{"report_id":"a592a609-f046-48d1-baec-2d243c6078ab","version":0,"status":"done","tags":[],"date":"2026-09-29T06:04:33Z","url":{"schema":"http","addr":"sitemulrrt1unux4.xyz/","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"title":"Firelight – The Protection Layer for Digital Assets","dom":{"size":484744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"e48513854b2b027c53d0a9a399d1938b","sha1":"ef9d07eeb5bd3da4b4b3cfd3c803947cdd9d1bbb","sha256":"d201e13259235f8fd04ecc8e0b3995a1d333428fe34b711d4df6c41ded020ac1","sha512":"74911bdf7e7841a61c739e5fb8b99401d7cafccc1c0504b0a398dc8c43ec754fbcd4cd553c9143e439739fcab221dd2c53617a1e22635f428035729ae634731a","ssdeep":"3072:5iuTSYcLGIJ1e+BY9mxe6z5evVt94foO0WcAfYtI4fzM0WcEfyf:5iu0H4AE6z4bpf","tlshash":"b0a4d7236224d0385dc729bdf7c9ba1c351c9202fb3386ea62f9516fd5c9de412a279c","dom_hash":"domhash3ac0497cf83a5dfdeb178ea772faa01d","first_seen":"2026-09-29T06:04:56.788882Z","last_seen":"2026-09-29T06:04:56.788882Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sitemulrrt1unux4.xyz/","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T06:04:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":176}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"pinky-goat.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.990078Z","last_seen":"2026-09-29T06:04:33.161449Z","alert_count":3,"request_count":1,"received_data":3972,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.502245Z","last_seen":"2026-09-27T10:54:02.157569Z","alert_count":3,"request_count":1,"received_data":1835,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.508965Z","last_seen":"2026-09-27T14:45:14.993675Z","alert_count":3,"request_count":1,"received_data":2512,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.237113Z","last_seen":"2026-09-29T05:07:06.875024Z","alert_count":3,"request_count":1,"received_data":2860,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.423894Z","last_seen":"2026-09-27T02:57:44.849641Z","alert_count":3,"request_count":1,"received_data":2896,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.495466Z","last_seen":"2026-09-27T02:43:25.270442Z","alert_count":3,"request_count":1,"received_data":3056,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.529093Z","last_seen":"2026-09-22T20:46:13.751785Z","alert_count":3,"request_count":1,"received_data":3027,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.915588Z","last_seen":"2026-09-29T04:55:39.615736Z","alert_count":3,"request_count":1,"received_data":1714,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.472116Z","last_seen":"2026-09-27T03:27:02.680691Z","alert_count":3,"request_count":1,"received_data":2758,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.271691Z","last_seen":"2026-09-27T02:58:38.995112Z","alert_count":3,"request_count":1,"received_data":1912,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.415795Z","last_seen":"2026-09-27T03:33:33.660127Z","alert_count":3,"request_count":1,"received_data":1988,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.683703Z","last_seen":"2026-09-22T20:45:15.469104Z","alert_count":3,"request_count":1,"received_data":2330,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2819481,"first_seen":"2025-08-16T04:05:13.25434Z","last_seen":"2026-09-27T15:01:29.374587Z","alert_count":0,"request_count":2,"received_data":1545,"sent_data":1087,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.213765Z","last_seen":"2026-09-27T02:47:40.862672Z","alert_count":3,"request_count":1,"received_data":3342,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-09-22T20:43:14.084195Z","alert_count":0,"request_count":2,"received_data":1424,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-09-22T20:50:15.741963Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.930397Z","last_seen":"2026-09-22T20:45:10.668363Z","alert_count":3,"request_count":1,"received_data":3456,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.285114Z","last_seen":"2026-09-25T06:10:44.991063Z","alert_count":3,"request_count":1,"received_data":2048,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.50592Z","last_seen":"2026-09-29T05:10:16.007735Z","alert_count":3,"request_count":1,"received_data":2914,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pinky-goat.digital","ip":{"addr":"172.67.178.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T16:44:53.164795Z","last_seen":"2026-09-27T02:46:38.874106Z","alert_count":1,"request_count":1,"received_data":5159160,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-09-27T02:46:00.981614Z","alert_count":0,"request_count":2,"received_data":1625,"sent_data":1087,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.507258Z","last_seen":"2026-09-27T14:55:07.381451Z","alert_count":3,"request_count":1,"received_data":2324,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.sitemulrrt1unux4.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.123145Z","last_seen":"2026-09-27T02:52:13.549089Z","alert_count":3,"request_count":1,"received_data":143057,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.397557Z","last_seen":"2026-08-13T23:41:18.713222Z","alert_count":3,"request_count":1,"received_data":2139,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.202753Z","last_seen":"2026-09-27T02:55:38.880179Z","alert_count":3,"request_count":1,"received_data":2022,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.12039Z","last_seen":"2026-09-27T02:47:34.291081Z","alert_count":3,"request_count":1,"received_data":2330,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.549772Z","last_seen":"2026-09-25T05:56:32.768015Z","alert_count":3,"request_count":1,"received_data":1786,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.453427Z","last_seen":"2026-09-27T02:44:26.219871Z","alert_count":3,"request_count":1,"received_data":3920,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-09-27T03:23:35.786599Z","alert_count":0,"request_count":2,"received_data":1219,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.219188Z","last_seen":"2026-09-27T03:28:10.822703Z","alert_count":3,"request_count":1,"received_data":1626,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":1,"received_data":49344,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sitemulrrt1unux4.xyz","ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":8651105,"sent_data":14983,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"gateway.irys.xyz","ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-25","domain_rank":2119884,"first_seen":"2023-11-30T18:58:13Z","last_seen":"2026-09-26T02:39:09.6963Z","alert_count":0,"request_count":57,"received_data":30493,"sent_data":33001,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.347276Z","last_seen":"2026-09-29T04:42:59.386781Z","alert_count":3,"request_count":1,"received_data":1286,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.091142Z","last_seen":"2026-09-27T06:43:57.511298Z","alert_count":3,"request_count":1,"received_data":2512,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.51194Z","last_seen":"2026-09-27T02:52:25.066541Z","alert_count":3,"request_count":1,"received_data":2150,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.356019Z","last_seen":"2026-09-27T14:57:15.126991Z","alert_count":3,"request_count":1,"received_data":1962,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-09-27T14:56:02.965738Z","alert_count":4,"request_count":2,"received_data":1259,"sent_data":1103,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.220629Z","last_seen":"2026-09-29T04:45:19.094543Z","alert_count":3,"request_count":1,"received_data":1840,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.514043Z","last_seen":"2026-09-25T06:10:45.140742Z","alert_count":3,"request_count":1,"received_data":1628,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.33794Z","last_seen":"2026-09-22T20:45:53.42414Z","alert_count":3,"request_count":1,"received_data":2294,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.433983Z","last_seen":"2026-08-13T23:41:09.026773Z","alert_count":3,"request_count":1,"received