{"report_id":"a1ec6333-37cd-4471-a164-7494e8f34975","version":0,"status":"done","tags":[],"date":"2026-07-18T17:43:09Z","url":{"schema":"http","addr":"reallocations-solsticefinance.cc","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"172.67.160.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8b9d3dff185096c4a14136c32823003a","sha1":"d40b7eb28784f3f5118b4e1dab4a1fea0811d89b","sha256":"c9f6bca19ac4d54c95ad1d75f1a4219e46b858a84f2d21794a069a0489d10df3","sha512":"2726c838b9ba8fb1f064c5020d5f6766e7581f75fe151814f062be605ac527bc61193ecf232d1a4365603b966002625d05378420d781b80670728818e18b71e9","ssdeep":"96:DJFs1Bx13gb61j1l0+l7gx10UFZV4jl22D+i8kDNLeOl:H61rpvgmULV4jM2D+z0sI","tlshash":"cd9151a544f5663b18a386a9e9d17f47af817607ce8d29817baf00f31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"reallocations-solsticefinance.cc","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"172.67.160.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:43:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"arb1.arbitrum.io","ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-07-10T10:04:50.826431Z","alert_count":0,"request_count":2,"received_data":1169,"sent_data":1133,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-07-11T14:34:58.869274Z","alert_count":0,"request_count":2,"received_data":1277,"sent_data":1129,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-07-10T10:04:50.682618Z","alert_count":0,"request_count":2,"received_data":1164,"sent_data":1151,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"reallocations-solsticefinance.cc","ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":54,"request_count":18,"received_data":2625415,"sent_data":9665,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.meowrpc.com","ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2819481,"first_seen":"2025-08-16T04:05:13.25434Z","last_seen":"2026-07-18T04:51:03.310035Z","alert_count":0,"request_count":2,"received_data":1549,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-12T22:48:41.233588Z","alert_count":0,"request_count":1,"received_data":23380,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"solstice.finance","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-10","domain_rank":0,"first_seen":"2025-12-18T13:25:56.092297Z","last_seen":"2026-05-24T11:16:34.21848Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"noteworthy-lox.xyz","ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-08T14:54:56.894128Z","last_seen":"2026-07-10T10:04:50.555374Z","alert_count":2,"request_count":1,"received_data":4873041,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-07-10T10:04:51.929841Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"theajack.github.io","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-03-08","domain_rank":1222043,"first_seen":"2022-06-30T12:27:22Z","last_seen":"2026-07-10T10:04:50.75855Z","alert_count":3,"request_count":3,"received_data":0,"sent_data":1812,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-07-14T23:47:04.559916Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":584,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-07-16T06:17:28.831536Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1149,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00c1d90906609972c38dc50fdb3f75ab","sha1":"4b74e140bd639bab2642278f6ef17f85c7505a41","sha256":"ea317c083893a11680eee07d4e6cbf967100415860c9cc70dc3557b395725dcd","sha512":"7d00d4262ee59637a64fe8b75cc52b8cfea3c8d7e377e2e73c1c64e8b66a69bc8a2a2bd4880758c171c681d93f51827fe9eabd1fb86fa6a762d3f8447c421e12","ssdeep":"","tlshash":"76c0c04dc0a0cd70001c06fa1039435070a0243c025120cf85ff8f866c1ce45160c832","size":181,"data":"","first_seen":"2026-07-18T17:43:20.572002Z","last_seen":"2026-07-18T17:50:26.132127Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/eglMA-Rd.php?s=%2Fipfs%2FpQE52Hb4aVRkVKOr88vCyg8cd8dac2e3e9fc4545770dae82493001%3Ft%3D1784396557677","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02252d58464bac209e8bf4fbc2e10211","sha1":"38a3a8874a945517ea9be80e23485d7d581885aa","sha256":"bbdd74460d3b102fe624ef4c60c9eeb1800eedb316462822d804c36df0e037ae","sha512":"6e3ba01088734c1f7a9b67c1f03a0a4f14dc1f522f5aad5615749cbefaee8f04081ee00719ade2fc730219c90832e28bc8d60f6099e883a0518e7d8676b39590","ssdeep":"6144:Bh5gDItQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnU6:JsQQDC6m7hFqa/J/","tlshash":"77d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","size":619127,"data":"","first_seen":"2026-07-18T17:43:20.5617Z","last_seen":"2026-07-18T17:43:20.5617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/sQzcuzBYtu-UgHE_DowG-.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8f4c92f23586c2344eee314b9a245261","sha1":"19a9a17a4e94fbd069bf2b5bd89a2ba2d2925f94","sha256":"7dab7a6e383404750a7aff04f53c955cbd8acf63a1fbe3e07370e273a38be236","sha512":"cb2a453aa444ca6cb8faaf90a7b874ca7bce8f60b55a2afc54b38b79371b533567efac86718aacd309385865016e5ae8ff3702b8f4297cd02e68208627ebf1b4","ssdeep":"24576:XrviZkUKxSZi6anVAsmoiEhh4vBwBikVzya9b+Nhomcqm0nAjkT5NlUuGX:XraKUFZranCsM/cqm0GkT5NltGX","tlshash":"4a36a8d7055327bf5e204321e4b0d12bcdad682f5cc550e5dfcadc99e00be2b92a1aad","size":4872250,"data":"","first_seen":"2026-07-18T17:43:20.57452Z","last_seen":"2026-07-18T17:43:20.57452Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/assets/lucky-tracker-logic.js","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"953533eb69aa76cff78e476818be7550","sha1":"a7c309178310d5933e1a9da1607804748db2498c","sha256":"ce309253fbd1fcf18fc7d7bab7cbb7096a51f942bd6b19c59554665f50cd50bc","sha512":"81312b3380db16b91e71cc04944f8c937d9596a62a299e2d093d9d172dd1085f48eae9bb2c6d773af5340cfa0cfee232182bf2a5ece83c18e0edda0d6fccfdd1","ssdeep":"12288:V0YMPamWuzGaZRQ+KkWtxWxV1+q77hkllzapp:VKiEW+CxWTp","tlshash":"903521ab13581d3ee0b6d505cc391e1c58fe8b570e8a474bbdf3dacbd20da941a4634a","size":1107051,"data":"","first_seen":"2026-07-18T17:43:20.579235Z","last_seen":"2026-07-18T17:50:26.119893Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e3482167c8127f1751f7c8ef4e483545","sha1":"fb51793a81bff09d06220864e171708c43f9a262","sha256":"f8d3dbf383e214e97926809929db10582fb0bfcbaf7ffe3f969a49d27cbc1f92","sha512":"399645eea11d87afe267026b4bc0515de69ef536177990bf701fdfb80650185d004d676670bcab0e85f234efd059e883426a4f6814848f5b2a8441f28421f806","ssdeep":"12288:C4ISbSPwJTHx9uaglxShb1+q77hkllzsjz:yAAEbx9AxSbz","tlshash":"ed252faa636a1e39d4b2520dcc3a1f1c58fb4d67170a975fbdb7b386c12c1811b8371a","size":1022826,"data":"","first_seen":"2026-07-18T17:43:20.581463Z","last_seen":"2026-07-18T17:50:26.133904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[ EL ] : Finished loading","filename":"https://noteworthy-lox.xyz/sQzcuzBYtu-UgHE_DowG-.js line 21 \u003e Function","line_number":3,"column_number":1871904},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj55 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.13925398315091098] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj56 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.784396561114e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj57 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj119 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj120 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj121 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj122 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj123 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj124 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj125 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj126 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj127 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj128 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj129 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj191 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj192 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj193 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj194 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj195 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj196 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj197 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj198 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj199 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj200 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj201 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj263 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj264 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj265 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj266 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj267 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj268 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj269 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj270 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj271 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj272 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj273 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj282 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.13925398315091098] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj283 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.784396561114e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj284 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj346 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj347 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj348 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj349 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj350 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj351 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj352 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj353 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj354 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj355 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj356 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj357 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.13925398315091098] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj358 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.784396561114e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj359 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj421 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj422 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj423 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj424 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj425 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj426 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj427 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj428 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj429 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj430 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj431 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj432 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.13925398315091098] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj433 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.784396561114e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj434 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj496 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj497 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj498 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj499 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj500 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj501 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj502 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj503 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj504 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj505 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj506 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140}]},"http":[{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:42:36.239Z","timestamp":1784396556239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wZIa9YKMtf1OBdxx6N86%2F%2BexTnYI%2BpkjzXiwWa2JvGqgs6gMpktr1MMd8b%2F%2F5b5%2FywKpR%2F%2B16Dg34A6lD6NLZZwiQfvqHcSnsSf5OJeZ8wstW%2BaOZvLd4S0bZjaBtfOgKSUf33R8zQ5A2Nbxf7bpq5Mhig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a1d348afbaaf5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44901,"size_decoded":11173,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (664)","md5":"5ce0cfbfd94b3225d7f062cee2fc8717","sha1":"c3d2ed363e8dfcf3939b728ae75abdbca00677d6","sha256":"728561aab0f9e62dcd3f4e670f667340d7f0fa2b7cfcb6bc8f7b2e8b9f46b5f7","sha512":"750d6bedc25a3debf1393e4bbb941e176b08c3e6f7a82f9af353b41355fb0aa634009e0db83f0d04d26e3404ed92c31e79a2cb366d50e8ba39bd27370c077f76","ssdeep":"384:4f+tjBjmfi2mPa7HXYCB9Lys5WmPH3s3OB6eZeGyd8TknAWG3WW76JXPcfp7zBgh:u7XbDus/HMeZed6NqJOp7lgIq2G6s","tlshash":"3d13a57161f1127f2293c3e1ba61af9a6f99ea07c50b861872bc47956f87cc2cd4316c","first_seen":"2026-07-18T17:43:20.523655Z","last_seen":"2026-07-18T17:50:26.127565Z","times_seen":2,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":130,"connect":103,"send":0,"wait":457,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/TEG-Regular.ttf","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.929Z","timestamp":1784396558929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /TEG-Regular.ttf HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a595b24-131dc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZxEwbsvuGxp%2FOmGqpORKhVga26qjHZxI1MhhWhxzHh5Hdini%2FX8%2FVkFdRs6mYV9dZWZyVfj5axROeBYJ7mRWqUXT%2Fnyk9hNhR40AhThCmDFTYMnMUteYEDyOBHcd3QZbnMngPMKO5j%2BzFBv7Lt%2FIlLYgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bd4b745696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78300,"size_decoded":79040,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright (c) 2020 by Alfredo Marco Pradil. All rights reserved.TEGRegular1.119;HDCO;TEG-Regular","md5":"2e767db1de9685fc21821e5dae91aa7f","sha1":"326e3989f300bdd1006986498dc485e41916df30","sha256":"1881e1e1de057574ac1618c77ae4ff373f798dfa5612caf2d41215335167cf54","sha512":"81bd934800afc0282b6a16d257ea8f59a26b0c6785f574145915fa7e511c916f33e5018d8015aaef3a03160189362a7570d577edac73def53037d08ca87819d9","ssdeep":"1536:IO/twRfe5ejQk7U9s8rZnkaNrhKF+X1ifdtuDfLl:IO+GkkFnXzKgaXuDjl","tlshash":"fd734a42e751ce0fd9111e3859d6d3edb7b9fc21a70bc34b98417e6eaccb0a85d92284","first_seen":"2025-12-01T11:20:44.518726Z","last_seen":"2026-07-18T17:43:20.526741Z","times_seen":15,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/internal-link-white.svg","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.948Z","timestamp":1784396558948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /internal-link-white.svg HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a595b24-135\"\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBjfYQMjt4lINvWK2%2BuN0xCv8Jf5dyJROiDN%2FvQIXQa0P0PM4n8M1fN%2B%2FTstAgvtau7RXTLZ18xfLCdMiRVMrAcO3ZRdJ2LlY5JGSxTePY3Kj7HAIkddh3gyO0KSV3KJfU%2BqblkT%2BhNRXhH%2BOF%2FqhxS9Kw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d348bd6b7a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":946,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed5d53d12849db89be0cce347c33441f","sha1":"65b66ee76c83fc8a160a2f0570f98168c67eb827","sha256":"dc499896b1a866d00e3c1e567145704aa4cb6bb77f851c7fd5a817e85f7d2f24","sha512":"2e03ac4de578e0debd36b5a154dd766d314ef252a23cad0a2c64474780441aaa42a8ef52344d9de11a8385244bd8f7e6c599691ad72a7d3e4e12d8d15d38cf33","ssdeep":"","tlshash":"59e07dff12c8d954e0214300a71871398077303ca14981c4a1046b21f3415dd3c375dc","first_seen":"2025-12-01T11:20:44.509755Z","last_seen":"2026-07-18T17:43:20.530312Z","times_seen":13,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/IBMPlexSerif-ExtraLight.ttf","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.917Z","timestamp":1784396558917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /IBMPlexSerif-ExtraLight.ttf HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a595b24-27570\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otJ1rhZdYNKZuJoO6unomS91BlHzCiWcpQlHAGkVnHzyFnWLocnXZ6kPbjF3XPLIRtyJYFnKB7aVr4vnHR6w4BDBGSo8WrS7N%2FBV0cD%2FTLTsA%2BufykTeRJ2rlhZSwItITfnKCZt2v3sqH7hXjD7HDZXihA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bd3b715696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 161136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161136,"size_decoded":161871,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"b116a0475234b3394b4d4af104cf8c54","sha1":"9044a5273464f805a8c410a6107852eb3d7784fe","sha256":"8d902db64f46736f7d1e93a59ff35c9d1137508ce2022cd0bd0382ebbabbb442","sha512":"161e52c8654f02b144e43fb675ea74bdd3dcd40418ed0c9a392022077c332640b9beb99090ea47839c21c694538aef8fa06e35165de7d659ea48433af4bbfe27","ssdeep":"3072:p/vtfnvh2Qy9zQJX2x0+WAWUxPRtYt38yHXK5aMoYM08eVRMDYs1dnDNxS8+LT:pdnvK9z8/3AzPEtMyHa5FlL8eVRMDYsk","tlshash":"56f3b44ebbfb5b23e3471af89ce2d3b853b4f80bff61220968809a65d5df2414553981","first_seen":"2025-12-01T11:20:44.531769Z","last_seen":"2026-07-18T17:43:20.533261Z","times_seen":13,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/TEG-Light.ttf","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.931Z","timestamp":1784396558931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /TEG-Light.ttf HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:38 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a595b24-136a4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMcu%2FI8BGnTELpkvHB9A5BYzgwOnt%2B0xf5HQDDbxJbq9hBgO8J7pyFxiMF9xNPfEJk0HrytCONtrBu2YLBKjh5Z2%2BpSwcvXQzToE80s0fNSCIvBABi2sxBcTg5D4h82fyaSxX2BRG3fzQB188aSeCge2bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bd4b765696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 79524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79524,"size_decoded":80258,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright (c) 2020 by Alfredo Marco Pradil. All rights reserved.TEGLight1.119;HDCO;TEG-LightTEG ","md5":"3044f7174717c9be0c0fc4610c6f9be6","sha1":"51bc3d68b1ce60128dbd8589dc43e151adf38fdf","sha256":"b43bddb40bd4757394cf73c15d93db53e09a570483213a6cf02fcc223bd75b6e","sha512":"a3b868f52b96f9e1d8c7d2d0ad880001600952b1511bbe7aa8d884fd2f119d6ea2458af8515bf2bedcf9989e258d8192a419a7494abdf9f900bcac4b80861577","ssdeep":"1536:UZIwmcRfe7eFJJt/VohXGkrl1FkvVxP1wsGZsHtfdt/DfLl:UqpkG4JXKGkvFkdx2tm5X/Djl","tlshash":"fd733a02fb10cf0ed9162d3855aac7eca7b9fd11eb4fc78b54853e69acdb09c1952284","first_seen":"2025-12-01T11:20:44.57104Z","last_seen":"2026-07-18T17:43:20.535696Z","times_seen":15,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/permissioned-mint-herov2-bg.jpeg","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.950Z","timestamp":1784396558950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /permissioned-mint-herov2-bg.jpeg HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a595b24-effa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IsDCMv4IGJvfXkKLqNb7VTlL4WOCJyl%2BcZprHkzDgibmMqHTP80biFUpCqxntMC9nPRdJ0cnPNJCmhv9jnk7RosqvNKE9yTiM%2FK2x0PaV3FTdV8O8j94AjwGf2ntxYS0r1%2BID0FS%2FYkHOAbtYOJeu4pTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bd6b7b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61434,"size_decoded":43744,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 3840x1928, components 3","md5":"32abc8aa4407bf50628dad041e0af315","sha1":"51aac4e1cafdd856f1b9c743e4559aa250b92f0a","sha256":"b19a0748a41381be06545f4f3f7b53fba75296d4abcca7c613755190d2d9e80a","sha512":"0f3de9623c9dcf4a167dd5af6fe8a85cdbcf3c5ed6aa52683ab448a69fe3f5c790455cab73b472dbff36c089f23bbb12d1e04bd0f6f18611117cc3bd7ee2c755","ssdeep":"1536:CRLQ+x4n4KWYb3y/2hTE1uDTaatDHZNyi:qLQ+q4/YbYTkXNyi","tlshash":"b5538e13eb41a35bc16c237099cb27163b1b15fbe7dd850796c94061e8ba3a87cca7e1","first_seen":"2026-04-21T11:19:53.4201Z","last_seen":"2026-07-18T17:43:20.538224Z","times_seen":11,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.935Z","timestamp":1784396558935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 4\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a1d348bde8d5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":711,"mime_type":"application/json","magic":"JSON text data","md5":"6bfc828678f2fe9c3fa09a56b072aa91","sha1":"5fd7ed7859827509f25156b62dacbc86fec6760c","sha256":"fbc4eef8beed5ebd40e017df93520a8497a3d4cac62d28cda4fa0073cf139f78","sha512":"add45ec2eacb1e9e26919971cd52e97a25b74f52ff54b58db4e1da3b424b4a623886e01a2ee1408f354af758ae87b7282f990609e1a6fa5e26c54be7c1c66e08","ssdeep":"","tlshash":"7ee02bf9e80958d1f2ff0d42e7adfa08721173e0a8c81e46c4f56a9c2a20519eb0dd4c","first_seen":"2026-07-18T17:43:20.540472Z","last_seen":"2026-07-18T17:43:20.540472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.957Z","timestamp":1784396558957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 17:42:38 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIAQwfi%2B%2BkrPdFB3ztUwFwAUDoJf%2F6iTn4z3QaStpuPRYutfgVd77Neve2L58i5CX8OKiAbMPb3smqG6vanPojrvcqS%2BVQwvlmfP%2BfoRPkmnD28kASV9eHeEuCMTzYHbUGObgFHA\"}]}\r\nserver: cloudflare\r\ncf-ray: a1d348bd9c5c783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":815,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":25,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:40.424Z","timestamp":1784396560424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/wasm\r\nx-jsd-version: 0.0.7\r\nx-jsd-version-type: version\r\netag: W/\"5850-Zla5mhcuOico9+qcpv5wsYqeHHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 18 Jul 2026 17:42:40 GMT\r\nage: 1487912\r\nx-served-by: cache-fra-eddf8230077-FRA, cache-bma-essb1270043-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":22608,"size_decoded":9031,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"7116ffe340a553a454fef87341c44bed","sha1":"6656b99a172e3a2728f7ea9ca6fe70b18a9e1c72","sha256":"e4f3c00246a775193661f9277ca1288cd310a6514de166ecc2176ccd26fb06a9","sha512":"d9f2e698bf8beefb99d476bd78b26002d7e617ba6e8234c7c93e81ddb74594cf713fc276dc55fe8f5a837c8992fb51a6a52cc183998415cef1b626f4040f2b6c","ssdeep":"384:q1lFv+dy0yrXzRJnzAQTI+q9HU692o3SeHom/EtUHTOih2YeRbpKgYRSE94+D7+:K7zAZ9ao3XHom/L4RbgjSqDq","tlshash":"aaa2859231a428e1f13af73ae00ef1b937139558fb89ba2ac71f25e72c7b50465d6d10","first_seen":"2026-05-10T23:32:59.054461Z","last_seen":"2026-07-18T17:43:20.543158Z","times_seen":41,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":10,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.932Z","timestamp":1784396558932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:26:33 GMT","end":"Thu, 01 Oct 2026 14:26:32 GMT"},"fingerprint":{"sha1":"31:E8:75:B2:BA:5F:FF:59:1E:07:30:ED:B1:9E:07:18:13:BC:81:0B","sha256":"3D:DA:48:00:A7:09:38:1D:2F:0C:31:F5:F9:2F:41:5A:DA:53:B2:FB:16:8F:F2:81:E1:A4:DF:67:48:94:B9:D9"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1d348bd6b235a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":424,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":136,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/81e14657b7ad5efb.css","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.163Z","timestamp":1784396557163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /81e14657b7ad5efb.css HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a595b24-1762e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFEHW82oD6HydBcDLQFsj9KKALBAhtwk8aksda4y7OvWWqX1eEfsRr4BtDvr1ay0LNuraxo2D1%2BCtELz89Rgr1eTZJKy38cYe%2FOOKsrlMJWDdQojjK0hZsS6rkbkvJseNK2KasbZ%2BVHzQhjI5wDcBlVzrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348b23ac45696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95790,"size_decoded":22036,"mime_type":"text/css","magic":"ASCII text, with very long lines (63217)","md5":"2c824d4f73d9a35d279fab7a37c3eec3","sha1":"b1f9086cf5e41e53ee53c2d3accdb49c641078d1","sha256":"af4fb5fe1c3f3beb7304d25f8509462a2bfb936eb85abdc68190f8dbc46f4a6b","sha512":"eef2a0fe9ef78d9fe574683433cede277f0716cac81eade700f6bb56f37fedeb250dd2c07c9629625080fbfbd10534b6f78831dbefea9574b7462c249a56f754","ssdeep":"1536:cHkCNmgh9YgBHvbm+vq1UVK0lFn1KxErYItKofj4A2ZSO2/1WhMdXiG2BI5uJc9c:cHrPh9YgBHvbm+vq1UVK0lFn1KxErYI4","tlshash":"2093b72eab25213f7c3b84f1c2f4bd9c310ab280df7a16f5fd5251119ed26f6096a624","first_seen":"2026-05-13T12:56:39.145318Z","last_seen":"2026-07-18T17:50:26.122835Z","times_seen":11,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solstice.finance/favicon_io/apple-touch-icon.png","fqdn":"solstice.finance","domain":"solstice.finance","tld":"finance"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:39.652Z","timestamp":1784396559652,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon_io/apple-touch-icon.png HTTP/1.1\r\nHost: solstice.