{"report_id":"937e31c3-2864-4272-b1f6-e1b7eaedd9bb","version":0,"status":"done","tags":[],"date":"2026-08-14T12:15:02Z","url":{"schema":"http","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.4.115","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"title":"Claim Your Airdrop","dom":{"size":25143,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4239)","md5":"0732b61faf6e05810ce2eab67687ad24","sha1":"27ff8202c58c61a01bd92da63d5fa6727b930d59","sha256":"d1859693de1826fb1f1d10719cc96fa2abfcc72815fad93fabdc98a6a6682c8b","sha512":"36272aec9bd21b22a5428b40e9e9923fbbc404fa06f53c91fb2c1019987225bb74c57ae9483b87939f42fa08d9e895940f75c3ae8c65f0246b64a5359d699680","ssdeep":"384:WKIUrbBYR98+fXHoFoSJkZcd9Ips+cvn++lLJE/GEPxS7PKsHoX:iObBe98+fXoFoSJZ9IW+cvD6GSKhoX","tlshash":"12b2f62623672024692795a92bdb5b093224e507e116cc783edc5384cfc9a99cdf7bec","dom_hash":"domhash5fd0df851fc827007b59555ebb9720c5","first_seen":"2026-08-14T12:15:12.535167Z","last_seen":"2026-08-14T12:15:12.535167Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"104.21.4.115","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T12:15:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"frogecoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"relay.walletconnect.org","ip":{"addr":"35.156.195.101","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-08-13T18:14:12.796464Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"frogecoinrbh.lol","ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-14T12:15:06.784383Z","last_seen":"2026-08-14T12:15:06.784383Z","alert_count":3,"request_count":3,"received_data":22328,"sent_data":1423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-08-10T12:43:40.584065Z","alert_count":0,"request_count":7,"received_data":1101592,"sent_data":3476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-08-11T03:12:26.821657Z","alert_count":0,"request_count":7,"received_data":1202928,"sent_data":3920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"54.74.99.136","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-08-13T18:14:11.71184Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zen.claims","ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-08-14T05:04:45.945842Z","alert_count":10,"request_count":5,"received_data":1051432,"sent_data":2718,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hexalink.org","ip":{"addr":"172.67.180.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-24","domain_rank":0,"first_seen":"2026-08-13T18:14:10.758941Z","last_seen":"2026-08-13T18:14:10.758941Z","alert_count":0,"request_count":2,"received_data":49162,"sent_data":1204,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"frogecoinrbh.lol/acd714403a.js","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c939c1aeabd848f0c107a327b28221","sha1":"26bc709a6e7253e6f7917cd5164e74f700f34490","sha256":"7a7424a155777024bb994f19f7f7d5ee747c415d98e6f586381e3b1015a82360","sha512":"7281a1708a69dacf61f22b7ba7bfb14dd7f1728195403bffeb1544a1d74f2e09c825d33b3cdd0b037fc675ba4be823c4610744bab23c586a83355d206f99dde4","ssdeep":"","tlshash":"0e21c0dbba52f4401785b7b6986f740d9767bd0adcda4838d40055c23dbeb2fd012568","size":1416,"data":"","first_seen":"2026-08-14T12:15:12.569889Z","last_seen":"2026-08-14T12:23:43.032289Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a4738e759da343feabeef8d5f16f0317","sha1":"961a38a44fe438b4040ac7074ef1824b6b16d5bb","sha256":"3ef04559f44895f125c3887548780c31abdc680f613baa81bc48b339e70a0602","sha512":"920b2203c58073493a75fc8194dd93781c09a24154a4387a8634ca88e6edecfb5932f6894e7995c4e5d64f77b565fc747abf3a0f882086d3b96e593a8d3e832c","ssdeep":"96:acGXXgIZjmAseM5VRADX5i8W4+z7Hkk3E5hhA2Mak0lk7HwPV9e:oXgIZRB8VR98W4+3Eke2farW7HwPV8","tlshash":"0cf14a2276d5708a01cd0b3e721857f5c1aada46ea9e8009f308edf874ed8d77a4c6f5","size":7723,"data":"","first_seen":"2026-08-14T12:15:12.580734Z","last_seen":"2026-08-14T12:15:12.580734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