{"report_id":"831f8698-35cb-480b-b6ed-9fce40cc1cd9","version":6,"status":"done","tags":[],"date":"2026-03-23T08:50:53Z","url":{"schema":"http","addr":"receive-origindcefi.xyz","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"receive-origindcefi.xyz/","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"title":"Origin","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"receive-origindcefi.xyz","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T08:50:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T08:50:30Z","timestamp":1774255830,"ip_dst":{"addr":"104.21.75.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45528,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-23T08:50:30.722906+0000\",\"flow_id\":952078265919233,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":45528,\"dest_ip\":\"104.21.75.203\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"quick-code-d48.cf-fxrcd27a.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2647,\"start\":\"2026-03-23T08:50:30.698113+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T08:50:30Z","timestamp":1774255830,"ip_dst":{"addr":"104.21.75.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45544,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-23T08:50:30.727200+0000\",\"flow_id\":2217981221709865,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":45544,\"dest_ip\":\"104.21.75.203\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"quick-code-d48.cf-fxrcd27a.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":940,\"bytes_toclient\":2720,\"start\":\"2026-03-23T08:50:30.698409+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"receive-origindcefi.xyz","ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-15","domain_rank":0,"first_seen":"2026-03-23T08:50:55.519489Z","last_seen":"2026-03-23T08:50:55.519489Z","alert_count":0,"request_count":6,"received_data":734887,"sent_data":2941,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"base.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2170347,"first_seen":"2023-10-18T22:23:56Z","last_seen":"2026-03-20T19:01:08.639322Z","alert_count":0,"request_count":2,"received_data":2007,"sent_data":1047,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-03-20T19:01:09.788674Z","alert_count":0,"request_count":2,"received_data":1831,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.llamarpc.com","ip":{"addr":"104.21.67.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2856799,"first_seen":"2025-06-28T18:40:21.321537Z","last_seen":"2026-03-20T19:01:08.83126Z","alert_count":0,"request_count":2,"received_data":2234,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-03-20T19:01:08.758978Z","alert_count":0,"request_count":2,"received_data":2887,"sent_data":1041,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"quick-code-d48.cf-fxrcd27a.workers.dev","ip":{"addr":"104.21.75.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-03-20T19:01:08.080692Z","last_seen":"2026-03-20T19:01:08.080692Z","alert_count":0,"request_count":2,"received_data":3328823,"sent_data":1138,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"receive-origindcefi.xyz/","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a04c5d31083c64a2e4377618af60947","sha1":"34c7abef378cb001d2f84423b0071562e6457d03","sha256":"243e5db894e0578e39548c927ae0ceb6dc0cc4797b6a762a0edc0fb445c93eca","sha512":"b89e2c6a5741309128c99ed3527a1e922bc2d989beaecc6e662f4cc1fc550449e7c54adfb0bfc5bf3cf93680ab7c7745798f2b661827f91a4f7ca31e33fe2be5","ssdeep":"","tlshash":"ccd0a7182030716914ce282d0c4f08ca7f328411e20849c9d5dc84547ef1f6401d0848","size":216,"data":"","first_seen":"2023-11-18T15:49:03Z","last_seen":"2026-07-12T17:31:27.503883Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/underscore-1.13.6.min.js","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6760078a45598a2693722c91c5a8f302","sha1":"713451338650fd586151b11da60c601