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/solstice-logo-white.svg","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.167Z","timestamp":1784396557167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /solstice-logo-white.svg HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:37 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a595b24-338\"\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=3,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSS6Cs%2F2XNUZA6G%2Fbg2w3fQ6E0xiKAFngbCIiLyWKEsEFgFy6aYjmCFvkN5oThavXnIIH1%2FPSMtXN54FhAGV%2B%2BGJIvVN5x7wWMmHAsUV1smd8%2BL7AcqBFw56f087t6R%2BsSeWBPLnYxe5qu47d1gh%2F4mxJg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d348b24ac65696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":824,"size_decoded":1182,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72773090607a2e7a903140d9fc39883b","sha1":"4bf1cfa3e6967941c99925f18ef6cc60acc67e58","sha256":"52787343c3cd6a9063ac119ce4423c682718a5264441bf6e943a097417583f3c","sha512":"56539def980ae0c05d81a69b635211229e8ca33ebb6e8a944d1a70ee3849ecf7d6dcea6bd6ccd1fe5b0a6729debd4d2fb4265fea0915b45244e6db3e6235baf1","ssdeep":"","tlshash":"600112d9b5e9dac05406d765a34134342a1b64f6aee286aacfd21922f59111e0d0c8c4","first_seen":"2025-12-01T11:20:44.540221Z","last_seen":"2026-07-18T17:50:26.125565Z","times_seen":14,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/solstice-text-logo.svg","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.946Z","timestamp":1784396558946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /solstice-text-logo.svg HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a595b24-1a3a\"\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHsZ6K4FuQ2%2FOQI%2BD7C%2BlPBtmYcpNkF%2FFYQyEQJHId7uvYem5DWRq3G4X2KebkJwh3BX0%2FO19QTMl7hhzROZYDl7Kabh41Dl6dPkaiCwvwIRJvrfK%2FovinijZWIgN1%2FLn7gGKxiHsYU9Ma%2B984u78MxjhA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d348bd6b795696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6714,"size_decoded":3445,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea83d0973f7940b148c8ffa4146b1b04","sha1":"12a3819a53344043f4c6fde17ac1711b72c4bd4a","sha256":"819afccab26748d13d2e6cca404ebfac07b7f212f156b9f35e2c81e0a72cd62f","sha512":"975d1b0164c915e11d9e33cc7cc2805b893d2e1c0bc30a90454fac6cf70fc231ae130f0ee08ca817f34a58e5c8aad9941917f061bf867bb7ae13bf980ddea59a","ssdeep":"192:45zCpAjHJmB/rFIfKQGoJy8OPHkt9ADIe:4RLdmKKQ5JvOstPe","tlshash":"76d1c5d537ebb2f4e441e7e9452661b9b65b30fb2752c690cb60ae64fa0702c4c4d4d0","first_seen":"2025-12-01T11:20:44.512531Z","last_seen":"2026-07-18T17:43:20.549033Z","times_seen":13,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/sQzcuzBYtu-UgHE_DowG-.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:39.131Z","timestamp":1784396559131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noteworthy-lox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 06:57:49 GMT","end":"Sun, 06 Sep 2026 07:56:39 GMT"},"fingerprint":{"sha1":"DB:74:6F:94:75:02:7C:E6:BC:B0:7B:9C:CC:4B:65:10:1D:D4:2E:21","sha256":"11:DE:20:78:C9:21:8B:67:CD:B9:F4:8A:20:C6:EA:C6:D2:35:95:87:2C:61:16:18:B8:AF:BF:91:52:7A:4E:50"}}},"request":{"raw":"GET /sQzcuzBYtu-UgHE_DowG-.js HTTP/1.1\r\nHost: noteworthy-lox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\naccess-control-allow-methods: GET\r\nlast-modified: Sat, 18 Jul 2026 17:30:17 GMT\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"8f4c92f23586c2344eee314b9a245261\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1WuULQmhpQ86ywRoyKMjfRKm9coLC6GZiXf57OwwhtH89MuH%2FGtDzgd13SP%2BI4uzfSAf3oEE9mES%2Bz2w2VSg2%2FxD%2FWs44jWnn6kq%2FG9Jh0o2Sl9UDMFJdOYSg348ukrm93%2BNGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bf092356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4872250,"size_decoded":789952,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b47e005b049cc61051d147b1216a305c","sha1":"2bd45577cc465f851f020dfd020bf3b4ebc70e72","sha256":"68f513082a746db471487c46bb95f4617f34da2f8c843815048314c97381e77b","sha512":"91cd374f79382a77ce0e2bd3c45fef0713de8e56354e99469eada0b8c833321d95646b3b42dffd11dcfbc474338c253abfe8d785d7139e839cd04d07e682526e","ssdeep":"12288:XrvuPfvxkUKxSZzF86MbnVAsmfgop9ip9vdbM4Jh2yG6FuabWLGQMy:XrviZkUKxSZi6anVAsmoiEhh4N","tlshash":"50353aaf23607163432951908836318de279e9584c85c06ff7b8ecfff959844a6a7f36","first_seen":"2026-07-18T17:43:20.551005Z","last_seen":"2026-07-18T17:43:20.551005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":62,"connect":15,"send":0,"wait":260,"receive":722,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.951Z","timestamp":1784396558951,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/IBMPlexSerif-Italic.ttf","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.916Z","timestamp":1784396558916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /IBMPlexSerif-Italic.ttf HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a595b24-29814\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2Drnx%2F5yjwqKR46KyBsbWs7GQxc0e3QnKcY3RV3IsUXLtBq7IzHvu%2BqdW1PRkcjo1%2BePq8TFMSDsFlVWuRbMgt54UlBddh7ftYjQ9rqzTMO9OtJQDQcLOwQ9g%2BhjPC%2FfsQMlWPl3j97O3ivCfjDVPESbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bd3b6f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 