"09c96f4e25616399974def53bdf14c95","sha1":"539ea88c33d6b2c9794d88b2725679ea55be9839","sha256":"a42070e168f5fd54758479e48a4035af68421e15adf638832f5aaf6c374a0dce","sha512":"21da0de8e126f2215e4adc37cd54653e240803f8819eb12a99e2a4ec896b92b37ac546e3299e011d4a933ff237d61933913e0d68d51f157c015cd030c602961b","ssdeep":"24576:jqYQVk57SN5/O6Fc/+aoml8CbFzgm+8K4fe6LK7U:jqYamYc/LL9R","tlshash":"a525f19d0c334269669846f87c5e0b883e585bdca498e73b9436e0b77bc12ff50d7862","size":1047799,"data":"","first_seen":"2026-08-07T08:41:26.920774Z","last_seen":"2026-08-14T12:41:17.024145Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98588bcc0a0cab5f42edf8240982adb1","sha1":"f3d3b68aaf236e42aa5a1a4894b8898fc4d6b7e1","sha256":"49180f34668c899b71c196ca46984099a60ae8ea9538484eb3b13ab90c577568","sha512":"8a546adb55090ca92f07b411b57d017e3cb7a621c31631ddc690442d66cc5ecf96c61d8cefff4e7bd68563a93cf7da02a734cd48d1b81ffff4c82f59570eddbf","ssdeep":"24576:/P2hH1DL9DifRQKuU2iv2qwiFx9pyOynMJRjtu61MgYHC66NqdHhQGVNaH6EDXCW:/v/pbyMJRxu61MgYi66sdHhQGVNaH6Ed","tlshash":"a765d84023d06c58234b9fb7772bb4e5e41f0a6f78980d8fd514bc616aaa617fbe4930","size":1528205,"data":"","first_seen":"2026-08-07T08:41:26.923461Z","last_seen":"2026-08-14T12:41:17.026319Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"172.67.180.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-08-14T17:21:58.802705Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/assets/index-ydvr3Ite.js","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"172.67.180.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a121c7a09ba943b5a1986d895e39d5","sha1":"c6f1554cebb57962660acad7e682975254b7e3ac","sha256":"188a8559f685c8b370632b34a2f4277803e983889f617e1aae37b4fae6056047","sha512":"438ddb8c5a832402c8f65bce08d7c420e49658383813d0e949c0e451f0038f2d730a64a8d61b28a71fc6dabc776ad2c9c30b9396ff8d8cd2e6a1a18694d4a3bf","ssdeep":"768:FEmJF1MGcHXrir2SJTGcclC8HkKmCJMoDjDXtN/YhX2pr5VicJZZiDmNz:FEmxMGgkUc2CpOJNrtpMXeraeGq","tlshash":"1723d1ac5823920c05da477c1d5f1ec4acbd4fe8998d179bd42b90f4b7e284a44dfda8","size":46666,"data":"","first_seen":"2026-08-07T08:41:26.855141Z","last_seen":"2026-08-14T17:21:58.786713Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-14T17:21:58.757191Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-14T17:21:58.758145Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-14T17:21:58.750906Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-14T17:21:58.79305Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"172.67.180.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b255518ba5a353033a9530c016e6806","sha1":"bcd20754a7a5d6aafabd86a945aaefca9261d362","sha256":"9892ca840b0515a934cfa941dbd9958d902b8b4c50bf5e63a6073b25df587812","sha512":"7b6089282406f4370ddb9e4a727eb27a6fa7ce8afc36a163706c0a805f4670997de0e088629d482642d53eac50c966197cd4f386c2177b9b47324fcc45b5d95f","ssdeep":"768:01d2sLfTiPurQC47583BL6kHOPqnlHRhVRa1yKDQgkEWKfvG9TClDdHdRYCmLk+A:ad2WfTh4ZHf3keW8ofSHw2","tlshash":"dc4392d263d06914234faebb732fb9e5e92f199f3450488fc214fd50a6a5716eaf0630","size":56403,"data":"","first_seen":"2026-08-07T08:41:26.927185Z","last_seen":"2026-08-14T17:21:58.803548Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-14T17:21:58.787732Z","times_seen":713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48bc472ed8fd32c0545b880d3dcbbedf","sha1":"692fc7d2aa3feaf6e198aa514c8998e504f6c808","sha256":"b4081ff60ea675c75f4b8a6b22eacb8d16eeb0298b8239278885e86835c84dfe","sha512":"77aad7e6326fbb424c0478f7aad4e3794e02b9c7edaee14496eb86564396125d9a3cf47cecc5f4bc7e1dceb1fc927b3f60007aa0b33e7f94153f8b410b58f157","ssdeep":"96:5zJWE7Afi+ZzMlEU0w9MUb6dqN2xdeCGOdH+t1KxzY/roNmpSTIfmwzZ/8yHNH:5qi+pMlEraFblid5GEPxczUnIfPZ0yHd","tlshash":"0de1a21e277b122609a380f71bdb60147721e90bb1a5d09cba5cd3684fd02a1d9b3fdc","size":6977,"data":"","first_seen":"2026-08-14T12:15:12.587762Z","last_seen":"2026-08-14T12:23:43.039079Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-14T17:21:58.773428Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-14T17:21:58.756093Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.74.99.136","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:36.176Z","timestamp":1786709676176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://frogecoinrbh.lol/\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 