132f02bf6","sha256":"85d5bb4cc9fdc4bd69ea36bc2978743089179a748bf8f201cc30bfe2c6c5d118","sha512":"614cb453c039d60cb8d3acf8daadb43c1574a8410b838bca5e034c5075d56bb1c8dbf8a54c01f83f9d473fec87263bd9e27981b68ca4037a30b36e55e1a4f2ce","ssdeep":"1536:M+wOalsJW0c/3cFPdpmjji5feDx0zbke0q98sYgM:M+wOesJW0c/3cFPdpmjm5f8SVYb","tlshash":"2ed361c9990bd8d08e5220ddd4b3e945e0680da3cdadf197ba2cddc2742dfa2854723b","size":132172,"data":"","first_seen":"2026-03-23T08:50:59.523107Z","last_seen":"2026-03-23T09:01:19.047823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"receive-origindcefi.xyz/index_1.html","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"receive-origindcefi.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:19:58 GMT","end":"Sat, 13 Jun 2026 14:19:57 GMT"},"fingerprint":{"sha1":"2E:5B:5C:51:02:D4:F7:94:87:47:38:66:26:2D:AB:EE:16:2B:27:BC","sha256":"3B:65:A3:D5:C7:55:B3:55:03:9C:2F:8A:52:AF:BA:DE:E7:84:48:EA:15:10:68:70:49:88:6C:95:10:EA:80:3A"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: receive-origindcefi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://receive-origindcefi.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 15 Mar 2026 14:50:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8hPghRu8e1grNID4rv78WwjgIclSdWo446qsCCjWP9UF1o11tKbYfsuZx8njRPghejlptCoKqC4FBYjP8EXFcTvXbNTcbHAyegsqv3o0wJMDnztczoD\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0c305b8daaa618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"948c3b0b89a440438cb10c44dfb25fba","sha1":"e4d35e5e283c4cfea043a022a3b06f0e85d231eb","sha256":"3de2c358acd98dd93f54af55a7d89ae64cca5757d76fb95ae74db8bd63389bdd","sha512":"fb5a9b43f60c13b8fa0fc50299d4083c2d3d1534753b8dc29871250020448c54f220d9ea2cad18d8515ece5afb532d23486cd870bce845d2b2d3d22630c9b7c0","ssdeep":"","tlshash":"72b01276d811080f6c50afe0cb8ae1c48400d838f0214c047ca5b180dd9c132c013a84","first_seen":"2023-04-07T21:29:48Z","last_seen":"2026-08-18T11:36:12.214296Z","times_seen":1141,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/4eac7b37afeb7c343041b408ce58abef2e22e087.ico","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"receive-origindcefi.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:19:58 GMT","end":"Sat, 13 Jun 2026 14:19:57 GMT"},"fingerprint":{"sha1":"2E:5B:5C:51:02:D4:F7:94:87:47:38:66:26:2D:AB:EE:16:2B:27:BC","sha256":"3B:65:A3:D5:C7:55:B3:55:03:9C:2F:8A:52:AF:BA:DE:E7:84:48:EA:15:10:68:70:49:88:6C:95:10:EA:80:3A"}}},"request":{"raw":"GET /4eac7b37afeb7c343041b408ce58abef2e22e087.ico HTTP/1.1\r\nHost: receive-origindcefi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://receive-origindcefi.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 15 Mar 2026 14:50:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b6c739-423e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoNn9f%2Fj1AwoDl6L7ihRMLz9ubZXO9adDGHMCNLSyoOjBYlMbYa3uFXfQ1LBdst8gsfd6RsLOpf7tQKDDFALUsuBq7lW9lLOeMy1gC5N%2Fhgr%2F1e9zWrb\"}]}\r\ncf-ray: 9e0c305b9daea618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"19ae3d5a04e9aeeb87e54b9db6d1cbb3","sha1":"4eac7b37afeb7c343041b408ce58abef2e22e087","sha256":"e5ff0d69c78b903073e6869eb934f67233428263b70f8c705e193e67d76403a7","sha512":"c4bbf2d1fb35d52fbcb694c375333efb5277af51b7be472a062e934500fbe690b1840771569ff1d154be2f0774806ba6201440042e9241ccf7f7fb6629c90ebf","ssdeep":"96:Jz5yvs1bEDiGGkv2HUw0mvPREFziIB+9AwNFbHlJddgacLLRHTVZAITN:55yU1BwvqRDIB+LjcXRHT42","tlshash":"df720117fb34efa5ea6c2573e798bede32be6bf7d109c8808839053495641180b15d21","first_seen":"2025-07-03T01:41:15.446658Z","last_seen":"2026-06-09T08:43:26.584128Z","times_seen":14,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://receive-origindcefi.xyz/\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0c305c9cb6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":64,"dns":27,"connect":10,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://receive-origindcefi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: b6902829f58d830ce7df00ca00c1dd4d\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0c305d2fad8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9465ed2043f68d5bc72c3a0c7cc78232","sha1":"0a1a8f1736c0cbeabff0efcdd62ab3b60ded874c","sha256":"8be19157005b16a349d5cd515cd9b2f8847e6ad73b2fc76c166ad55145eafd22","sha512":"3b473066452b054bad571e069ab45b2c8fc9d91bf578233a7adef4ec6dc57c31ca6aca626ac513719791ce01b9168fc6bcf98959c637f950f8443d711781edb1","ssdeep":"","tlshash":"d611dce01a24d890f1274f69f3ad7a895135334ffbc84ace400802e501b2820ea0ef8a","first_seen":"2026-03-23T08:50:59.520336Z","last_seen":"2026-07-09T03:47:10.171396Z","times_seen":112,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T08:50:29.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"receive-origindcefi.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:19:58 GMT","end":"Sat, 13 Jun 2026 14:19:57 GMT"},"fingerprint":{"sha1":"2E:5B:5C:51:02:D4:F7:94:87:47:38:66:26:2D:AB:EE:16:2B:27:BC","sha256":"3B:65:A3:D5:C7:55:B3:55:03:9C:2F:8A:52:AF:BA:DE:E7:84:48:EA:15:10:68:70:49:88:6C:95:10:EA:80:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: receive-origindcefi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 15 Mar 2026 14:50:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRsc8Awwo6O8FhvomTnv1Hu%2FToO01gdMFYjY6azhYijOjqC2Qr%2FVbtDfoMUIyEcBCy3jCIYWhruym5gUr37B98YtbX%2Ba%2FuRQ5VmK19t7qXMDwHd79pgy\"}]}\r\nage: 33097\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e0c3057c8a735cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}],"data":{"size":406108,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (62975)","md5":"b5f78221a3073cf6886804d0dc3bdcb6","sha1":"b5f8d95dddc6aad385a91ed1c0cc5264ca3434c2","sha256":"0810589a8202d03bc24ce22b693090ac003481b503b525805972ed5c5947e334","sha512":"843911fc1f5f356923bb18c1de6c88a0162308ecc9cad60f7d7a1d7aa54557a61a78d0cfd814246a1ca1b83a6f3aca31c05b5bd231f0a1811d453aad07f1ba57","ssdeep":"12288:xT0k1nyUrXQQQIH7z9NErS8/ZDGZjJJ/Lhdgmjl/rowLlZb:xT7","tlshash":"77840919ab90102b7013e65832d16bafa39ff823d709df7f68d625a4c5ce2e405b7760","first_seen":"2026-03-23T08:50:59.521404Z","last_seen":"2026-03-23T09:01:19.041814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":97,"dns":68,"connect":8,"send":0,"wait":27,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/2b5148a18b90f933e47bf895c26d61a52d21d9d8.svg","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"receive-origindcefi.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:19:58 GMT","end":"Sat, 13 Jun 2026 14:19:57 GMT"},"fingerprint":{"sha1":"2E:5B:5C:51:02:D4:F7:94:87:47:38:66:26:2D:AB:EE:16:2B:27:BC","sha256":"3B:65:A3:D5:C7:55:B3:55:03:9C:2F:8A:52:AF:BA:DE:E7:84:48:EA:15:10:68:70:49:88:6C:95:10:EA:80:3A"}}},"request":{"raw":"GET /2b5148a18b90f933e47bf895c26d61a52d21d9d8.svg HTTP/1.1\r\nHost: receive-origindcefi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://receive-origindcefi.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 15 Mar 2026 14:50:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69b6c739-21a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFCGrPbJjo41g9Wr%2BTZ%2BmYdjFPLjs7EQZDIri2p%2BGdEbX4jGhb%2BOHInlRppQYqSDLuqG%2Fj6a3dUsnSXUUzJFicXJSpaHviUpqgugNxZWx6yzJ1i89C2x\"}]}\r\ncf-ray: 9e0c305bddb4a618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3ddd6025a06a78535b0d432d14905bf","sha1":"2b5148a18b90f933e47bf895c26d61a52d21d9d8","sha256":"825310f9bcc8892559317bfc87fc28d5d7bad06c02d562b5740aafcf4b040803","sha512":"618481c44206c46bf35212f5b2206457c641417ce2bd575867eb6cf43776a7e363ae7aef7ce339d304c4d73a1054b1d5f6c5ebf6f8d8dbf2bdf41d442e2e33ad","ssdeep":"","tlshash":"d2f0c9d8c72c3044c70a97105cacb8e3d4d9a1cd999004eab8e09ae460a9b97dccadd1","first_seen":"2023-04-07T07:31:08Z","last_seen":"2026-08-18T17:34:42.14454Z","times_seen":5184,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/underscore-1.13.6.min.js","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:29.