_data":2186,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.986881Z","last_seen":"2026-09-27T03:27:26.511182Z","alert_count":3,"request_count":1,"received_data":5724,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.372315Z","last_seen":"2026-09-27T10:53:53.908816Z","alert_count":3,"request_count":1,"received_data":3234,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.159815Z","last_seen":"2026-09-29T01:31:24.248039Z","alert_count":3,"request_count":1,"received_data":1855,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.138569Z","last_seen":"2026-09-29T03:23:57.175931Z","alert_count":3,"request_count":1,"received_data":2114,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.148619Z","last_seen":"2026-09-25T06:04:16.787559Z","alert_count":3,"request_count":1,"received_data":3390,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.248141Z","last_seen":"2026-09-27T03:28:22.859521Z","alert_count":3,"request_count":1,"received_data":2362,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-27T23:17:57.5349Z","alert_count":0,"request_count":1,"received_data":23375,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.511071Z","last_seen":"2026-09-29T01:29:56.904251Z","alert_count":3,"request_count":1,"received_data":2772,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.819472Z","last_seen":"2026-09-27T02:43:21.146023Z","alert_count":3,"request_count":1,"received_data":2300,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.954615Z","last_seen":"2026-09-27T02:46:01.596435Z","alert_count":3,"request_count":1,"received_data":1856,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.165286Z","last_seen":"2026-09-29T04:42:52.096052Z","alert_count":3,"request_count":1,"received_data":2532,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.791287Z","last_seen":"2026-09-29T03:22:19.502375Z","alert_count":3,"request_count":1,"received_data":1282,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.160193Z","last_seen":"2026-09-27T03:26:20.4112Z","alert_count":3,"request_count":1,"received_data":2166,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.107648Z","last_seen":"2026-09-27T14:46:36.611343Z","alert_count":3,"request_count":1,"received_data":3410,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.714098Z","last_seen":"2026-09-29T01:33:14.621587Z","alert_count":3,"request_count":1,"received_data":1880,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.1075Z","last_seen":"2026-09-27T02:45:39.951727Z","alert_count":3,"request_count":1,"received_data":2284,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-23T23:42:35.564928Z","alert_count":0,"request_count":2,"received_data":19572,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.665153Z","last_seen":"2026-08-13T23:41:15.823044Z","alert_count":3,"request_count":1,"received_data":2600,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.510149Z","last_seen":"2026-09-25T05:47:11.876738Z","alert_count":3,"request_count":1,"received_data":2198,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.285132Z","last_seen":"2026-09-25T05:37:50.062595Z","alert_count":3,"request_count":1,"received_data":3768,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.508579Z","last_seen":"2026-09-27T03:28:41.446998Z","alert_count":3,"request_count":1,"received_data":2770,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.92935Z","last_seen":"2026-09-29T03:14:40.436384Z","alert_count":3,"request_count":1,"received_data":4222,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.504231Z","last_seen":"2026-09-27T10:54:40.178784Z","alert_count":3,"request_count":1,"received_data":1656,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"143.204.238.101","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-09-25T15:21:26.966742Z","alert_count":0,"request_count":1,"received_data":6150,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-14T13:17:43.117422Z","last_seen":"2026-09-27T02:46:32.814595Z","alert_count":3,"request_count":1,"received_data":2106,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.300482Z","last_seen":"2026-09-27T14:45:22.339859Z","alert_count":3,"request_count":1,"received_data":2120,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-09-27T02:58:07.068332Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.987253Z","last_seen":"2026-09-22T20:43:03.766743Z","alert_count":3,"request_count":1,"received_data":2874,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.209311Z","last_seen":"2026-09-29T06:00:09.574831Z","alert_count":3,"request_count":1,"received_data":2326,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af9a8d0c3e1a82d9bd75e1948f57771f","sha1":"1ef74ab8ad42ea405ae85eafe976eadb4910a646","sha256":"34ce2a229b4139028e57381170b7d41cbbf7f54ea562f72913ad311bb72d13da","sha512":"142184ef90fb557244e5bd7e7935a50648e2fc4064603a2d3c14bdd8cb936af8da6ca376b4acb2523d2d614975e0fc469f32b1c7375f8b24e444cd9dc369115b","ssdeep":"6144:s2AWwzYspp5dhWPIpBz4qclU16j6pdS3cRT5r:sfWwvpKPIpBUlKg2T5r","tlshash":"5be504fb96be1e3eccb3551cdc356e0c98b504a60a2ee05efa277488c57d69513a032d","size":3214491,"data":"","first_seen":"2026-09-25T05:38:00.143392Z","last_seen":"2026-09-29T06:09:05.462995Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"91744e1875a6370b6dd629ed231bad37","sha1":"fd214d8a02eaa980a76c131b4f3389ff2d17dd44","sha256":"5617114f4a931186ea87e390e3f0f3f302228669e45a01c700768df4e1912d2c","sha512":"a3262534d0d1560cdb4a3a5d1d7e4d24a5658b85e572401157e012e737d8972a8f4a81408e88131bff3db033e722a6bf9a8d8361862dbeb81d9697b84aad3653","ssdeep":"49152:s3APafWRhe37mGbpM/OhYaeZndc9Vi+l30xmoo:YidhY7mGbpM/OhxsnmDiA0E5","tlshash":"6e162caf20e64b4bd53655e09bb4af0fc19a2af971fcf9e65034103efc2a26251d1970","size":4352762,"data":"","first_seen":"2026-09-29T01:29:51.031216Z","last_seen":"2026-09-29T06:09:05.449526Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","size":18401,"data":"","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-09-29T06:09:05.340719Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/5e0bebf4-8d19-4c4f-8da1-a9ff650ff92d","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"fe8234cbd1cdd5966074b3037cada479","sha1":"b14ac475b831cc60c9da81068952475258c1e67c","sha256":"31dd9f4ece4c6a0d7855391ebe01e3c21bfb6f7748b825e30b3223a43b69078e","sha512":"0e5d7a91b427121bda2e1119c5fbe92db55bf53f045f492dda47e16786c5b14938d337591a9d5d392a5d69c8db7e6c277c5a6b5e9daafa1dccfd9c11b8a14096","ssdeep":"","tlshash":"4a517250b734a5ae0792cac778f63263a5244b283d6ed811d1af8e4337970d205dbf38","size":2995,"data":"","first_seen":"2026-06-10T00:36:37.858875Z","last_seen":"2026-09-29T06:09:05.451854Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","size":181,"data":"","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-09-29T06:09:05.351412Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinky-goat.digital/AWnvNMxhFauM53ddYUZzP.js","fqdn":"pinky-goat.digital","domain":"pinky-goat.digital","tld":"digital"},"ip":{"addr":"172.67.178.