14 Aug 2026 12:14:36 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T17:46:16.793027Z","times_seen":17890587,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":34,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:36.956Z","timestamp":1786709676956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"QzL1bYRwANyT4ypoWoEH\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQ8fdfRqyviuokV1vwK4SyBOZ0slcJCX3mos3yZuEEPhZvBLiW8mMg10ZwjsBsHPOkGBtzS1npYq%2F4MeKLwWC%2FEWPNY4oP8KxxTru49qc3Gf%2B4YGcTqQgJtcaRfu\"}]}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2afe1593f75b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047773,"size_decoded":809297,"mime_type":"application/javascript","magic":"data","md5":"9a7ae4c7c226267c1907ad53b66e75db","sha1":"d5b600a2dc95eefcdcf4d86bd8897a13bf1fedc4","sha256":"3155ca9f2cc7d1ecac2e9ba6367758dc2c4b10d984973d4a1bef3c83d4cd86e6","sha512":"2082bd0f61dad046b5ed6dd4da28cc8cc678afd26e7653a0611fa226aa10b1f979ed6d6e2b19c2771d98c4134b0355b1cf273265992b062457d4b7d4e22f4f9f","ssdeep":"24576:gqYQVk57SN5/O6Fc/+aoml8CbFzgm+8K4fe6LK7j:gqYamYc/LL9a","tlshash":"1325f19d0c334269669846f87c5e0b883e585bdca498e73b9436e0b77bc12ff50d7862","first_seen":"2026-08-07T08:41:26.843351Z","last_seen":"2026-08-14T12:41:17.013025Z","times_seen":25,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/assets/index-ydvr3Ite.js","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"172.67.180.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:38.025Z","timestamp":1786709678025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hexalink.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 09:56:11 GMT","end":"Tue, 10 Nov 2026 10:55:02 GMT"},"fingerprint":{"sha1":"95:C5:E2:BB:D1:18:69:76:64:FC:46:3A:0D:9C:CA:8A:97:4F:AF:91","sha256":"E9:3A:BA:74:43:16:14:40:E0:D2:A3:B4:15:9F:8D:90:CF:52:10:56:57:B1:42:8F:29:45:34:88:2A:4E:52:5B"}}},"request":{"raw":"GET /assets/index-ydvr3Ite.js HTTP/1.1\r\nHost: hexalink.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Aug 2026 10:24:24 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a7af858-b64a\"\r\nexpires: Sat, 15 Aug 2026 05:04:05 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 25832\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omwFLwuN7WwZpjdUxB3RX%2FrV8wx27ttN%2FZKfMXx7F0yw1BmUvLt4I%2FvmLC89hnn0Ec5ZWbR%2FG1YEjXQ8szV%2FgF%2BksJ2xXe48%2BKLc3GN0Xix297%2FCP3mbhOSEBscdZCw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afe15fad3456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46666,"size_decoded":35376,"mime_type":"application/javascript","magic":"data","md5":"69a121c7a09ba943b5a1986d895e39d5","sha1":"c6f1554cebb57962660acad7e682975254b7e3ac","sha256":"188a8559f685c8b370632b34a2f4277803e983889f617e1aae37b4fae6056047","sha512":"438ddb8c5a832402c8f65bce08d7c420e49658383813d0e949c0e451f0038f2d730a64a8d61b28a71fc6dabc776ad2c9c30b9396ff8d8cd2e6a1a18694d4a3bf","ssdeep":"768:FEmJF1MGcHXrir2SJTGcclC8HkKmCJMoDjDXtN/YhX2pr5VicJZZiDmNz:FEmxMGgkUc2CpOJNrtpMXeraeGq","tlshash":"1723d1ac5823920c05da477c1d5f1ec4acbd4fe8998d179bd42b90f4b7e284a44dfda8","first_seen":"2026-08-07T08:41:26.855141Z","last_seen":"2026-08-14T17:21:58.786713Z","times_seen":33,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtwM3U2R3ZpeWdxUk14RmFQR3pUcGNZNjdGVTZYZTRtV3JmaGNRZzVlbkNwQiIsInN1YiI6ImY5MmQ5NzQ5MGFmNTg0ZWI2N2M5ZGQ0MWRhNjVlMWMzNDUzZTg2NDdlM2I1OGI1M2IyNjU0MzYyZDI0ZWExYzEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4NjcwOTY4MSwiZXhwIjoxNzg2Nzk2MDgxfQ.drMsy-CnYAoNl9EKQZglu-7UzOISs1rZTpSX3pISKQPl-kuGmixUnqqWoGAe9LGNnH1_vFpKTsfxujPBEIikCQ\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"35.156.195.101","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.734Z","timestamp":1786709681734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtwM3U2R3ZpeWdxUk14RmFQR3pUcGNZNjdGVTZYZTRtV3JmaGNRZzVlbkNwQiIsInN1YiI6ImY5MmQ5NzQ5MGFmNTg0ZWI2N2M5ZGQ0MWRhNjVlMWMzNDUzZTg2NDdlM2I1OGI1M2IyNjU0MzYyZDI0ZWExYzEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4NjcwOTY4MSwiZXhwIjoxNzg2Nzk2MDgxfQ.drMsy-CnYAoNl9EKQZglu-7UzOISs1rZTpSX3pISKQPl-kuGmixUnqqWoGAe9LGNnH1_vFpKTsfxujPBEIikCQ\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://hexalink.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IqcClwysQGMMoI5zS67jhg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 14 Aug 2026 12:14:41 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: ddsWNbecmLyG+V1NhWDNgVORdTQ=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T17:46:16.793027Z","times_seen":17890587,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":109,"connect":128,"send":0,"wait":24,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/favicon.ico","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:36.174Z","timestamp":1786709676174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frogecoinrbh.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 01:57:28 GMT","end":"Wed, 04 Nov 2026 02:55:45 GMT"},"fingerprint":{"sha1":"59:8E:AF:B1:26:65:C8:A2:94:D7:A2:A1:5C:3C:B9:0B:53:C1:49:7C","sha256":"36:A7:7E:C2:6F:54:E4:E7:A9:8D:D5:C8:FB:DB:5C:A7:7E:B7:20:CA:CF:BC:6B:72:51:75:41:3B:36:19:D7:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: frogecoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://frogecoinrbh.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:36 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scoWJL3UZIXKEJyhRr2geHHfkbSaYoDbgjhBoGBNTI91svEtIoJqlPwiFLPO9DTqtMdY8oMUv8WrY3U1QARon%2FYEY4oZ8xSVoRMe5qRspwA4SfWeM38SXeotWHWeGXvC%2Fqra\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afe15419cc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":1049,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-14T17:42:58.907723Z","times_seen":550696,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"frogecoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"hexalink.org","domain":"hexalink.org","tld":"org"},"ip":{"addr":"172.67.180.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:37.714Z","timestamp":1786709677714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hexalink.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 09:56:11 GMT","end":"Tue, 10 Nov 2026 10:55:02 GMT"},"fingerprint":{"sha1":"95:C5:E2:BB:D1:18:69:76:64:FC:46:3A:0D:9C:CA:8A:97:4F:AF:91","sha256":"E9:3A:BA:74:43:16:14:40:E0:D2:A3:B4:15:9F:8D:90:CF:52:10:56:57:B1:42:8F:29:45:34:88:2A:4E:52:5B"}}},"request":{"raw":"GET /?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: hexalink.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:37 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 11 Aug 2026 10:24:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vr66oIh022Rb0g64FjzVDwCXMHnjWC%2F3fzccuy9tQ9fRTi2W2amm%2BFDjHCZQdJG2puhSjYyj9r%2BsLAGl9zE2ojwVUzjkS48mP2n0M%2F%2BnOBBJiUTqS%2BiCI9siGkoWAgg%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2afe15e4d2f56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1163,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8244776a12c3c828ed236b22ff3821d6","sha1":"3cbebf83ff294ef58cb8d1417e6050769b0cf68c","sha256":"d30bd5ac130ed30a6c2b414db38a9a9ec64ae9f5ce45e550af7a93ba7dd91c2e","sha512":"552339a21b32311e05c8d5d973974d0591ccb09635cc26eea20e14293b33464b79d5ac052b5f6502d49ae62a3317391d865c53440772671c43e71a781a374c72","ssdeep":"","tlshash":"d0118e450d57407115b38a963b5f7e05a767924640c4c5002ffae2b7af53e4b8805ad8","first_seen":"2026-08-05T23:56:49.814782Z","last_seen":"2026-08-14T17:21:58.799226Z","times_seen":37,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