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"receive-origindcefi.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:19:58 GMT","end":"Sat, 13 Jun 2026 14:19:57 GMT"},"fingerprint":{"sha1":"2E:5B:5C:51:02:D4:F7:94:87:47:38:66:26:2D:AB:EE:16:2B:27:BC","sha256":"3B:65:A3:D5:C7:55:B3:55:03:9C:2F:8A:52:AF:BA:DE:E7:84:48:EA:15:10:68:70:49:88:6C:95:10:EA:80:3A"}}},"request":{"raw":"GET /underscore-1.13.6.min.js HTTP/1.1\r\nHost: receive-origindcefi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://receive-origindcefi.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 15 Mar 2026 14:50:33 GMT\r\netag: W/\"69b6c739-2044c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PjFXZCpiuNQnsQAO6QZCmyNIE%2BWAnSFHjNZVsrQIrax6Jdb0IAd6mX8HtiNuRtpRssvZlT1mMND7%2BX6J6OSUPH3z5pfglc2GbjhTzwc9Jxl6u%2FoXtd3%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e0c30595d5aa618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132172,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6760078a45598a2693722c91c5a8f302","sha1":"713451338650fd586151b11da60c601132f02bf6","sha256":"85d5bb4cc9fdc4bd69ea36bc2978743089179a748bf8f201cc30bfe2c6c5d118","sha512":"614cb453c039d60cb8d3acf8daadb43c1574a8410b838bca5e034c5075d56bb1c8dbf8a54c01f83f9d473fec87263bd9e27981b68ca4037a30b36e55e1a4f2ce","ssdeep":"1536:M+wOalsJW0c/3cFPdpmjji5feDx0zbke0q98sYgM:M+wOesJW0c/3cFPdpmjm5f8SVYb","tlshash":"2ed361c9990bd8d08e5220ddd4b3e945e0680da3cdadf197ba2cddc2742dfa2854723b","first_seen":"2026-03-23T08:50:59.523107Z","last_seen":"2026-03-23T09:01:19.047823Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.21.67.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 14:31:49 GMT","end":"Tue, 16 Jun 2026 14:31:48 GMT"},"fingerprint":{"sha1":"C0:41:2E:85:D3:46:6F:32:0B:D7:D6:AD:8E:EA:BB:91:E1:49:11:E2","sha256":"23:CE:82:F5:A8:F7:8F:B3:BC:23:98:CE:46:13:63:4C:CC:B2:A9:70:B8:82:EF:91:9C:25:2B:A5:09:B2:F9:CE"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://receive-origindcefi.xyz/\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 2.0 Caddy\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TlPW9KVyMxwBwskpq6kxCISocRtlnBP%2FmDGnMt5gaeHnR4x9VJ%2FGM6egk4NKeqBLZv7Ut7qPQ5WaH7n3p%2BZ8k0PAhZQCEPvZpPYrbLDaOfZ\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0c305c6859b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":34,"dns":21,"connect":10,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://receive-origindcefi.xyz/\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://receive-origindcefi.xyz\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9e0c305c8c478be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":47,"dns":34,"connect":3,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://receive-origindcefi.xyz/\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncf-ray: 9e0c305c8f255fac-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=XQfO1jG5JHv1PBM4EP_13kpzWx68zhAIAo0x.vNTqkg-1774255830-1.0.1.1-W7cRqlwz1K5iiP2n394WZlOctcxzeMZRlikatx5YXCkvFy6YrGg7nZHIaLetPJCukgeDKpnET8QUIgf6cWRpT3mcHGcrW8z_7L_5Nfxzz5s; path=/; expires=Mon, 23-Mar-26 09:20:30 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PTV1FzqjuJreYCVhC3wZP7H3FrAcEB5mdgmBLKJgQKFppaUf%2FlRbsvi8tXnfVBprLuQqNXDVlfxB5RZFPU3rlBIxjkXU1aSi5RjibjsnvevBewfOsoj0xOL7735Cp8bX5Cw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":45,"dns":35,"connect":5,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-origindcefi.xyz/0ae59f1da81b96926b0777964204fa9dd3fabcdb.png","fqdn":"receive-origindcefi.xyz","domain":"receive-origindcefi.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:29.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"receive-origindcefi.