170004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170004,"size_decoded":170743,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"c0a80bb51479860fbf09978b3d099bf7","sha1":"0c534fa0f1ccb4427bc8754077b918a5c71be1b4","sha256":"b11f1048745e715a55c9d837b3f10226ca3d78867b7db7251ddad8f98dcf0f38","sha512":"101f5b341d225539088e9b9d77537cc63dc5f5dd089806ca354f890220ec26dbe10fdf2a99b17ccce4e92fa90097c688e1a618d89091707aeef4155753e80ba1","ssdeep":"3072:Au5rI0D2QaYZyc4Kxje+nS99slkRUZySKlA6Okpdy8mGBPFlWF:AGrBiK5C99slkRUZylm6OIdy8mgls","tlshash":"cdf3b54abffb5b63e34b5af4cde1d2b86771f807bf606504a89095a5c5cf3410a13a82","first_seen":"2025-11-11T11:04:27.233516Z","last_seen":"2026-07-18T17:43:20.553096Z","times_seen":16,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/TEG-Medium.ttf","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.927Z","timestamp":1784396558927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /TEG-Medium.ttf HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/a84ecebd8cba5abe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=3,i=?0\r\netag: \"6a595b24-13a44\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9vbnPzqsepo7jcFyHPlkFowSKPT9IpbGMaV6GIYf%2BwICGog3wdNItu%2FLrrNeVxGcVzrQ1PpWlTSCK15T62liphGyGE3QbfLdDOGHLsdi9%2FyBbzt6lKOK0U3z3JI3fS%2BR3BSy7VIoBS%2BEKXPrfHhXIZq2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348bd4b735696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80452,"size_decoded":81190,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright (c) 2020 by Alfredo Marco Pradil. All rights reserved.TEGMedium1.119;HDCO;TEG-MediumTE","md5":"90067429817b60786a2a82de4aec3b46","sha1":"59834e5d1d1cc6851b45546e1f91379b52885080","sha256":"d7273bc1b904ad04b80f708e1c082c21295d9f35ee9c4c8c1b255725fbcb16b0","sha512":"de6c5637ea351fc0bc977a0675fffe423422633a0941831070ab9f5620beb89bce58b76d0e65c071f4915ce8f0716e1ebc6aed400e30dad37cb166f7a5171010","ssdeep":"1536:LyMiTXfeRexXfRuLslyYvPPV2yGJMiDX2hfdtFDfLl:LR8GOALkbvHV2Xe3XFDjl","tlshash":"62734a06f704ce0fec122e38569597e97376fd90a75f838ba5427d69ecab09c1c83285","first_seen":"2025-12-01T11:20:44.569398Z","last_seen":"2026-07-18T17:43:20.554715Z","times_seen":15,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.938Z","timestamp":1784396558938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 0eaf7f33b8cfa123d4ab851f40e1e199\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a1d348be39ad56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":731,"mime_type":"application/json","magic":"JSON text data","md5":"296724b7703709fa3ed800984ed612a6","sha1":"d8e72256182191426cf1adec26fa77a9fd746498","sha256":"105948a1421d67b60566263f757eb1d88bf1a2c46c80b3f83f03cd12ae48e926","sha512":"bdcd4456c79a8496b312c5da78817787158961650e423ea72c7ac2d36bbc28723a1542ce1fcc76c8d6eaab3d353fa627a440f7bf6f21ba5485cb4b6de1800b94","ssdeep":"","tlshash":"42d0a7625b8e0ef857050981b449b62d787796d056506b40ec8c404462d856de24b553","first_seen":"2026-06-08T14:53:36.368647Z","last_seen":"2026-07-18T17:43:20.556292Z","times_seen":18,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.912Z","timestamp":1784396558912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:26:33 GMT","end":"Thu, 01 Oct 2026 14:26:32 GMT"},"fingerprint":{"sha1":"31:E8:75:B2:BA:5F:FF:59:1E:07:30:ED:B1:9E:07:18:13:BC:81:0B","sha256":"3D:DA:48:00:A7:09:38:1D:2F:0C:31:F5:F9:2F:41:5A:DA:53:B2:FB:16:8F:F2:81:E1:A4:DF:67:48:94:B9:D9"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 206\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 3\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1d348be6e995a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":528,"mime_type":"application/json","magic":"JSON text data","md5":"6bfc828678f2fe9c3fa09a56b072aa91","sha1":"5fd7ed7859827509f25156b62dacbc86fec6760c","sha256":"fbc4eef8beed5ebd40e017df93520a8497a3d4cac62d28cda4fa0073cf139f78","sha512":"add45ec2eacb1e9e26919971cd52e97a25b74f52ff54b58db4e1da3b424b4a623886e01a2ee1408f354af758ae87b7282f990609e1a6fa5e26c54be7c1c66e08","ssdeep":"","tlshash":"7ee02bf9e80958d1f2ff0d42e7adfa08721173e0a8c81e46c4f56a9c2a20519eb0dd4c","first_seen":"2026-07-18T17:43:20.540472Z","last_seen":"2026-07-18T17:43:20.540472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/a84ecebd8cba5abe.css","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.162Z","timestamp":1784396557162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /a84ecebd8cba5abe.css HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a595b24-191a8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BIq8QFk%2FMVJJlyaGLvH1vLPn4NJB3oKK%2F5ZGmlPlFp%2FOD0tUTXPSg02ZgDD8UwxZH%2BClI9Ap8tgFo5b2mKKViajpU%2BK6yfEfw2DaYvsgMdvDIFIRDkN5nelYP14jaixy3vFG5NcW0SBQpwbexKjOmV8UQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348b23ac35696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102824,"size_decoded":24266,"mime_type":"text/css","magic":"ASCII text, with very long lines (63243)","md5":"84e56fb3009619f2fff902f3478829f2","sha1":"fe25c77a54c4982a4dffec5e88f3d4e0d285cec9","sha256":"fbca233767f50cecd9a600244da05ff3d716c35713e260bdbb200f2efd6efce0","sha512":"c9fd562549897fec1126ef6e8de565e6589d206859326497b050aba99675ec9b994d687b3ce4001f521ec7f74d823b9bfbe74906fb3a8ded2ed70f1fbc5ca588","ssdeep":"3072:GHY9Ph9YgBHvbm+vq1UVK0lFn1KxErYItprZSO2/1WhMdXiG2BI5uJcC:GHY1h9YgBHvbm+vq1UVK0lFn1KxErYIj","tlshash":"e9a3c72ea725213f7c3b81f1c2f4b99c310ab280df7a16f5fd5251219ed27f6192a624","first_seen":"2026-05-13T12:56:39.118269Z","last_seen":"2026-07-18T17:50:26.126579Z","times_seen":11,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/assets/lucky-tracker-logic.js","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.165Z","timestamp":1784396557165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /assets/lucky-tracker-logic.js HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a595b24-10e529\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=botJLTCh%2BXQAl6neqlcsUxzfa%2FXs0cuwOx5TxTjxuE7yS5X0IfPdoAn7I4t2MSvSu7bt8Mdwdp3Ejnopbi2qhW0RHdVDHl1IOvKy2fayFFOWSILnJQi0SI%2FVmXg7sBiJLBtktyGhslOKH480vykLxVcveA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348b24ac55696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107241,"size_decoded":312374,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47536), with no line terminators","md5":"aa43860655d13fe7ae29cd48d845a2af","sha1":"eaac784ae67a146d73928a4bfe3b2f2f5a10deb8","sha256":"2dfae423197c6a73cc23e657036110f2ad00a090f1c1380c23c6e5e6e815c04f","sha512":"9d9d89863a432dfcad9f7fc150c9ca3225e1c15f9915210dd3367b0a4901006a7014616d322ab2711b6ea82a41cb648215a0ce0f1fff6defa66be6ac5e1d3324","ssdeep":"12288:V0YMPamWuzGaZRQ+KkWtxWxV1+q77hkllzam:VKiEW+CxWQ","tlshash":"b83520ab13581d3ee0b6d505cc391e1c58fe8b570e8a474bbdf3dacbd20da941a4634a","first_seen":"2026-07-18T17:43:20.558557Z","last_seen":"2026-07-18T17:43:20.558557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/css2.css","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.549Z","timestamp":1784396557549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/81e14657b7ad5efb.