1d89563f6","sha1":"2812b899c1e8a0110be0889b006134ccac356ef5","sha256":"bea34eba7331b6edc83d13b413dff725412a8b183c4a1f04afcbd7560e7f9dff","sha512":"771ec5b0c5ef1ed9ca9c6a9b6cd0fc817f8f66f8f6958bf62fb783ec7eb6841f1656e632bcc3d0bc5394b900c5b5ff04abb55c1230816127201652b0133ec949","ssdeep":"384:Ec7pBJ8e2/jLcPTsN4/fkZI34Z4feds0x7ddFP5nbzJCryepFSnmkhQaLqT6kze/:E6BJ8eq7ZM0x7dHPtPJIye2nHRpX5/","tlshash":"0bd2f12d95a8ac48d9f633ff71666e3663689507e4de02c9bd4f2c36312153c0598fb2","first_seen":"2026-04-13T22:50:17.242714Z","last_seen":"2026-10-09T17:03:54.84055Z","times_seen":19,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"arcuis.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.363Z","timestamp":1791565390363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://arcuis.icu/\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 09 Oct 2026 17:03:10 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a47ef509dda95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.981Z","timestamp":1791565390981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"otnRDWuYB2bA_GmS1Zva4LYgpkKGKktt8b7p6sblEMN0qKaeoWMl4-CK_ln9yXjW0wxJTQJeNrgc38mLR7eV9e5foOOr_ajctbICvwvbKw"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a47ef50daba856ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Echq0x3b08T3L0jOwJnsO7z9vP29F%2FRznVH4VIzJIpoZyv7AGWBSHAl1PF6x6qKEXCJ82r7f3QTkigP4ggDD2e3FN3RhgYe8OkNLgvGCvBNSzRci5gEcXyRSfacvY3CNwhTEMLN9kS49WHlzNryaHhDM%2Bk25Pvpi345V\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528504,"size_decoded":158095,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-09T19:39:33.380361Z","times_seen":376,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:10.982Z","timestamp":1791565390982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"vEeZmYEWhTFx1WKa-0dpqPEAzRl6II4IGUlGEKfNgF4HFG9_4dUhg3yTIgwkUiYj8PmHCEYjydFODPu3INcgG5N2eMWcLKlFCWnl9j4w"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:03:11 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a47ef50dabaa56ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jS7kqVyRCSV8ucByRu3CQOLvp7Xg9DC6kBPfzF0wlgvdJo7z11cvLotnQZqoiQoPiT2S1QLmFz6T53VJmJkBAUJBT2aWAZHvPEl5MJBbQ12D9dGecRMZFSkY7IenyQn44ejeH5zmtTHusx7i5p6qoKuyf7n1mTVeWGHL\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30003,"size_decoded":10151,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30003), with no line terminators","md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-09T19:39:33.380852Z","times_seen":206,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gate-6b0a69d2.talewinesr.workers.dev/","fqdn":"gate-6b0a69d2.talewinesr.workers.dev","domain":"talewinesr.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.223.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arcuis.icu/","date":"2026-10-09T17:03:13.130Z","timestamp":1791565393130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"talewinesr.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 22:49:38 GMT","end":"Tue, 08 Dec 2026 23:47:23 GMT"},"fingerprint":{"sha1":"34:20:F3:CE:DB:1D:AD:6C:ED:3C:23:B8:4D:56:0B:5C:E9:75:34:79","sha256":"02:43:5C:F0:AB:A2:7B:F4:F7:60:62:93:B5:63:1E:96:67:48:16:58:29:6A:AF:B8:56:33:F1:32:B4:DE:63:21"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: gate-6b0a69d2.talewinesr.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arcuis.icu/\r\nContent-Type: text/plain\r\nContent-Length: 2963\r\nOrigin: https://arcuis.