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:19:58 GMT","end":"Sat, 13 Jun 2026 14:19:57 GMT"},"fingerprint":{"sha1":"2E:5B:5C:51:02:D4:F7:94:87:47:38:66:26:2D:AB:EE:16:2B:27:BC","sha256":"3B:65:A3:D5:C7:55:B3:55:03:9C:2F:8A:52:AF:BA:DE:E7:84:48:EA:15:10:68:70:49:88:6C:95:10:EA:80:3A"}}},"request":{"raw":"GET /0ae59f1da81b96926b0777964204fa9dd3fabcdb.png HTTP/1.1\r\nHost: receive-origindcefi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://receive-origindcefi.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 173652\r\ncast-mode: default\r\nlast-modified: Sun, 15 Mar 2026 14:50:33 GMT\r\netag: \"69b6c739-2a654\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8AB%2FUsE5LlvS3X4wXGOrNs6SZBZMvIGnrjK7UmVS%2BunDyAt3kGC91Dr887vf%2F%2BTOzoEHKFxGj3a264qfL0Sog3TyVDCKGgLwsen7qv3Sdpn5nHyi5sx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0c30595d5ba618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 992 x 328, 8-bit/color RGBA, non-interlaced","md5":"3c8f84faae549f31a70377843d356dd5","sha1":"0ae59f1da81b96926b0777964204fa9dd3fabcdb","sha256":"aaceef58091e22b8cd8665476512c862fcbb5fe85262ae3bf5ebe0479e175110","sha512":"3ac175648b7d7b20a7e29f2d10b35d99d90772fc04aba3f269727c328ed3811eaafda573e25ca3f93131a9b6ed4d2cd5ee1ec362e0c4f5577e269cfa669808c3","ssdeep":"3072:U/jlWHA/EhLEF3S1d5413KnxQjP8awh90sFOP86hPpExRCd9dNPmCGAcmpjUwL:U/jYHpIi2r8awh90sF7QhEwNPmCGAc+p","tlshash":"1304126fb7068c5c30adf799d6ca99c94641f101e9233f70dee72da243560468d8787b","first_seen":"2026-02-21T20:24:31.015038Z","last_seen":"2026-03-23T09:01:19.048528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.21.67.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 14:31:49 GMT","end":"Tue, 16 Jun 2026 14:31:48 GMT"},"fingerprint":{"sha1":"C0:41:2E:85:D3:46:6F:32:0B:D7:D6:AD:8E:EA:BB:91:E1:49:11:E2","sha256":"23:CE:82:F5:A8:F7:8F:B3:BC:23:98:CE:46:13:63:4C:CC:B2:A9:70:B8:82:EF:91:9C:25:2B:A5:09:B2:F9:CE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://receive-origindcefi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 2.0 Caddy\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVIxfHwueTFpWsS8V0GvZHnjAklqGe7mXX%2Bot%2BZuWtzeHo%2BCOlLBTBO8%2F26zTehE8RpNtfabcbfkp8e0j%2FTzWJLKg30Q8v5LTkaD3nQLY9K6\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0c305cc945b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"71af73f90ec8dde5f2cd121e423be6c7","sha1":"0217717b33eb1f6f67007ddf790b77c85e6f2a5b","sha256":"2eefd99aff6ce4f5cbe8b351353a84b24b7e7650d56bc2fec237200db2c78c38","sha512":"e1ccf373584feecae36cd24fa54ec423b4400551530376956fb1501d500641c47f3420a81d51d3bdb10b39668db1efc57a2a4cf3d603b9359c8a58856d937d52","ssdeep":"","tlshash":"6911dce01a24d850f1274f69f3ad79895135334ffbc84ace400806e901b2820ea0ef8a","first_seen":"2026-03-20T19:01:13.408235Z","last_seen":"2026-05-11T07:42:34.003007Z","times_seen":114,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://receive-origindcefi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9e0c305d0db4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"05b1aa547abf2de4e40f8b948d0b2d64","sha1":"d116dda1f8405ca694c9c130448359a98f87072e","sha256":"94612cecb8af5cb1a79f99afb395069ab537169cfa3fced6db35760e6f5f5fb9","sha512":"132b4e1e9049058f19a55fc091f0e9c1ad34cd1988a01327645690970eff27d30f01a0f1bbac451d8ef10bab64b965619bb5e29d195e380cda59bb83bb103d22","ssdeep":"","tlshash":"0911dce01a24d850f1274f69f3ad79895135734ffbc84ace400806e901b2820ea0ef8a","first_seen":"2026-03-20T19:01:13.403202Z","last_seen":"2026-07-09T03:47:10.149844Z","times_seen":121,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://receive-origindcefi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=D9q1FWZKYwR8snfTdibxiY8Jalh2P96t6QXpRrRqWBc-1774255830-1.0.1.1-AdocPZzhMIgrzTrgq2YbuSfUzsOuN0JLRndeCp7yJ.9H61n6EvB3Ea9bulsGmgzwJggFdYqK2bHBowN.uvdYuH.Zw0mz8gfoFgjoV_yVcTM; path=/; expires=Mon, 23-Mar-26 09:20:30 