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da9eac3fb64fec133177aee5774ed4f6","sha1":"26bcd6b89f7c51d525f4d435dace79dbf34927fb","sha256":"bea64a7be0b0ccee087ff4027b67df218fa9f4cce70349702ded3d1b019051c6","sha512":"ae8e8ba1346b3dc214d33c8a02657c504963cb585879c5fa9744f4222a39e8610b7586de688a374588143c4fb13fa5c9cf86ad0068daf389aacfef52c766de57","ssdeep":"49152:ShPEUyG+rJFwzG9yjT4fFmGbn29SvGa83z56zVGupFKvKMN:SFEUy/YzTyFmGbn29Sv/6zUBGyKS6","tlshash":"3936a19f20d60b4be53655e09bb4af0fc19a2af971fcf9e65034107efc2a26251d1a70","size":5158364,"data":"","first_seen":"2026-09-29T01:29:51.03556Z","last_seen":"2026-09-29T06:09:05.455497Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/alpha-cacheplus.js","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e58753549c6ba131096c4689bb9535b3","sha1":"0a87317622152c91432e9d6cccf6f8849c1384ec","sha256":"d79e1792b519fc10ea361344289d90880bbe195e0180bafce744daee77304742","sha512":"c534a05b157498f742ba2475ed3dfbf8b78e98575efa01c722ad7206f21437431b9125ca41753a023615d463bc9abf11c1612cf7757b98998b99be98c7c4ebee","ssdeep":"6144:auS6ez70ibf9PPiJIBjz4qWlU56j6pdS3cRH5L:aJ6ezjb8JIBjulIg2H5L","tlshash":"19f5b2f717a98a3ec0bfec49dd356c0c91b4ca940e1e5156fd23a95bcb8caa8435874c","size":3562979,"data":"","first_seen":"2026-09-25T05:38:00.148291Z","last_seen":"2026-09-29T06:09:05.453878Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/secure.php?req=ping","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.303Z","timestamp":1790661830303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRusBDBivJkNexXjLBn7rPJtO90TF5E94mPDGsIom4gW6oJUxhXLqtAiRtl66%2BDuTYL9r7PeNucmiXfot5sziB7lzqJY0whk0gEaJjuFQ9oiYbD%2BlXU0yEGW4lOxE6q1nilv2eZ3Rw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9776c077127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":833,"mime_type":"application/json","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-09-29T06:09:05.325437Z","times_seen":1110,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.420Z","timestamp":1790661830420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98156c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.643Z","timestamp":1790661829643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 584197205bc0f2064bafa80c59baf471\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a428c973fce8b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422,"size_decoded":745,"mime_type":"application/json","magic":"JSON text data","md5":"72c21bc0915f1f263c4858c65a59bf3b","sha1":"d6def455384192f052d1bef3756e2af41a9cc001","sha256":"4ef8f608bd56372bd9513c9196373b15aecbce54adcfc2f0860477525d574bb6","sha512":"a8b382255c355599954bb8dce2a90816c459d979e6bf64a5757e68b5ce220288386543a87947f12daf8282b994bd4135119f69f5824c8a24c94d454f2f663dd0","ssdeep":"","tlshash":"4fe02bd05906add9e19e7cadb72934046001771776c80546845c82c00bd4411f75d58e","first_seen":"2026-09-29T01:29:50.93751Z","last_seen":"2026-09-29T06:09:05.319936Z","times_seen":141,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.430Z","timestamp":1790661830430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c99656c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.440Z","timestamp":1790661830440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9a856c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.444Z","timestamp":1790661830444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c056c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.454Z","timestamp":1790661830454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/","fqdn":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.845Z","timestamp":1790661830845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/ HTTP/1.1\r\nHost: fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3334\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsiS45SUuYLPHbmJ5vbsGjf3rcyJ7yvguRsWOU8qqaFoaUQquZclYVbiv3QC%2FcmS62OMCPjgypduVpFlKBbo4cLH8KKRyPkFZ3V5Wx2M%2FG2C%2By%2FCod4HaG9RB9FkA99IFHXU8kJ%2FwQqZXXX6%2Bd4Dad3jPDUt%2FOG9NOHPxjUAd0DCwV6vs%2Fnx%2BoHdVgBScmLvXB2VlpxLs%2FG3mvq88bGWeEsOTiw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e14b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3334,"size_decoded":4222,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb282163d619a97ec44427f12df5d43","sha1":"a1c10417ed604229709795569d570036980334ae","sha256":"1fbbb4ff9c79d6a4c0d0545c410149d1b69fb38eeb25c787af7a91cc385701de","sha512":"cba016d4aa33a2753e9635ac97245e16d05965403d948a7996528f0514645f34b759b5978c4add2fe7adae5b32c7ce6e7ba50bd76cdda04a8f66108ed350b776","ssdeep":"","tlshash":"53614bdb0b0ea0a5147534360548fc1a315b87f07ba4faae2382cc689ea81f5da7c1d4","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-09-29T07:47:53.680072Z","times_seen":822,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":40,"dns":21,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/","fqdn":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.919Z","timestamp":1790661830919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/ HTTP/1.1\r\nHost: 7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2034\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5uZArC2xXDTcLfeLKLeEDLUBEgYEXfSAslU6bLyvVK8geTsiI76%2Ba2aFvb0PME15P2jVQy4FuT4wgBeTZaBKNQZQS1dmqtD7M7g86iharic6H9EdNivYTnpdQ4QZX%2FkndKSlsqq3kbXnuB%2BUNusP20EeFyfe2uHO%2BpH1z2D63R9tf4rg1%2BQEhE6pxUBdENCYx%2BmicQ2RyfNv4RzcXtlddWd74Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":2914,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b83294a28b7ab0245ecf46cb205cfcc3","sha1":"2268400a548f428e98812f71c49921937ded5610","sha256":"9be573dd626af24162d8bac830e1e4427319fe2b45ae19ed877417505fac3085","sha512":"fbefee7041bbd4f1f6b3096106c8eada732f11444818b9aec2947e23e323aa8148a3f352ae408ac3755e7c1bd26b4423f17c01747a9c96230f5908b0c8ad2688","ssdeep":"","tlshash":"b3414cc39546827c704c1d7aeb02f1c321e7f1a181e1283216c86af5729e400a70f795","first_seen":"2026-06-11T07:30:29.751577Z","last_seen":"2026-09-29T06:09:05.38451Z","times_seen":283,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":33,"dns":15,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/secure.php?req=cap/redeem","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:52.666Z","timestamp":1790661832666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"POST /assets/secure.php?req=cap/redeem HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 1477\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=n7l0623kl94iaabl3tgreopgl7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1477,"data":"{\"token\":\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuIjoiMzM4OTE0NGJlYjc5YWIxN2QzMjZmMDA5MDUzYzEzOTdlZjY5MTE5M2ZjMzZlZDgzNzYiLCJjIjoxMDAsInMiOjMyLCJkIjo0LCJleHAiOjE3OTA2NjI0MzE1MjUsImlhdCI6MTc5MDY2MTgzMTUyNSwiZWkiOiJTQ2hPbnZPM25LdDFINko2dDlBNVdRUWc0U2c2R0t2SkNjT0FrNzU2cGNqTjNMTEpwSkNGSHhGT0dXSVdTeG1uNXBxb0ptRXYzYlFYX1Q0UlRSRGllRXJQeE9WU2w0c1E5WVUzUEVMSWIxTlJJR0djUmNUVnpRRF9JUTMtZjFIdTJGcFVxMEtkM0lraDVWeVpzZlF2SGhqblBfZjRmTFJWWjRfZFVMSl9QWUxCYkE0TEdaY180QnJ3OW5lSEtaZ0xWaTAxd2Fhd0E3WUk3dExiUWxhbUJWRnBZNDRfYTVfWHpJd25oOWl4Qi1GOE9vZmZOTGZydWZjWmg0V2Y5bTltZmpJQ0hxSUJqbTQ4aW1QVHNaYmlKOWNqd1dQNUtIS1lDeWhDYXFDeFlReEFRWHVLbVQyRkRaOWlyajVtIn0.2V71NpFEE4RHPZ036t8H11Clr_z3Kvd5A0cMrnudfmU\",\"solutions\":[5716,21706,19351,34072,3106,69653,28429,70055,155917,99506,1819,45891,38746,5969,18397,15017,74603,103212,32237,65678,43664,15971,13699,144175,127249,91004,70250,122753,126761,7292,75520,142168,118696,8435,50617,9699,77878,70638,73096,38220,49787,249171,126909,53819,31606,90855,70988,47331,104975,60702,89011,60282,259056,55836,19607,92262,221486,32738,30495,77614,1040,71389,81051,228352,32666,9915,79095,12198,13413,72509,88767,13572,61599,70209,46212,21828,192872,103764,64073,26108,76069,120837,41689,123570,120241,171075,283571,159798,12758,48121,85771,72410,16534,66994,94800,22128,85757,33988,18042,57874],\"instr\":{\"i\":\"f8463c074bcc56fd6af4839afc526eef\",\"state\":{\"zjxk20qolkiv\":628894,\"qoyytg7oid2g\":733999,\"rewfeszkr4kg\":228508,\"uebre4s0afbv\":453540},\"ts\":1790661832654}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:53 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5W%2FoTHRI6DPFDNUei4zL71iPbrYqy01weposdCUxnhgEwwdXhp%2BxkCUeC0ra7RmfsfpiVzl5KyuY3MpawqC%2BAZgIAbwi1El3S%2B4f27DwcVv2TuDXKOGn2C5%2BfedrW%2BgPg3QXK9yrA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9862cb87127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":982,"mime_type":"application/json","magic":"JSON text