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a595b24-82e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xt3MXtuYRPJlz%2FqCLaGxXLm%2BfBAI8ChFHlLJtfIv%2FURwuyXzFHxQ5tJFBnvgaUdt4bePNd5uuUtd6z%2FET0sIK890wBQMg5DT9R6PbBnrWmistkapjWgGyzUefrc8%2F42qzIhJEpVB0ZvJskk10IgbK77YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348b4daf05696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2094,"size_decoded":1161,"mime_type":"text/css","magic":"ASCII text","md5":"c9c3c5122dced76f9670a5a673c7981a","sha1":"7345efa4b14fb384a79c1b5255ef24b3a130f199","sha256":"8372f790d1069a8171dcb2a84eff939959679860158f374bc2ee2de5f5b6f114","sha512":"5180fb84148685b820188a68a64b162163adfb860cf81bcab30b47f1a5c5c3844442565fdafd11fd1b835de682d52d974384c6c63a78c282e0ceb0aa8d80d6aa","ssdeep":"","tlshash":"0e419a50087a6208d6875cd533ce7e329eadf2907045da387ffe2449ec8ac65a3b5b4c","first_seen":"2025-05-03T15:36:53.682945Z","last_seen":"2026-07-18T17:50:26.112989Z","times_seen":13,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/eglMA-Rd.php?s=%2Fipfs%2FpQE52Hb4aVRkVKOr88vCyg8cd8dac2e3e9fc4545770dae82493001%3Ft%3D1784396557677","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.679Z","timestamp":1784396557679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /eglMA-Rd.php?s=%2Fipfs%2FpQE52Hb4aVRkVKOr88vCyg8cd8dac2e3e9fc4545770dae82493001%3Ft%3D1784396557677 HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:38 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhBBDRgZDsdKphcH4zK9q1qYomRCKOcNm9nAKIyTR2QbH8sjx9S%2BlLXt9xXj9yV0T29uELnJdUVANMcMYstvOMgEh7a9p%2FEwi1imTo%2Bw1FmbCYS%2BfQFbh35m%2BDSGOxdcivv7tEq2VcPcEXCMUn71s5u%2Bsw%3D%3D\"}]}\r\ncf-ray: a1d348b57b075696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619127,"size_decoded":120546,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"02252d58464bac209e8bf4fbc2e10211","sha1":"38a3a8874a945517ea9be80e23485d7d581885aa","sha256":"bbdd74460d3b102fe624ef4c60c9eeb1800eedb316462822d804c36df0e037ae","sha512":"6e3ba01088734c1f7a9b67c1f03a0a4f14dc1f522f5aad5615749cbefaee8f04081ee00719ade2fc730219c90832e28bc8d60f6099e883a0518e7d8676b39590","ssdeep":"6144:Bh5gDItQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnU6:JsQQDC6m7hFqa/J/","tlshash":"77d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","first_seen":"2026-07-18T17:43:20.5617Z","last_seen":"2026-07-18T17:43:20.5617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1015,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/eglMA-Rd.php?s=%2Fjmpd%2F","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:39.800Z","timestamp":1784396559800,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST /eglMA-Rd.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\ncontent-type: application/json\r\nContent-Length: 1400\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1400,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB0wIaAxQACAAIA8ACIQD0AhIAAAECIgMAAO8nhn2XtsKCASKGY0uTea4KSMXI7HcCAACXoE5ypDcRAKcTV_-SxZsSsiXLHn_tBPoGu3gudsaBr_KwGmiNkpLdGVqj49pM3Uqolw8e-Yno-JluMMbvpHNMCsiZ8zUPl4oolSfTS5c6N4mMFxBlVyAPpnHcO0_I2Z012ywGd_QDkzQqIR3VZEAtz0SnTq6Jp5Up9yqCrtF3WEniMaqY6tBxCQZf-LyGdBZLKCEiGHG-DVhFalqQgC2Li_3iZo7WNvdJKxDh0enxoyMLsnekTeeNEaG0ypvpzKW75v-vG1zKkeTKI9uPTWmcGfiHSCPoBTNNRRwkwr4bU2zrUybpxf8rTJCGhEX0y8j-rTzPAAH-ODFnc6K2Oq91wteJvaOUVm7weh3x8lFneXp5i9bWYMjuV0k4DrlYYnCCsvheWN2RXVCWV0HkOocRUNisFFwnv_YQjNYxVe9NjVIKNN_Ptn2U6DcQVNcIK9CQ-4aunNheqE0CgqNd9ut-Fy-wiVH6E8KSTo9iKCZ9zgRz70RIG-m5J2HohVaytqqgPvGG8uf85L9HZHvsKOS_8dx61mDPh5Be09hxlYAqTEDrxi_792o2ByNCruJevSYoNeWzqFVtnw3hPeKWP9DV-NUIPqhDM7b1JktdinEfXkxNi2yqPphsQPLhLqFI02aCiHA0d_H_YHo-KK81PY5uqG59CKIUekKOfhctO5HSL5s1qxPzXJlU4KwPwC-exEeqnRhWmXkOYnkEYVJSGQ0BvqWG8MIGfJXEdWcgepkb_psilun-SKzGGlIny9Cz1Q7BtqOjKKnNda7oOuve2bINJFnMcMbgBoOPLG3uZGUma5Zot4vS_8RnhJGdRjA_UN6RHNoQesmHiaTbY8H2-eJ0VAoD-Sbq7scg5s9HUJUagkcyVTshVSPcov-UveJdW7MWCgl3a7aj8ajTRKkDQuEZ-AaKjgROhSp5uwt-fSCoOKEXXBjiJ8tFf6N2ujEQH_QOIHTPvUrOjfV6milrFiB9TAAuaVA2783bG-vA25u-T4XKcido0lIZ8ZZeu7lcBefXYcDeW3nObBQgQzwqW-noAViVNxaF8S8so3Agfho9muvFpGV-_yvlmfyIuoFmvxx6mzF6_9pBnkYQ\",\"challenge\":\"eyJpZCI6IkZjd1lMeHF0YlZTM1NTVTFvQlAxaVEiLCJub25jZSI6MTA3LCJoYXNoIjoiMDAwOGQyYzZkNDcwY2VlMjRkOWI5YzkzMjA1MTUyNmJhZTc3ODI4YTc2YmI3ZGJmYTY2MGU0ZWM0ZjlkOTk1NCJ9\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theajack.github.io/disable-devtool/404.html?h=reallocations-solsticefinance.cc","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:42:43.158Z","timestamp":1784396563158,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /disable-devtool/404.html?h=reallocations-solsticefinance.cc HTTP/1.1\r\nHost: theajack.