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4lZE%2Brx7vPr%2BsX3Ag%2F2t%2FCCKkeei9pd4li4UL90tRIn5X6SI4B5WCi9QCXv7EXRcdcZPufBl9V01goe0ymezM7xcL5v2upS%2BzImRosSukUqAS0jf7Tm06lZT5iKDH%2FhZkZs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e0c305d789a5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"483713166cded9ba7aa277a16dd58edc","sha1":"77b2f6db84a49fa26d14e33968b22a1c7236ddb5","sha256":"a5451600be680726562dfc60c358c96ab62c6534f6e573071b5fba00ff4f839e","sha512":"ed7795ac4df1c92c12c8957ceef10a54cf21ec9a95d72a5271c8494b2459769d23a3c02f0deb9afd670903190875c7226ee68c9025497bafafb665e4c5adfcb9","ssdeep":"","tlshash":"6011dce01a24d850f1274f69f3ad79899135334ffbc84ace400402e901b3820ea0df8a","first_seen":"2026-03-20T19:01:13.409151Z","last_seen":"2026-07-09T03:47:10.164835Z","times_seen":123,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quick-code-d48.cf-fxrcd27a.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"quick-code-d48.cf-fxrcd27a.workers.dev","domain":"cf-fxrcd27a.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.75.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-fxrcd27a.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:40:40 GMT","end":"Mon, 15 Jun 2026 01:40:39 GMT"},"fingerprint":{"sha1":"9A:1C:A5:94:0B:F7:EC:49:70:16:3F:4F:91:7F:D8:E9:0C:4F:B0:4D","sha256":"3D:7B:77:05:4E:91:A5:DD:01:C6:86:6B:D3:A4:29:AF:9C:D9:4D:0D:87:1F:F0:47:63:2D:51:D0:B3:0A:9C:81"}}},"request":{"raw":"OPTIONS /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: quick-code-d48.cf-fxrcd27a.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://receive-origindcefi.xyz/\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lI4YBsDSlsfqOFDbxAp4Fj%2BNhoxCXUnFDg80ZbAede9COIvIzeP5g%2FM41%2BbbjPY5hK3PIBDknzezXNHwOhd%2F3%2BCTAESXR5WC8SxeNRdIgy%2BM9UGxXxAw8oFdZ2PWbwU3hROllWM7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0c305e1b99f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":73,"dns":43,"connect":10,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quick-code-d48.cf-fxrcd27a.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"quick-code-d48.cf-fxrcd27a.workers.dev","domain":"cf-fxrcd27a.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.75.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://receive-origindcefi.xyz/","date":"2026-03-23T08:50:30.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-fxrcd27a.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:40:40 GMT","end":"Mon, 15 Jun 2026 01:40:39 GMT"},"fingerprint":{"sha1":"9A:1C:A5:94:0B:F7:EC:49:70:16:3F:4F:91:7F:D8:E9:0C:4F:B0:4D","sha256":"3D:7B:77:05:4E:91:A5:DD:01:C6:86:6B:D3:A4:29:AF:9C:D9:4D:0D:87:1F:F0:47:63:2D:51:D0:B3:0A:9C:81"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: quick-code-d48.cf-fxrcd27a.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://receive-origindcefi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://receive-origindcefi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"ykwej7cp3ccjdmzrnxap\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:50:30 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YhiSe4idb8YIlpbEFq%2FCACPMz6yFwl26Ud%2FY6NHoxSm2%2BGwwZuMgBzxOW5bmywLskoqcZbGR7X%2FzB0zWZqpxEdWz7f40k6Us9xbuVhMPSb6ZyM1T%2Bvdey6ekpOI%2FCzk5QSp4YoW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0c305e3bd7f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3327512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3a02a58b0faed09ce6a7583551b8a89a","sha1":"84cf0e1f6a5f0238271843f00f7a7fc848b42599","sha256":"a7e74a0f267b45827d20e7523ef6d12cc11856f11d21a7e4db27a7e644b92bef","sha512":"dfa1237e3bb0a58c9c96a9c8c61a00893682c4d9a07f6e89239cbc99011d6c0102a909b427e11aec4e1a717f53977de4fa36851cf440b58348efddabdc080d3b","ssdeep":"24576:Gb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeY0UUJZR5:sGkwdNZngknp8","tlshash":"162523937f5aa438cf4c1a96f0fb1e0f38440d111448b5e9f65ae8c63659bb081eb97e","first_seen":"2026-03-23T08:50:59.527345Z","last_seen":"2026-03-23T09:01:19.039566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}