":74,"connect":16,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.280Z","timestamp":1786709681280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a2afe173fec3568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10637,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-14T17:21:58.756093Z","times_seen":556,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:36.958Z","timestamp":1786709676958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://frogecoinrbh.lol/\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJgGvz3ZBIUBTLyItFlW51EPu3rjARFo4CWcDLoKcz0ks6arAqg1rgUxikZb0tN30IytL%2FI9WhqS94tWzlk%2FmcvE0VBnI%2BTRLIcMsvOu%2BkqpCbK7pnvGcn7xG5R4\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afe158ff72b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T17:46:16.793027Z","times_seen":17890587,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:37.891Z","timestamp":1786709677891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://frogecoinrbh.lol/\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:37 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvA3X99v1VCKv3Uelq9hpPxTk%2BjprjlW91KshM424R7U2soNO2%2BjeX455mv1glJ%2Fy0lqQt9c0aGRUC1UZvnX5dB2OrywpYiYwl5whEISO%2BnMXc1kKEmkPf72UkSM\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afe15ecfc0b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T17:46:16.793027Z","times_seen":17890587,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:38.036Z","timestamp":1786709678036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2afe15fb8260b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179135,"size_decoded":29080,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bff82f622175d70613da1d302147890a","sha1":"a5b815ecc31842119630f3a935e8c26b2d4bc5e3","sha256":"3126427b763140c4607554342ab397afa766e785961a1a1a8a4b363676d360ea","sha512":"e1ae49c71df46ec59db34ff707d0de7a83f552983571684369efe9c3c062e5310b8bc98ba2c666af44805e15997a0f22219ecc35617c2f3f95ae57eacfc523fd","ssdeep":"1536:i6+0ASzSzHu+/PwjEZhiEYZPCuTOReu8zos9bI4IUWsZxkkoyvunaKe:M9Ssu+gjEZhiEGPCu8eTWsMnaKe","tlshash":"e404636e8b049e662fb25388d15cf9eca15ee117c9cd5ca2d2f1cf3440bc9f7215229a","first_seen":"2026-08-13T18:14:19.851734Z","last_seen":"2026-08-14T17:21:58.765372Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:38.110Z","timestamp":1786709678110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2afe16028290b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172671,"size_decoded":29876,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"62105da7c53a7bde503e4f771b0be43a","sha1":"638204cad21f255c23556010da9264192620affc","sha256":"fcce60d63929923582a57bb4d2932775645b7a1e6bd72c81a027b9106bac61b3","sha512":"6ea3d17e67fce2efddf4456e39f20df355b904a674508ef328d6653e403b3746b9fcb1e768a7360df86b8ebdfb9a93b7cd0941236096b9eb265a4a11d5bfd174","ssdeep":"1536:AcG47KuIU15Z6bjzeFedubixbitI/YcZMfLFI2HqQh+mcq:AcT7KuIU150jzeFedC+ec1usm9","tlshash":"7af3986e4b04de661fb25388914cf9eca18fa117c9cd9cf6e2e1cf3440b89f7255219a","first_seen":"2026-08-13T18:14:19.816722Z","last_seen":"2026-08-14T17:21:58.799815Z","times_seen":8,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.282Z","timestamp":1786709681282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a2afe173fecc568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5138,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-14T17:21:58.758145Z","times_seen":715,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.286Z","timestamp":1786709681286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 177441\r\ncf-cache-status: HIT\r\ncf-ray: a2afe1740ed5568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381230,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-14T17:21:58.757191Z","times_seen":89,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:37.708Z","timestamp":1786709677708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2afe15dcb07712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226324,"size_decoded":31988,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"844e10852c6c9fde5520c75887b6ea29","sha1":"6f6552406196c39ea33334ffd0e0620fbe9af205","sha256":"e1e231242ebd382a82ff338d314fd404d566f4b26e9563d151387206e43e520a","sha512":"23318728ea62a7aee00792e1c59c5d715fb964ecdf604c1d5da4e4eaf8af5db6d22430144602266a835232f2a07518dbbc3daa41f3eb2c2d17ee6650f72e6c9d","ssdeep":"1536:TKFTcsEXxfWraLYrZYcG+mZBz48GxSt6rNBgZvk6VM:2FTcsixOraUZY/z48GxStINBgZva","tlshash":"8024446e4b409e566fb18388d25cf9eda16fe007c9cd5ce6e2f18e3444bc9f3215129a","first_seen":"2026-08-13T18:14:19.821982Z","last_seen":"2026-08-14T17:21:58.791317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":66,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:37.890Z","timestamp":1786709677890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nX-Worker-Hint: 9476f09dc8cc9a94e4b9c56436615c77\r\nContent-Length: 1316\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4YhCKeyprIZL8mgUCq3zW0AP8GLICj1J5QWWJT8d9QhMjUu0baTJCzw8pp0F9cQ3ksKt41c7qm1OF7tMC8Mb0mGJlD%2BxmPDVGPAShro%2FkknvHFzBOBdha0MXwnG\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2afe15f3fc7b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":958,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8263d61e53e392c08234256e7fb0c6a","sha1":"db2fbc25d11c85a7a4d34be4daaaaa7d36977529","sha256":"e2b6cfef513c1ae9312921ee1cdc0e853d9770ee37cf2e6f6522f714d9321a98","sha512":"14f860f0e9d56c6bdceb31ac2f190a82e194f54642b3e0e367c308f61049c583ebd49d3c3cb601948167935d43349d92fca3eedc4584e052dd622c2b836ac53f","ssdeep":"","tlshash":"a8d0752f34b363a34c3b30f21cdb3c309a0b0500a0c0f946ee3a00132010e48e107937","first_seen":"2026-08-14T12:15:12.556851Z","last_seen":"2026-08-14T12:15:12.556851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.403Z","timestamp":1786709681403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a2afe174cbb60daa-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1930,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-14T17:21:58.787732Z","times_seen":713,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:36.394Z","timestamp":1786709676394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://frogecoinrbh.lol/\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 14 Aug 2026 12:14:36 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvzZntUMYSAMDPWebJW6CyiCDu4gZoIuK9jfIDQHZkKXCyY%2BPTUYdeuKhlE7CC1pw1p%2FoI8UY3q9e8m2q%2Fjr9O9REvx8jVEAUmve69YMbpZbbZk%2FIScm%2BrDGR%2F88\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2afe155fe38b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":643,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T17:46:16.793027Z","times_seen":17890587,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":72,"connect":1,"send":0,"wait":103,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:37.888Z","timestamp":1786709677888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2afe15ecbfa712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179533,"size_decoded":28266,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"541b4b7ebdf4b2cea56c2deabbceb5d3","sha1":"c8f1043af70f89d183490271cf78ed659a52c38d","sha256":"7aebd5597c1fbef0feffd4232847c67fd132156c252a968014f64057b30cc741","sha512":"d0e150df3b65b5f09ecd0f49a0bab08d44bf2d91461561270af70b61e6a89f243a75554cbba867281b35e5c4349d198ee3a586e62fa77beee3a704fd3b3af8fd","ssdeep":"1536:ftDCyTgVttL80GwZ58iOFVqRFP935Gx/Ru49Qn8Le:f8Vv8wZ5nOFC935Gxu8q","tlshash":"fe04426e4b049e666fb15388d14cf9eca15ee117c9cd9ca2e2f1cf3440bc9f7215229a","first_seen":"2026-08-13T18:14:19.841576Z","last_seen":"2026-08-14T17:21:58.790562Z","times_seen":8,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:37.992Z","timestamp":1786709677992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2afe15f68230b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176085,"size_decoded":29391,