data","md5":"f02d44015a07b9012a349c85f3fa35e2","sha1":"2b4923ce03902c000cf87a045130c60970f6ad16","sha256":"7bc3dc70c951331fee5093ce357d9e4d589231ea56e724c8959ceb9640486458","sha512":"93ccd7d628b236e8d40cd913986bf064425de479614f1f905273dbf8ddd781a3b30f9cee66a4f51f89529daffb78831f18a1d0acd5a3205c42e9001e238410b3","ssdeep":"","tlshash":"03d0a78fc39445b375992e03ded46e85fbde8323d444c80a95474f95d15193136ae8e3","first_seen":"2026-09-29T06:04:56.800207Z","last_seen":"2026-09-29T06:04:56.800207Z","times_seen":1,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.111Z","timestamp":1790661829111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zvFAZEDt02ZkjzXNfrk0kcPLxSum5k3xEw7ycJGug1GMYWlKNSVbu8wEK74%2F5yak80PqFlqBLQpPzbkXEaaNAGaDoA7yGbAr3y31Kel0AdZMLu71QoPPrrzL89yIIh4wnXOARkfOw%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-138b\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96ffb9b7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5003,"size_decoded":2447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf7a1b121dc1d99915e6b1122b271e43","sha1":"8e018b889c4e12ffe9715f78d2fd0f6a42ac7881","sha256":"007e4ec9317dacf6b970caf775ba67b5b6d8a80127b27f5971e645c13cc90ac4","sha512":"e1446e5425a8db2f62ad69cfe3a42350c325b4db251320db3419677ee8ca44dd9180e2a326f0b9a74842cdd72bddcff0757399a066e590ca9f832ab346b61a60","ssdeep":"96:+OUArTSZHwUn+hyo6JluvfkMhe8CPUt/Qiv9lCjQVLETTHGpU2Y+8oYqt:nFc3MD+WgNPUtDlcUVoXmSo/t","tlshash":"c8a101eefbfc22b8d0d8a7a2f223014f399fb4652f42cf53c17d8e8d6405818a6a5445","first_seen":"2026-04-24T15:23:09.419836Z","last_seen":"2026-09-29T06:04:56.80199Z","times_seen":52,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/","fqdn":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.900Z","timestamp":1790661830900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/ HTTP/1.1\r\nHost: g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3088\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BABXkD0fl7qJzciqoTVsvh0bqyyMupUhNz%2Bw9MkjhqYkajF0vFNd7F1tE3bABso41ULpnyBP8euDF1XFoUshoAig5vvf%2BC0COOetc8YA%2FJ%2BrR4F7so3wh16u5tlyYNudT6xu6MpqsVxobpWfHzr0CgDzkaJaSH5bbUNEv7%2BO5k55RkXLSGrIhad%2BPs7txLmOb4zyX1mz2FY9%2BGX%2By6s5KfMTeaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e27b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3088,"size_decoded":3972,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"945d9baeb17b3b825fac41d17a7c6708","sha1":"d4c7c37a26dbcfb19dab27be959c1557d98c7017","sha256":"5b023ca70029d1de860edbd397ecee29a6a4967ffda6d31ff6f60055ecf4061d","sha512":"23c5193bb3bacee8c6558cfcfcbbb784216f48777bf4e084246f907a4000bbd7836a7c4b6fa266349b3fe93d6af257a16a2f715534b8377b38ccd0e6dde762ce","ssdeep":"","tlshash":"2b514c24286d7d3b8186b91315d85d3f85fb83d2fa4ef34836f69290d040d29c6e0306","first_seen":"2026-06-11T07:30:29.715818Z","last_seen":"2026-09-29T06:09:05.436703Z","times_seen":285,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":36,"dns":26,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/secure.php?req=fp","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:53.115Z","timestamp":1790661833115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"POST /assets/secure.php?req=fp HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 2870\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=n7l0623kl94iaabl3tgreopgl7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2870,"data":"{\"payload\":\"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\",\"reserve\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:53 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPAlTTnUJBttTm%2B6QhUXN1YbDB9i7cV5lBjJJGHuryBjVzSAbMZRXScVA7gYOb11VKyEu%2F%2BunLx8urW5PI6teeIvRvQGGiEeFLuVygiwpHJx6YMfvDwZYKgoulSzNGOjZ0UjakJmHw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c988fcf47127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":1766,"mime_type":"application/json","magic":"JSON text data","md5":"6367b68bb5fa12c43bd442fc5834c355","sha1":"30c83b25aa8935093d8f434b25c5c3bc5d8c8015","sha256":"6a68edf0ed6103f06510279b30ab9595914e86e75c58fcb78f7c549f0396d13e","sha512":"d4ffd4e25e113ab892e942df58a5689065652a65e9260411a3cf84611f633752fcda993577c2dfd9bab0ffb47fac7b1b6027934ebfce9e8fd94c5742bc627ba6","ssdeep":"","tlshash":"e5210a0c17ae8198098f8a5453641a2a7ee42c5fb496d57dbc1f80b2330a3df16239f1","first_seen":"2026-09-29T06:04:56.803764Z","last_seen":"2026-09-29T06:04:56.803764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T06:03:48.660Z","timestamp":1790661828660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOcPrnbUlba21UbtZPmBGmg99xydJYonKRcFD4qj1zyQHg9INNRFDmfGVQFGUbPVN4jme9YOkieURPybW4fJ2lTrmfBE3j4tDuxSkV9dOWVasHQGke3xVYBMhSwTAjJ3Wh%2BR1VrbgQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a428c96d4b717127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":440375,"size_decoded":52246,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"3f70015e33a9796b21ed3d3fe64025ee","sha1":"e6c9d1dd0bcff690b51db55680049b4f989c17c8","sha256":"5ee2b7ec29a1dcf6772a4fae51caa8a7e74265ef0f5f14c73ecf7af616baccae","sha512":"f4c181ce1424bf53ba597590435d61a4ceb712219a1bdde0445bd11d2d4b8b0342daab4fc9e8beabe1a2983b5a96a9f0c374baff17922b2817f024693b69976d","ssdeep":"3072:yNuTSYcLGIJ1e+BY9mxeh5evVt94foO0WcAfYtI4fzM0WcEfD:yNu0H4AEh4bA","tlshash":"4b94c6136214d0385dc729bdf7d9ba1c251ca201fb3286ea62fd426f95c9ef412a27dc","first_seen":"2026-09-25T05:38:00.053396Z","last_seen":"2026-09-29T06:04:56.805551Z","times_seen":36,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":107,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.112Z","timestamp":1790661829112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0djUwReTAL0Hm79aNHt%2F8eMy9LcWSENHPyQMsxjQfGHYxBtJIFBYVOc5qvxxvmgZiG45mFoTxx88OyFbT7jgod7mMaLx9UaGLqPxipKOVccj6sguadRXoaMmCyhoTYi7sctu7O4b9Q%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-f27\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96ffb9c7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3879,"size_decoded":2069,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d52d6a01e6c96b24719b6988fe5e7b97","sha1":"37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52","sha256":"2243915c6eddc18a5dded6f2221560e7d2629743bc797b691817543b22cd8d2a","sha512":"0067e9b7b9e0d5eadbb8ec8bdfab711c0a24e5de633aa6bfabee210da9c0eeacb8098b4d2554d9d809fe9a9bc771b6f9b586eb8790326dd0bc87ac32df9f8870","ssdeep":"","tlshash":"ac81c0ffff2427be6469a3daf613109a7c85f8a826818e81c18cdd8556e1c8d95cd8c1","first_seen":"2026-04-24T15:23:09.431445Z","last_seen":"2026-09-29T06:04:56.80641Z","times_seen":52,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.655Z","timestamp":1790661829655,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.659Z","timestamp":1790661829659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:05:13 GMT","end":"Thu, 12 Nov 2026 17:05:12 GMT"},"fingerprint":{"sha1":"3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23","sha256":"0B:F3:1B:F3:1C:34:BF:C5:3C:C4:C5:D7:82:EE:73:AB:76:EB:51:11:1B:89:CD:E6:C6:FA:42:22:5A:3F:7C:AE"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":359,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":25,"send":0,"wait":56,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinky-goat.digital/AWnvNMxhFauM53ddYUZzP.js","fqdn":"pinky-goat.digital","domain":"pinky-goat.digital","tld":"digital"},"ip":{"addr":"172.67.178.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.831Z","timestamp":1790661829831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinky-goat.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 25 Sep 2026 10:13:21 GMT","end":"Thu, 24 Dec 2026 11:13:19 GMT"},"fingerprint":{"sha1":"35:33:82:77:76:B6:A7:96:31:1F:BB:BC:2F:42:09:0A:3B:A2:61:46","sha256":"27:D7:0E:15:05:F4:87:75:A5:AC:43:D7:52:0D:17:F7:91:FA:D6:C7:BF:7B:58:D0:E2:78:53:CB:CA:16:30:17"}}},"request":{"raw":"GET /AWnvNMxhFauM53ddYUZzP.js HTTP/1.1\r\nHost: pinky-goat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 29 Sep 2026 00:01:43 GMT\r\nserver: cloudflare\r\naccess-control-allow-methods: GET\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"da9eac3fb64fec133177aee5774ed4f6\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FU09NxggiIFqSuGTFjkuu3VsoYr86YNeJv6iaqP7RdNcoLjaQFndvjZPZ9rWOcd%2FRCxt95B170k%2Bjq5sQe21Z3TGBlNIDlZN4LauDlXRnZSWTlsidyqjNE%2FxKtYahXFjtun%2BEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9748fcd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5158364,"size_decoded":899811,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19575)","md5":"183a392740b127712326d32846295d29","sha1":"a60392eb586640a3548db756e25e00883a066df7","sha256":"4358c73b4c4fb8474122f31015245a162fe3027b76c15214f171017599028c59","sha512":"9ec4806945309ed87327dc12cec025565b8f391871178473eaf65a6c1be3a5fc8e9e9fc7750381cb682e6fafa792fc359adddfe952a70d8e8c3cb7100e2976e8","ssdeep":"12288:1vBqhYuPRgTUZYGhck+wN5jsskbZ9yPyFCpqWyDKU94:xwhYEEUZYG+rwmFdK3","tlshash":"8e355b9b33a47863936b45d008262d0ae23afd9c5859943db174ecffbc59580b6b6f30","first_seen":"2026-09-29T04:41:12.914919Z","last_seen":"2026-09-29T06:04:56.807463Z","times_seen":5,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":5,"connect":8,"send":0,"wait":13,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"pinky-goat.