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/favicon-new-16x16.png","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:39.654Z","timestamp":1784396559654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /favicon-new-16x16.png HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=6,i=?0\r\netag: \"6a595b24-25b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhjfOvT2i3IxIN9QYgoTJjx9Jk4Cnz9Dd5qNwUDZOUZZG7SuGm8ElvuI5HD5TpR%2FwuMBBoNQs4cxfwbH1fJWd2Ie4bFVV8ytse30IIsL8Ol2rn8SYQG6pwZEaMO9%2FlQ1geFesKsnlSMOGlOTJmvA38s7Xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d348c1cbdc5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":603,"size_decoded":1316,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5fad8e6f5ce0927cdc9c749e30454690","sha1":"9c0b3ed81ca8efd44f66e4280453a5e046861fe1","sha256":"ae77031740e84fd5d16667fd6b51f5b2e7f5f4c90d4b49db67319baed76e0c62","sha512":"99992e0a99f5f6869c189b50430abcb6b0b4c7d731746f10e0df9858ca03886e16eea62482f1a297a78fbeacfece0ddd4d8fcb9a76449b53e89ceeb8fb7d8165","ssdeep":"","tlshash":"96f002cfa4290008479b982fa468d573edda3438b9c1292eaa8a35569d5803d18a4a7f","first_seen":"2026-04-21T11:19:53.408652Z","last_seen":"2026-07-18T17:43:20.56516Z","times_seen":11,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.953Z","timestamp":1784396558953,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theajack.github.io/disable-devtool/404.html?h=reallocations-solsticefinance.cc","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:42:43.185Z","timestamp":1784396563185,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /disable-devtool/404.html?h=reallocations-solsticefinance.cc HTTP/1.1\r\nHost: theajack.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reallocations-solsticefinance.cc/flares-symbol.svg","fqdn":"reallocations-solsticefinance.cc","domain":"reallocations-solsticefinance.cc","tld":"cc"},"ip":{"addr":"104.21.15.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:37.171Z","timestamp":1784396557171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reallocations-solsticefinance.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 21:28:10 GMT","end":"Wed, 14 Oct 2026 22:26:58 GMT"},"fingerprint":{"sha1":"0E:FB:5A:74:B5:04:AA:C5:B7:76:33:2A:75:88:6E:E6:FC:6E:A1:10","sha256":"A8:97:FE:A6:AC:73:E5:5E:87:69:6A:87:EE:1F:76:BF:B7:C4:F7:8C:F1:31:9C:D4:D9:62:B5:24:44:13:11:7D"}}},"request":{"raw":"GET /flares-symbol.svg HTTP/1.1\r\nHost: reallocations-solsticefinance.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:42:37 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a595b24-6e8\"\r\nlast-modified: Thu, 16 Jul 2026 22:28:52 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYPrae7OhfDJbNqVF8PDR%2FzV1V9cZSlaUzlwFbs5qNGvPqCsnpGfXEvYSQdA3DBvXf29gaKLPuFjBjzPH9mS5LmNj%2BAIhEkd6OlsXA4qH8yHT9dhzS%2FJqwWWcgg4KQ1qR1iGQK1BfRk%2FB9aiiOEZnOMDgA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d348b24ac75696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1768,"size_decoded":1653,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (1767)","md5":"1a9e1a5d6819a9f0855a4bb7115349bd","sha1":"f05f0c1b4bfda61daee120ece9194c7006ad6b64","sha256":"2fbc40191d01eb541e48b09605f28371fb784dbb21b65afebacedba151ad7795","sha512":"a70160c79f4c0888b758666e97caa4b01e13cde12fb7820c6f130c6cff45ff76ffcb65539473a018cc1aa152b099fe046696d797bf0d1f6b9ad0c3a90abb0006","ssdeep":"","tlshash":"cc3179d1993845d5ddea4edcef2564e4419efcff3e4413add47c6f3aa080ac0a905550","first_seen":"2025-12-01T11:20:44.557508Z","last_seen":"2026-07-18T17:50:26.115622Z","times_seen":14,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"reallocations-solsticefinance.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.955Z","timestamp":1784396558955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://reallocations-solsticefinance.cc\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1d348bd890656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":502,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.953Z","timestamp":1784396558953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1d348bd88baa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theajack.github.io/disable-devtool/404.html?h=reallocations-solsticefinance.cc","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:42:43.332Z","timestamp":1784396563332,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /disable-devtool/404.html?h=reallocations-solsticefinance.cc HTTP/1.1\r\nHost: theajack.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reallocations-solsticefinance.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.940Z","timestamp":1784396558940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1784396560086\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 11\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":422,"size_decoded":786,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"950cbe01a7ba75383b56333bd8778501","sha1":"d02903c872294e1531f911df95a6fd22ec0a80c9","sha256":"b7944c8ce8da8a13d27f27a9941db9b12e3dfa3b4cb5209e91d787982cbfb620","sha512":"6785cd99a8ee21269d7e7824fe2638c070b86e9707af9f990770ae5d2caeb32536be0fd568dae38c385071999a874b7769c2566acc38bc355a2c059db80fed2a","ssdeep":"","tlshash":"e5e02bf9e80958d1f6ff0d42e7adfb08711133e0a4c81e06c4f5669c2920519ea0dd4c","first_seen":"2026-07-18T17:43:20.569013Z","last_seen":"2026-07-18T17:43:20.569013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.956Z","timestamp":1784396558956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://reallocations-solsticefinance.cc/\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-length: 0\r\nx-envoy-upstream-service-time: 2\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":378,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T04:20:48.018072Z","times_seen":17356251,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":46,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reallocations-solsticefinance.cc/","date":"2026-07-18T17:42:38.942Z","timestamp":1784396558942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reallocations-solsticefinance.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://reallocations-solsticefinance.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 17:42:39 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjcStvuscnyoxB1anyYzm7wCaiQ5Xs8ftQtqbQPOInx4yK3jkoRi%2B%2BBnhjtIUu9KprMOO30uqNXCluGzSZaxw7rjxjDpPTDxs4Vn0s2kLCNLg3DOe%2Fi8keqHTGct8qHWyc4y3O0N\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1d348bdbce2783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":716,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-07-18T17:43:20.571153Z","times_seen":193,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}