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21169cfd44a90968d6d87f628149f958","sha1":"3404284a923d1b8beebc4635a7c425e275e6370f","sha256":"f1628b941a7c1cfec6ae2fc8d180066c18b4481da86d982cf41f246178011b34","sha512":"25a7b690e8a20219ab2c3f02d50285722bf9f500696b18d9256b9e79ea4cad81f03bfcef38152192fe523c3fdc27d9d6aef64ac3eae96da8d0ada2ef8d80e5d2","ssdeep":"768:aAmGpucBWlNozpBRxMm5/yCUZB2sTQrV8JB3zOoG7EF6t1zStxmSijeyB+BR5WIj:l/ZgZB2sTzV6UyB+BFPRyNxGpuC88Cqz","tlshash":"da0475ae8b04de662fb24388915cf9eca55fa117cdcd5ca2e2f1cf2440bc5f7215219a","first_seen":"2026-08-13T18:14:19.850107Z","last_seen":"2026-08-14T17:21:58.792072Z","times_seen":8,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:38.146Z","timestamp":1786709678146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2afe16068310b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45151,"size_decoded":8642,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"342e24182c93cd31d5468e32d9a8e1d3","sha1":"6b57231184f4e21ca367a832ea05b49cff19991d","sha256":"e994d69d7eb9fdcef20ddd5b0aa47f1e1fa2871a20d2fb66f40f115f2eb397a3","sha512":"56d10bf8e1d3c89c653fab89e08076c0ef430ad4d807ae099b22ca5fa03e340179d24c4e76e8d3865bb626d3bbf70f4dbb51b128aeb1cbef2463cdb20223c1d4","ssdeep":"192:vEv3E3vvQpDGxDizU1HYEr6tyiup+oDZOwl1TazVV6lMB8aRmP6vA6xc/On4yMuK:ve3UvQtzU1HMupr+BV6w856K/Q4yMupU","tlshash":"a413766b8f14ee762bb213cd415c7deca24e2117ddca9cf6e2d1cf1440b4af6216219a","first_seen":"2026-08-13T18:14:19.895054Z","last_seen":"2026-08-14T17:21:58.759091Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/acd714403a.js","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:35.826Z","timestamp":1786709675826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frogecoinrbh.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 01:57:28 GMT","end":"Wed, 04 Nov 2026 02:55:45 GMT"},"fingerprint":{"sha1":"59:8E:AF:B1:26:65:C8:A2:94:D7:A2:A1:5C:3C:B9:0B:53:C1:49:7C","sha256":"36:A7:7E:C2:6F:54:E4:E7:A9:8D:D5:C8:FB:DB:5C:A7:7E:B7:20:CA:CF:BC:6B:72:51:75:41:3B:36:19:D7:3A"}}},"request":{"raw":"GET /acd714403a.js HTTP/1.1\r\nHost: frogecoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://frogecoinrbh.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:35 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6255cc-588\"\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 23 Jul 2026 17:56:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXTQm5QPFE3ENgC0vLo2dtN5iqkHkBmIGHYNE%2FqgyNeB5JDf%2FKUw7GnpGrr58b1hmZE%2FT6kosj1k%2F5AS7ZEf3EkyT0jiGdGZxP8hkcg7frG7%2BB2hjPg7bpF6TSctNoIgk4r4\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2afe151e9774e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416,"size_decoded":1728,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"59c939c1aeabd848f0c107a327b28221","sha1":"26bc709a6e7253e6f7917cd5164e74f700f34490","sha256":"7a7424a155777024bb994f19f7f7d5ee747c415d98e6f586381e3b1015a82360","sha512":"7281a1708a69dacf61f22b7ba7bfb14dd7f1728195403bffeb1544a1d74f2e09c825d33b3cdd0b037fc675ba4be823c4610744bab23c586a83355d206f99dde4","ssdeep":"","tlshash":"0e21c0dbba52f4401785b7b6986f740d9767bd0adcda4838d40055c23dbeb2fd012568","first_seen":"2026-08-14T12:15:12.569889Z","last_seen":"2026-08-14T12:23:43.032289Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"frogecoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.284Z","timestamp":1786709681284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a2afe1740ed0568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3855,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-14T17:21:58.750906Z","times_seen":715,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frogecoinrbh.lol/","fqdn":"frogecoinrbh.lol","domain":"frogecoinrbh.lol","tld":"lol"},"ip":{"addr":"172.67.132.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T12:14:28.974Z","timestamp":1786709668974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frogecoinrbh.