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.419Z","timestamp":1790661830419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97f56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/","fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.838Z","timestamp":1790661830838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/ HTTP/1.1\r\nHost: wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1406\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLYO3FqTwRqWfrh%2BOSXvz%2BF6eLhT4wwFCwQsMWzHPb3cfiiYIhj2aFRaXjHWjjlJE%2Ffu8pAqcsBBHi2JrcNbWpNJ0kqE6KV2k050T1fkhVXcNnVS4XjEP%2BujSCriBJS5N9Dkj%2BtxVvRzkMozN07p41jynXIh8KekoeREsVt0f2Vz0Yt2w9dyJeZlW7o1bTQ42rmwBEF6BlCgD2q1VRbb7ACwM6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b0defb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1406\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":2284,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a580f24cad130966ffcbd2e5d418af8b","sha1":"c342b3da358fec2cab72adb2ab4a0e89d480ba85","sha256":"368962fa0e2ffe5791b6e3abc5a8c01650c5fa77ad108cae356782bff6e6e02b","sha512":"eab7045c6d44b4a6d712cad0a7fe31bb7de1d742d6a138b360276f71336e505adcd9e163210ced17d596a738300a1f3afa82f3bbfd3117cd1661a30e9d214720","ssdeep":"","tlshash":"4021e939ec5437f1192982716652c7ccf3051a164620a710e74fe2dd08e5c1b668a7f0","first_seen":"2024-08-13T01:00:15Z","last_seen":"2026-09-29T06:09:05.376605Z","times_seen":506,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":11,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/","fqdn":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.852Z","timestamp":1790661830852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/ HTTP/1.1\r\nHost: b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1096\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbFeP5R2DF1tkvC8qSidwdbga06sEN8oz5TDiYmCDZwiGtYJGwSZ%2BbK%2Bf%2BM5zcqUbrLDlnoZ6LN3DAzj1R8LicEy%2B30eXJPx4RdPYVe%2BDpYt8L9JyGZXopnjGb%2FGEQGS%2FXxR7C%2F6N%2FpBqtuBHRLGpovaEeoGORfEGsOB2XsiUKCEkTpkwDrqhdXFEn%2FGHTqgMutN4WnWLqL53a%2BXaKnVi12H1%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1096,"size_decoded":1988,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1dbbb93d3b934f5af157234adfb688a","sha1":"a0d0976bcd5b4ad1bab1b86b381148e51c1b8457","sha256":"7f497eafd0585f420a2023adefc4e497c9588a598c4fced1c6eb1b9bcbaeb123","sha512":"84a24cf0782fb6fd625e3a6f82c8b2edc677761d23ce4721086f24396dac0fbc39ab65aecae899afbf9f18b0a83552d2defe4552520c9f12a4b5bcdf7ca6f1bc","ssdeep":"","tlshash":"3511e588b2cad020ca96ddd583bab180c214f0dc32ce8c3a15d1e24e0dd60b04b1290e","first_seen":"2024-07-08T23:13:47Z","last_seen":"2026-09-29T06:09:05.437612Z","times_seen":531,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":39,"dns":14,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/","fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.799Z","timestamp":1790661830799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/ HTTP/1.1\r\nHost: ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 975\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZjZZtw1Hljk1Ymz4FdkDT5OrEbWnDVy30aFPlLhDohy69NMv3Wb92X0wFLRVfoD%2Bguflh3N%2F%2BibitSIXdZORDFzDi8DFf3r1vtBch%2B0R85ORX5o26%2Fnix019XJi3Ppc%2BBLEwVRT39A%2Fp3e16ZsZ16rehhp48UDNNufTm9nLnvFoXT9QfLaFY9Gl7H7XQHBC6CsWa1E%2FXH4KrREyQAMLLMup5sk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97afd144c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 975\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":1855,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"be1fd7e59dbdcff26653cc5d6a17bc48","sha1":"365bcd0db2ade8ab922df68fc7b129a170158b22","sha256":"b2e99bec178a2843c207212a163252fb1c1c685ae9bd521a6b5b4f2e5c4757a0","sha512":"51f5e3bc9a9f65638154e7f8b41c36ece5962ce2dc6ddad0a09f5fdb519848133b21f4031a876162d7cff472b505b7d3e4721f92162d48b6fc1b07aaee75c4a4","ssdeep":"","tlshash":"411194df9b2d20320a915439da148794e36b9780ad2a5370895612d42f47b0c5baaafc","first_seen":"2026-06-11T07:30:29.74825Z","last_seen":"2026-09-29T06:09:05.355214Z","times_seen":286,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":5,"connect":55,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.642Z","timestamp":1790661829642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"POST /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":944,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-09-29T07:48:46.699596Z","times_seen":3458,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/2aAyxpp1aqvc4jyKnEdJKRLT8Lw-1.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.033Z","timestamp":1790661829033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /2aAyxpp1aqvc4jyKnEdJKRLT8Lw-1.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-2930\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2BnNtbbxfurR4b59Ksfnx8MOWGYv41D9q5JMS3fzcEU882P6VlUSJxm6Se27jw%2F0kPAipheps4cGXcTY4%2F8NWUyQGlF9lHS4MSrXDUQbsD3EMwglGPxJDDX6YBKA7T01jo8nOo5GkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96f7b8a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10544,"size_decoded":11252,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"ad0389142192fa77d4655eeac3875267","sha1":"ed37fffbc9143807f4b38ff004f1c693a7fb982f","sha256":"91ac80610f3a72ee41bb54531bcf11d3b88b301d2c9b5cf3f2a5d571fdc73fbe","sha512":"197cb672765fbdf1dcd4acc495c6f785c67cc043394dcc23e95527842db794ee75cfac47f605bf20d8f7971b6fbb9067ea150e73f7f6c9dfffeff4316d851d72","ssdeep":"192:2gZ+WDdyPCmBDMecRJiGDQx02F0bQO3YpEdJCnGmOMqBAZb0sVsXJ:KWDdOJDM7QxFF0TIpEOPqB0Na5","tlshash":"55229f1a9bc737014d22bd3b29c43167a3b3e79205374aee7468daf1eac9441b569318","first_seen":"2026-04-29T09:31:56.2608Z","last_seen":"2026-09-29T06:04:56.812294Z","times_seen":55,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.367Z","timestamp":1790661830367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9ad56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.376Z","timestamp":1790661830376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9b256c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.383Z","timestamp":1790661830383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9be56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.437Z","timestamp":1790661830437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9a556c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.442Z","timestamp":1790661830442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9aa56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/wFuhhmjuX0KkPkMLBStHTRbS81M.mp4","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.156Z","timestamp":1790661829156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /wFuhhmjuX0KkPkMLBStHTRbS81M.mp4 HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8bYS8ilKOvN3MuYoaMEm9Y1yPqBkWHJoyqmJWD1aduw3H5untOmawQZx3UCKRmCJej1QqEXBPpMT1VgGLrVvGIlWKHAmyOABCwI332dj4Wb783%2BDr%2F3A2LiXzPqFy5EfaANwCTs%2FA%3D%3D\"}]}\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a428c9703ba87127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.385Z","timestamp":1790661830385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9bc56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.416Z","timestamp":1790661830416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97b56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.424Z","timestamp":1790661830424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98856c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/","fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.858Z","timestamp":1790661830858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/ HTTP/1.1\r\nHost: re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 