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2963,"data":"40jr1amRqSi7ple7RH5b3UkjejOKCUcXBIqoqgvXf-WaWd_qERmmuU1tx6TWNR-5U3_A9321XuG0-1j8DSRF38yzNkaLA0Or8_tt0eS1SgJFs-hBzO0lOYjZbDCAioZIDeXUTNDO6QqMAEcZIRHCd6RSkLq4D8w8FM2rPDY5vS0mZKz8ZBfs7sxQw3WZcg3ZxmkJ2jT_6RNwr5qcCKEQ73_DCUIX6ydYllzussNv5rNzaovy6MU9SBFKXZPsTs_I7IdYkrp2rIHjwM_7pLxYJT53duteUj-STljNGODzi9aG9sK2cg63pQ2hv2ZKSnPtkswHMMqynnMzUtMCHX8yVHz4UoVkQgxSWaZxfWY4lrkEwjtCgSRxURXMikO5RZoZ6dO_J5G7t1WTYrAMl_b_xRxYruPakLA6bPMfQzjLVd3VaMXzw3DnJmk0Q-TL9O9yZzAi9goCBAr_QcKVxTtLiLpvOa2bDkTh8X5-oppjUSRCZpsWnlKv8_KXAGdst48cnmdOlQlV-hofz1cEcpAU-YX9BJZEx0gzz7jRxEJPfT8cUKkmxBrRSivgPde3RFAJLtrUCZQml-LFs9arThYRu7oluIuHhXRxFgqo7R23wop5IifSrCmFM7ipNs5e5ifzp-l_MIrCz4dsPAqf5kaw-6AXUgx1YW3_4hPgOEaSw7yzrhEUz3scMKWU34LIjF9HOrUzDMc10SzaMff-0yJIid3qM2VbjRUHEoGDAvmhveP5amXXEhzL7NBP3dFz7GQpc6y-p5GXVAEip0D3xzZrsu6UPFWs8hNhAag1jKEU1CJD1eLc6wt_hkfLw5OUCuIhlRc4tJUymW_WG67_bWeaNy-BH-w-2J3isiJIISDHJqQo3s3ZuEfJpihtgc8vkVrMjtvZOwWEwoFjFTAu3_SZF1MerFizvhtq47sP_Q5fCoww67P-h5pt7Ilyox0FumIlWredzZoWsuwXX4Js9TgCjYNrqarbScPm0mOXMlx2wFwCpkbSFaBikwR0rjHrfWKCE6ILkJVnr7o7CvxuNINkn9PO_ozQsWKRDHEiOn3b2NsXR3h2gXBY7XCizJZJGigz_wxsb15d9Yl8fXpXsotvi5rhbckaaJ1A0wGUcZIRS_l6scZR8ddwGY74KpEYFi17ZzWjmRTCl5xZPKCAsVpwGuKaKqy2nFWJuWapSge0a71Vddx5Q8uwROPWYOnqgfkImWE7pLnzVEeQ3NytM3I1DfcacaOgYpM8j43D6T2NZb-3JC3wcvfF5ISqSNR2ZQnZpfwGyTP0Tao1gqn1_VzSFysE_KEpntI6-d9NJqecv3t0mOrhOIJPV2rtwEHToJhWAx6ALQvkoCaakNqTwkugDD2qOYctE-f0CuBtDMj60N5RC8uKnZIKkDXfvIzLGWxXNlgWua4YvnRUvx97nT3pVe5Ffh4kXgrzC8YsqWDBPJAYM1G8VV5L_g_W-yPryd1jyL9aQtB6ReaprsmMvT6OVEHJ0PVtYFELzaQfegDF6R-NJ6afKiMW9Ol8n2NfXvS_jhJwqZ7n999X0-JXdFkYMTY9H0mHXqBWlbX5WjSF5y_No5qyhYiljOVtn19rIBdsK0KJs-xmHed2X-FPq6UlO9zBGPnZiT6FufllvmXnQt2fyRZqFEG21G4ixHGQCGg0o2Nh3ZhHss60jKGKXNbBV4vNrb0NrkCbArxrbMTMsIesxMbMLppBzWxWxxKSq2fU7Dk-C_jn-UTv819rvSsQAaKr4INEHRtsb0YEO4OwGOWW56amIe61RAaqA0ROzGKl6p5b4cyzWjmOLYC3jQ2Nne60mBSrUBcX9pEdIdXaF0dTbeLCI9YV8dkBCyzeiihCdALbvL5O7hWgnTsYUzA0o35zV1UmXTeFM0fdTlNwUog6_SXjrLfJcbqv0Nq2CZVPE9x1Xy8VI37rpY36nE3wqb3fq4wgNzvE5fou30F9YztD1y3Hs0zbmN1ahJA8KYfVPTpKEQ-Cozgu5hjqmtEPxfRZy3WYknI0_zypaScF1OdUfM9TcBa58xr5QUDQGbYAnCfSXbABx9DU2cWoapdSo8ySSDuod42Wz53wxDmu4nutanXffQNb-WAFHxJSK4MN3T93Ayt1MVVA6W5MEo8-KYxVHf8s8Zp0qOAvqfPXTW8UNA3di7w0YkPrsE-_wyqvcpsxRzZRvezBMXmaOEpU_0NnbwCu8zrAgCqVVb04yAhsVK9q2qwHG7t7XueonPXDt26DZcaIs60mwcC5RuTCRXz9O__Hpv3wM0jXjqRJJiuOpAbVcizvwuitCIdnT9scw_M2Pl-BvzB5AsaFCGyVT17Yio9HXhjOdEMeLsMsJk42f3ChT9GFCNdGIfjKn759M1PAAUZYA4BYOr-6MLr4Z7aubvOTLgKo5Bb7hH8ZWaLzHplaLhlZBNh2_t6CVhIxH9JdPTb0luUAcbsqaD4JLBYuEceLS_0CxZwGDP9pDGqiSBgP3gdG4t7pD4Z5Vwnvhx9K9IzAp-cEZ9_RcPow-InGKlmIZpB_0JSk6i84fcVobFkH3Ema0Lp5VunbTxrQoatO6IpJ34c8mDRRGqPWDLUIjFLCcTOrnxAqhRUVl6EF7bDm3jSVqa2bT4Q7saRoQP1Z4f7O1p723jZ2nTBA-O3maLS6LzlAvZbwMCSjFdnneAZWfu4YZHVp0KltcsD5GU7lnm74oSEvLjTIDFVo81E1kQiBqFHK_H_7_ylwTLTXljefaeHfHU-2K94ZDHC_0r5U1-ecNBvjV4DdPwzZXnhNutMd57kOw4pKQQ4CKVWi13WtoOv3HdyttVkFk_l31gezCF4zy_aPs4yr_tnjs-3fdkZCQzNYIohlCMVrgGyVErBvLHHdy81rSeXdSLd5EvyOIJ44Khrfzy50EYVdb3fGsNr-w5H14h3lmoi8g1ot21Mdsd5yAIyy7tWAiIBInZONUsCWHQ6f_JbIWwY"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxsSB7yH8%2BkmPCW7dugkH46gr3fDHHdnwzPq89INAn7Z%2BaANYzZTIdGW2hglF%2FxFIIQXuBncVU24hsNId9lbPbSF4jEu%2BVmsM35d8bxbMQyaW8SViRSx1vcBtO2R%2FNaoPtyNICoJIz7RdNCb%2BMitsTMtXJIKQUxNNy8t\"}]}\r\ndate: Fri, 09 Oct 2026 17:03:13 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a47ef51b0c784e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":790,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-09T20:18:43.553855Z","times_seen":24014,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}