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 01:57:28 GMT","end":"Wed, 04 Nov 2026 02:55:45 GMT"},"fingerprint":{"sha1":"59:8E:AF:B1:26:65:C8:A2:94:D7:A2:A1:5C:3C:B9:0B:53:C1:49:7C","sha256":"36:A7:7E:C2:6F:54:E4:E7:A9:8D:D5:C8:FB:DB:5C:A7:7E:B7:20:CA:CF:BC:6B:72:51:75:41:3B:36:19:D7:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: frogecoinrbh.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 23 Jul 2026 17:57:07 GMT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2wIioT67SnBcQRDekj3PmQ3NfA320GQ7pDnHploLg0ULBbFCk3m4o%2FuaHilksPeYLJlIueebkiMSUTNHNp7VFkjWPcVqQym0GEUH1Qeyxa2eMVC9l6MG3uzGw%2Bv6xeP26eP\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2afe14fd9d75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17871,"size_decoded":9819,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4239)","md5":"dd4d85e043f06a54c969dd9d5b57b497","sha1":"37082e8292be1b1fb05c3e8ef772ef1a49fed796","sha256":"73aacd4ad91e3f6112c2829516f4c2ddbea9cda101e460d9148096682bd113b9","sha512":"fcb42e75c1b17798a3358e35d73c4cc57cb5ed4d7ba9b9fac4db82e4c15276fcddc2beea67fe28c19e710627a68e909f70576b89b1e396be19da44c52ba143b9","ssdeep":"384:gKIUrbBYR9gZcd9IstNvn++lLJE/GEPxS7PKsa:cObBe9F9IstNvD6GSKA","tlshash":"c482281a37771024656395b62be767097220e60be065c8bc7adca284cfc86d5c9f7bcc","first_seen":"2026-08-14T12:15:12.572589Z","last_seen":"2026-08-14T12:23:43.011215Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6599,"timings":{"blocked":-1,"dns":91,"connect":1,"send":0,"wait":74,"receive":0,"ssl":6432},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"frogecoinrbh.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://frogecoinrbh.lol/","date":"2026-08-14T12:14:38.071Z","timestamp":1786709678071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://frogecoinrbh.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://frogecoinrbh.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 12:14:38 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2afe15fe8280b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221580,"size_decoded":30874,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4d9d4dad153a80f0a083d654f859ab3f","sha1":"710c17b6c4d35a4c74112b0f929369b67e20441c","sha256":"f2eb3439bd78ea4b9cb38b9535823d4f3f182c48a66cf9673e7e7da322826997","sha512":"27c412416fdcb931f6fbe405c2795b108ab284d49aeadb06537617e3a4928a9b86af131dbf8a131f8534cf586e6d30f73de37f19d46b69a88dc7947313e63762","ssdeep":"768:5yS6UxtNRUORhhlduBNJD7O8VkyYPzS4WoQmWo0xNWo5/AgAvzS4NomTTzWH5YHa:5p0VkyJiTvguaT7sXFQGL2zSCEty","tlshash":"d924546e8b409e566fb15388d25cf9eda16fe103c9ce5ca2e2f18f3444bc5b3215129e","first_seen":"2026-08-13T18:14:19.825965Z","last_seen":"2026-08-14T17:21:58.797866Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:38.073Z","timestamp":1786709678073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hexalink.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\nage: 177442\r\nlast-modified: Wed, 12 Aug 2026 18:14:23 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a2afe173ae60568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":744,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-14T17:21:58.773428Z","times_seen":90,"resource_available":true,"data":null}},"time_used":3170,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":12,"receive":0,"ssl":3155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hexalink.org/?host=https%3A%2F%2Ffrogecoinrbh.lol\u0026href=https%3A%2F%2Ffrogecoinrbh.lol%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-14T12:14:41.406Z","timestamp":1786709681406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hexalink.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 12:14:41 GMT\r\ncontent-encoding: br\r\ncf-ray: a2afe174cbba0daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":700,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-14T17:21:58.79305Z","times_seen":708,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}