954\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFvmtLNDOMnw64oQaejfLwYcqQTFcfe3qRH%2BJo%2F7KzqDnARKAYcFyQNVHHVttv1MlCBxmJ9ZDcWTP8a3ytxJTwBvhzjcvsluFwsD3xwi%2Fl%2FYFHDtBlhBBy0gje5yOHLdWcGJ%2FhIkDIloHhL43%2B4oRZLEY8sDjV%2FTnGXm5Ew2oagyoWV8Ti2JBPu958JQMdnCGa8kSOfA2%2Fhkxj5cE%2BRLw1X5d5o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e10b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":1840,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"813eff22688096bcf23b96cdad86aada","sha1":"8ead6b927bb8c767eeaf017fd49122cbb22c61d2","sha256":"d3c289f9f99d1b80374afeaf3e7da4b1f46f1efbae526f388f7a2fbbaf0dd121","sha512":"5a26032f16dd583ab22af7bda9d9d8e171d24c43b4acd9a378c6f5944eaacab7765903eab75d72282c699eed3af391d06bb7669c65e78ad6f08ebc70285f4487","ssdeep":"","tlshash":"d111c87fb529b4e1f097b3724d724282fcfaa9671c759840c280b6e108dc3d1498ea5e","first_seen":"2026-02-10T08:05:59.391831Z","last_seen":"2026-09-29T06:09:05.345062Z","times_seen":305,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":39,"dns":15,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/","fqdn":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.885Z","timestamp":1790661830885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/ HTTP/1.1\r\nHost: qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1234\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=105jOECucA4pArllGTgrFyLQBtFuujjRwNiTqFlyV40N1ieb32vqQHpoV77h%2B0Kmp0TzhZxoodOuteq4nlxOPEhfDPTolEjn7e9VpLywVDjsu%2BysJKZIJ%2Fo4VMfj5AnjpKocjNy4Os54x7l6QhBYA5XOFn2IHJb5CaI1RXsmT8T%2BCyPCow13%2BDVqguHSpaNXu5RzSkCHMDBBgCqL8dsDtT3Ik%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b5dfeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":2114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b07941a2a35c7c99f9a709f1b10e206e","sha1":"7eeb8bf328d900e1b22b1b8eb07bd5d57de1a871","sha256":"a6a233ae5fe5bbe28f46b8c335d6fb6119818c61c948a8d35b304788002659ed","sha512":"08f3c93e6dc72977cb8c41d78811df5eb3cc3e1fc8e7cbdfa98ab91b03ce8339dd336450134b7090c1ba76015de00292f9e35f978a133f2f52d7ac1bf962c6f9","ssdeep":"","tlshash":"8921b7b1131788519aafaf32d879c59b2f3458393b700464f42c371dd60ce1a6e8a007","first_seen":"2026-06-11T07:30:29.71469Z","last_seen":"2026-09-29T06:09:05.381433Z","times_seen":286,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":15,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.381Z","timestamp":1790661830381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9b356c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/Xl0qRJRthxbLyXf5wUwVv5npiIQ.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.960Z","timestamp":1790661829960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /Xl0qRJRthxbLyXf5wUwVv5npiIQ.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=6,i=?0\r\netag: \"69e76200-9bb\"\r\naccept-ranges: bytes\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52p3PkSpRj9Hrgn%2B6JgxY80%2BFexBOASuTuVT3REzIrLYp2GQ8ZsDmT2QOgUlxvD5nZ%2Bn1VwGm7qxUSd2rgYkEPYjPL2zTDMo5TsmjLQtgg30Z6%2BNDWJBzlxUbzrOFfSuKEOP3DphFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9754be37127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2491\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":3202,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"774908dd96042307639e40a6950e03a0","sha1":"7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5","sha256":"0594fb55762cd41c9e6bc4f0ba31f2ba8fd4c8288a22a92da169c6e9bd748b8a","sha512":"fc8a1a0953c216952a585988bb4fc598e514ba032c9cd6e6df764bbd0945992eb96999fc4452c3907462863626f231fea2b802fadfe1190a53f880bffeabfaf8","ssdeep":"","tlshash":"53515df6ecbd282c4014d6ad141f00f3ec37cb86cc4d1d185a830ad496a7aa0fc943e0","first_seen":"2026-04-24T15:23:09.414396Z","last_seen":"2026-09-29T06:04:56.814645Z","times_seen":246,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.406Z","timestamp":1790661830406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96856c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/","fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.805Z","timestamp":1790661830805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/ HTTP/1.1\r\nHost: jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1450\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1prSyWOryWZvG%2B7F9CoO97nUeDRA0ghIDbamw6cq0MjAb7AwfEBA58fbyot7ioJdEQ5y%2FAjrvTqKT%2FXvVBya2Pjzzoq0bWiaP4506E%2BAcfY5CeSZAd4Tu3lWbxdFfLNPt5X6jWqHtcGZSmntkMR8nrxM%2B3D03nGYiwcOWL8F5K5Q%2FQKSUl4pVLeazU0EkvkDeroHlHPcsvxbpcqYKO9Sf7QWFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97aadddb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":2330,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ff24c3bb8a4c2a4c7bcdfab82cadb6f","sha1":"28391d2dad420b9b2b65a1c2e9cc98526569d7dc","sha256":"bd068e47a57725a022e129b2342fd0cfbce3252fbcf393512e423cd56d96bf27","sha512":"f97bbaa8741b0ffed644c2a9d769c3f12dc5aad425abc49f490eed7f9b88babb9363ce7b68d8a961bd4fdf3b55de4a94b912fab619a54640fe79d3ac74287114","ssdeep":"","tlshash":"a131e957be99053fc71b134f4c290e6ccd5a6694fc015ba5cc1666429a8c541e328dd2","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-09-29T06:09:05.442794Z","times_seen":299,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":7,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/","fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.864Z","timestamp":1790661830864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/ HTTP/1.1\r\nHost: ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmCIrc5LP7u1drJTcmy740neTJhuKYx4CFzSg3BQHRT8WGSK1M4FSbxsDIOz3DaAkqOsdms%2Bw90jntpikBvLoWf1ygkWns%2Freuq6Pjb67E49wTGAx6TqrbtvByM2qOxVYqF%2FyDXGb1vUmSMX3yG38yjF3wrMhlNE2x%2Bkc%2BUK6wMp95njBMo%2FkxZBKSQr2VHjkA0iPcllkrrMQvxoQeajgNs9ZUg%3D\"}]}\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-content-type: image/svg+xml\r\nx-content-length: 2524\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a428c97b3df9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2524,"size_decoded":1984,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76f68d848a2ee54aa90236af5bf82583","sha1":"59bc5aca5c3f80a8e736f67aea193d18f45e95ee","sha256":"28e225b36f393cec73b9e2c434e2f491db66c77a7e64fab84be61a213063e3a6","sha512":"048912e9132f414cc34b667ed2a6edabeb1e2c86b501ac687accfb39cbb79709a0e97020bab41b298589a5d8d7c8156cdb6a3ed30a24844f06f8a133fe9d1ac5","ssdeep":"","tlshash":"50514148376c97eda80097f92f15c82af45730d7d195e9a6c2a02f36748a1be0deddc1","first_seen":"2025-04-09T12:00:28.868199Z","last_seen":"2026-09-29T06:09:05.329983Z","times_seen":352,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":17,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/","fqdn":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.880Z","timestamp":1790661830880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/ HTTP/1.1\r\nHost: rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1420\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQKRDbb1HLvLwj5L9HsBZh7rx7n6wY%2B5tHoYGbBlBsEeAFKp62p15ic5bIY%2Fi9Td5LBo9Vv59ifUjeEcBVhtz8TjkYq8VNeAoU8d4mpGFmGDdXrp3cE36k6KijwIro%2FWiB7l%2Ffj699sx9vrpC3zNFo3UnoJhkxUz84%2BHvNXvtxf2oBLFFQxSonnqJbxHpfv0FCLiSiQftIv22aL7u%2BKwHQ78PU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b3dfab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":2300,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cc86f8a6321c0d1bc7c8e6b69518857","sha1":"45d314a09a486669bfc809dbcfae28f820566429","sha256":"e8a9d0ed202eae37d485eaa6703840fd0661261e2802731020c7c1268adafa47","sha512":"c53c08b8b033bfbfdf598970fa5a0417e25aefac1fea6812ad29e3a27f8fd478882eefb06a0f5f969d0066f66e9cc68b230cdce354c44337532a3959525b2bfa","ssdeep":"","tlshash":"93213bf99caf4219b702f4a9e811f4de6e58bc10ff09044280b0e6f314780e119ed4d3","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-29T07:47:53.690884Z","times_seen":4727,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":15,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/","fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.882Z","timestamp":1790661830882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/ HTTP/1.1\r\nHost: iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 780\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24EeNt9Hoo%2FHtRzAsL6mY5%2BURpOffZeimzbOdD1ThCFdanHIYVC5S21955T2%2BULy6n%2Fj7esUrqiTBfYaOIle25SQ%2BMuG9yY8N7DuvGWgmm12a8fagNtmKF0gyq9gByTy9DS5X9RDCw2dP3tKyPj5420wHJm3exH6Du4NJTUfR2aQWtI5lOkNjXY6buLfzyXW9mBPw0OtdrZYSF1aItxlgvHChfY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b5dffb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":1656,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4218175ca4fe632ea2d78b3a7846cbe9","sha1":"ae04346af3e236a8afa61cb9ba0c83cb20529ebc","sha256":"f48029d1829129f662e23bfac26e75d741f74f826e9f845c125d46207fff8396","sha512":"be21ea3f13f795c0dce4e6e9d458606837717f343fe78e378a3f3509e88ba7c163a25f1d591cc84824f777fae6ccdd24356a16dab6178bdbbff62aeb06f9829b","ssdeep":"","tlshash":"3b0175e9c2dc42fee24626b664177634b852eb9d53f090145eb50388131825b2de64c3","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-09-29T06:09:05.444827Z","times_seen":684,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":14,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/fOruntY6VgYrkBEYdsidSFOtUg-1.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.031Z","timestamp":1790661829031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /fOruntY6VgYrkBEYdsidSFOtUg-1.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-247e\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FmqxZDgnhnV5i%2FFSPDIiDGe5Zw27ySIPMZtnuoO%2FwL1XANk%2Bxc5y1MKcD96KEdJfTr7ZTJ%2Flbv8k9k%2FIQAHMupjQ6TMQEEWFDJZwO3hxjQzdkLCTsNGxP3CSgfYhD4gXPveISJNgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96f7b897127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9342,"size_decoded":10055,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"46f91da4dfa69727c3e5bae072b02e01","sha1":"fce5de906e797a1cb5706ff97ad17ccd1a83706a","sha256":"070197793e20ccfd87737c8113c2926f251c8a98a7e697f369fa54b2c92ac7c4","sha512":"9dda62e51b554abc588734254c7da9039d4ec2dae4fd29ace3677e18df4bfb82063b80d00740a4f3f690c50bb94bb9dd14a941a6a17b78391130abff0608faaf","ssdeep":"192:trYYNyE1elD5GjyZ2PxQwhtNtEjbUWZpUDSvdpG6SPimnVllzjGE:hBNyE1cD5XZi5yjZpUgp4imRnZ","tlshash":"be12afca5a59d8d68b34b904d8c5349d79254b9f12fe5e930703203929cb3c8c6ef7b0","first_seen":"2026-04-29T09:31:56.271822Z","last_seen":"2026-09-29T06:04:56.81997Z","times_seen":55,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/index_1.html","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.101Z","timestamp":1790661829101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=excyjc%2BQZoX9S%2BMAdFyuHriBbP0wegh0eL6JApLPUSHw90C3A40dV7UeARZKz2ZF0b2Nlh9UyPAQ%2FznDpvKJ1FTSpgEJ7jhOXM0TLPs5lX0nqnba3zi3awl9PIJkHN3i5Yi1A5mV0Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a428c96feb967127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":1167,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (353)","md5":"ec70d6263b129fe337179e8f271b22ba","sha1":"e7823b4fbde77f7b3652e0ce1d40f40caeaffa40","sha256":"6cb473f68a849d275aa71cdc99a5ea5c4630202068c2bf4cd2581a78596771dc","sha512":"38671273a9db9ccb87ec244e4bdc81825c6275e3723b7b3a4b2f1801ab848bc8210f2d0a3a3365c82ed747e19973b3e9b879d285833ead7a5a9ac9e81ced8190","ssdeep":"","tlshash":"6a01d063c0b0842e08139173dd98b28d075c9ea8f6b1a491bd8892cd5cd5aadd66a6a8","first_seen":"2026-04-29T09:31:56.27406Z","last_seen":"2026-09-29T06:04:56.821331Z","times_seen":44,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.117Z","timestamp":1790661829117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGF%2F8j79efbc%2B67TLPfORiU7yLU3CLIDx0HkO1xnvqpBImSPw5XkvV7yOG%2BzHOqm%2FFJ25Jvys7rtPO1Q5hBSnFG3Jeh28k7y55vCNVbUJVoZc%2B0%2FZEj6sejgixix85y8bPfY1tvsNA%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-f25\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96ffb9f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3877,"size_decoded":2292,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80fd4d380001d7ba50f3289bc01fd1b7","sha1":"d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393","sha256":"44338ccd50646a9c9f8acf3f0540ba1137f5a8ceb2385e445db4281c8a0865f1","sha512":"0ddc190dce986075259952e547cef6e22d0d1849c5063930dfae18c37381512666d03b790c40a3553dee62766c10cb6c98d447b502a700a4a9fb15b00d6ac59b","ssdeep":"","tlshash":"9381f2feef7853d8a4c9b7f6f7221528740fa4f096e58e62c65c1c0a589785ce954c80","first_seen":"2026-04-24T15:23:09.440933Z","last_seen":"2026-09-29T06:04:56.822709Z","times_seen":50,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.457Z","timestamp":1790661830457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c756c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/","fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.781Z","timestamp":1790661830781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/ HTTP/1.1\r\nHost: hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 752\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RixkULeNx%2BP%2Bci16Jeu67nEvgfWt0dXC1%2B5WQhWvPdjUJ9ybYtc9qiVSZcJfHX2XKMmkxSAhO3cVWJPLBZZeLaVbhDVTAo%2BaTNrzlh7ZCHK7zyingxpfobtgV3RSVZwYZzjFntUPBKdMHGz2JrzsbjxyNu2kFG7adek0y2RQ8GajMTzpj9ZtQPngEnqYMiEAlmB6chDKbUWxvb8%2FjMW1rqi3380%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97aadd9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":1628,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25784e0593a6a7a9ac79b00bc2dd3839","sha1":"e02ec172de34547688e43bbf48d48d1a7db5fcd3","sha256":"8c60306501fc0292d202caa788f781b4c97dd676e858c104e6d0798850570cf5","sha512":"f3b7071ce04331f2791e711de6e7424f14cc20d9e36797c7a361001cd14978c7f959db5cb0d453e865526ba833bf7e4531a9c6c1d4249255dfa320734dc8acd9","ssdeep":"","tlshash":"d6017093302d8182c623a6e91c481853d1b3b40096fcee3846a5baa055e43b12dc34b7","first_seen":"2026-06-11T07:30:29.699613Z","last_seen":"2026-09-29T06:09:05.417355Z","times_seen":285,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/","fqdn":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.831Z","timestamp":1790661830831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/ HTTP/1.1\r\nHost: fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1412\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Th8SIV8z6QikV4qNoeMKPCPGYfREUMDOE2O6V84hfORlc6cpuW2WToCZ%2BnJ3MNDA%2BuQ5CS%2Fh77clM%2BjcLzqSuD4e2Je3qyAyOe06RiSC0Qmrt0o4ZsWj5VJtBG%2FQ%2F8Qia13pDn2ZmacQ%2BYWOPlsQrahbRxqW4ZzcA1VqNpEYqyujyZ5wZGLzkb7yX0lDEljT493GpysDg6FNX2jGzvNfVmJSHOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97afdebb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":2294,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"247b0e4d7c011a68e72b467bff4fe134","sha1":"c17df0ed13075661ebda9c66012b7cae88148e13","sha256":"0331d87e5eb10f506878366f6ca1cf253bca579df404e5e064096f610fc9ff3a","sha512":"b23e11b3c12778fe8f559140a7ce257a557c673ceaa662fa188d08699f3b601edf4e873426359f09d09c36b80f58c2c3e76b936cd5e12fcddb3b21c0bfa872cc","ssdeep":"","tlshash":"c621e91fe353580b23b49dcb6d1a3e53bf00686d3973a2861c476862e93140c1868348","first_seen":"2025-03-05T19:21:16.067466Z","last_seen":"2026-09-29T06:09:05.364686Z","times_seen":391,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":22,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/","fqdn":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.861Z","timestamp":1790661830861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/ HTTP/1.1\r\nHost: muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1482\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WaMWBpsrYPUcnMxNfr7RVpQeWlW37M3wH6wy9VEOenrpmPBqiU8zZxraf24%2BN3fJjpkSbBMt35VcTK45vdY4%2Ff30lhDtUSudccTWKgiaY4MxXltXMzQkN%2BzDxuCbbotyOWVb2w18%2Bruvc9Gh3VxQA5uHpvvEak8kBjs3mMR491fSlcdf72HKGK%2FQgljhj%2FLgSQHhgYPIMvo0CmCsFzPAp9ujtgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97bee2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1482,"size_decoded":2362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3752db8f6ed5f7153e767cfa8f3ba14c","sha1":"665ca86662e8f0a28840c7ccaece339887215f00","sha256":"f543811888187e1eeeda76a831f73c8f33661070354c2b10eb874899c41786c5","sha512":"2381b754052fae6facb7a3395184a0b82fb4f909aef66ba35a9927e4d1970a56e23402df3872b4cc255f6e4e59678f85d98eec12de20eb61ca01179189f2b0d1","ssdeep":"","tlshash":"8731c72e2c13bcfde8556a04a55ade176c0cabc8a9acc4896c4cd5be19645114534dc5","first_seen":"2025-01-22T14:57:40.414388Z","last_seen":"2026-09-29T06:09:05.352236Z","times_seen":385,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":40,"dns":27,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.405Z","timestamp":1790661830405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9cb56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":32,"dns":0,"connect":4,"send":0,"wait":187,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.409Z","timestamp":1790661830409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96b56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/","fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.814Z","timestamp":1790661830814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/ HTTP/1.1\r\nHost: sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2356\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O92FLL27MYPsHNy97RktB9b36X5FxfygF6QITbytpZ4tlr4KbxhpK7DOGKx1OHN%2BCDeQ3B3Y1keDku60X4ifsIo5encbyAJG0eBZNa1RuekcktlbutUd58ZrTQLuO37UR5c3hBphDhCxsiLe0%2Fh%2BFPW68b2YMeHCSGPwAaewlu0PylfDQk%2Fg38wvIq6jRfGvC7HFF2kd6rq5R%2BKZQrvmYzJeRH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97aaddeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":3234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd6e008d46c0a066bc6c0aac19afbbe5","sha1":"07e1119604e23a43c48944d63195c32b9abea690","sha256":"73e949222e63cad11d0161f059a896dd90a45de74ae22684f8fa4753252e1097","sha512":"db29c6a4b440bf07f9e15f8e32cd1f33de1dd94f5ec1a22ec4b1365429b5e56d02ef833b1c3c9f8734920f09f9ed43e89a47c2daf80370d736dbe91a67498b25","ssdeep":"","tlshash":"fe411ae60c992803a6840e1fac51982808527b683a879cd7bf3066129b9fc6173d71cc","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-29T06:09:05.326131Z","times_seen":4460,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":6,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/","fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.909Z","timestamp":1790661830909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/ HTTP/1.1\r\nHost: kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1036\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zS1Cospq0mqtqDIPHlBp5zpvv88Z1p%2B8l9QcCdpaicdR8mXsizIBXWRRLrPRb2d1i0qvjmSPJjELs11UhyllVwU5PltQ8fBWxSmDB%2Blx5HDXNvmgDMnRuEGb6%2FWHsXxbccHYjvDqpYX0b9CiTBJqzVhgE4lLPNheVmcdhNsuqwr4nvgNcfMySd6YSi8cv4LFOLPfTDBd8kWmhoRhwpvzC%2FMNeXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e19b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1036\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":1912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92030d96c1392aa396821eed37e18820","sha1":"e6f1203de3f4bb6673a687e11bcfc904c575f54e","sha256":"99d1969405be9e05042fbcdff942b23117f1cb439fef2e1f0d55e0b55667fb79","sha512":"c91e71d3148ebe6dbc6fd9da525cc781da7137f103b0964e53374a7be46720093e220b9db3f05063966c8a171de33c2a31575f2657918ed8c96395fc77d7b832","ssdeep":"","tlshash":"bb11a8e611570b07e38dfb82516c871194fcb31a645a48fb6e5131ac567e705464135d","first_seen":"2025-10-03T06:22:13.525754Z","last_seen":"2026-09-29T06:09:05.371991Z","times_seen":4217,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":34,"dns":20,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.228Z","timestamp":1790661829228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2 HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=3,i=?0\r\netag: \"69e76200-14d4\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lb%2Fc5V2zpdnv9xKutbRJfq7taJaHtwCNC9xbKbu7H%2FpXJzOXK57H3Yntjz%2FenUDyTGhcQ57be966BufUbAKSFHbkRBL5VclcH4jiXgspPD32J2Ry3YmFh7%2BqcvW0nmrSF3T0e4ynzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c970bbac7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6045,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-09-29T06:04:56.827908Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.348Z","timestamp":1790661830348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 29 Sep 2026 06:03:50 GMT\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-29T14:30:28.73985Z","times_seen":47788,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":46,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.407Z","timestamp":1790661830407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96956c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/","fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.796Z","timestamp":1790661830796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/ HTTP/1.1\r\nHost: ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 972\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FQGWveXvyBPbRpldPApShP0l514gDwwDM%2FWJv24bMicA4z9l9jGtjit23ahsh1EZVRkNiYOqZvwsuLr0y208RHwMbAzsqiDjWSxs%2BNHYsc%2BWzOkTFKK9MbkJ1xaJNV0Y%2B7PRMSqGWR1K%2BipFM%2FQdy4HpxXOAmilwHI4An%2BeC6VB5con5rGb4ykFhpip325AxvbqP6le0Vj%2BpmO0qXApkW3PXg4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97ac9e81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c9f6edd760754aeea301e192c1c3c7a","sha1":"79d7e5342bd50b2717e4709912e8657c81f4b7fd","sha256":"9528c5ccadff18933bcdba89cf812c8d82eb2278318d77f636b1fa75aac2859a","sha512":"a49689b3cadaee426b840306686b2f59b72665fef43383319a1e857b9a7af8d18b35a553dbbf2dd62e679b1889b6d31f18bfc1c6da17e3ca26388b60acc00253","ssdeep":"","tlshash":"85119072e7b083d5cf9993a298431ecc829010597ebc0aaa0b2554a250ee9d6bc9144b","first_seen":"2025-02-06T07:36:38.211469Z","last_seen":"2026-09-29T06:09:05.407864Z","times_seen":312,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/","fqdn":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.837Z","timestamp":1790661830837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/ HTTP/1.1\r\nHost: ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1452\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5MOwHGdbEF4qgwE4SuR3cZtxLaQUwtXt9Kaobv6bDFNBNi7HprfA0auuF3luCBshGJq8M4rEbtuErT3Zt%2F8qpKcA6XLVWZ5fOaxvdhqKeGtDfh0q2a84u2wr59zJV2UemG2H%2FtylL4WMIDAIHBUJ8Jg82iJju3V04TTkC4KOjPK5j7F61krLBMd6yjnRIZrZ%2FQ2sJ7ECD9Gr%2Bga%2Fmz1DKOdvmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b0df0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":2330,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d81c49695819f693444e4bd4092faff5","sha1":"74ebd3a7b2767141113e39f665a9a62263b9f9c8","sha256":"da70c65bcaa3eb9055680c90a554a442d877b60792e78ba9f028bcbfe90481cf","sha512":"7281103bddc9ce3820382949e7e1132c4ec542e1594649134676474facaa4d2bec1a7668b16380f39d2a46cc78fb9f47170acc006b8387e12c9c8806014ecd1b","ssdeep":"","tlshash":"ac311cdb657b0030a35b442579301afb2370788ca9ea512e41152a7a1e930d3e2d04d3","first_seen":"2026-02-10T08:05:59.361585Z","last_seen":"2026-09-29T06:09:05.433312Z","times_seen":301,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":11,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/","fqdn":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.859Z","timestamp":1790661830859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/ HTTP/1.1\r\nHost: y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3038\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqmHmdJrUb5OgRV00TZNeOX6vWncpDVULcngQu6DxkXTsI%2FQ9q3DmIZBDIK9C3L4dTcTamdvf0zBjDNjNKPK1%2F5BMjLY2Ry%2F524N7LY3NjXwMieVTo2a9DM3xXBo6GxiykbMX%2BIG66mqaNwyM145woxBu0AccZejFLaT%2BUnVuEWv9iqEIpnNpSHml46w%2BYkRihFPy8mUs%2B5YzdxovRJ4UsE2cdw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e25b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3038,"size_decoded":3920,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54747395241f6641b0751d62e4b37d1d","sha1":"cc851372f7345453800e4153d3c41e920730f627","sha256":"b621b6d515cead780994d3a0f326c071af1e4af652483396bcaa884e73645b3c","sha512":"d252b2f4693ed0d4ed747462825d973f1c4c2085ef10d699c11e6e98a3149563fee3a3dbddefc9321abc136bb537e99eb6835b40fcf905ab6510218e2ab540cb","ssdeep":"","tlshash":"c0512d828a46b132e2091dec581199f815d6a548f7dddb8b171197172c1e9d3ccf4edc","first_seen":"2026-06-11T07:30:29.69305Z","last_seen":"2026-09-29T06:09:05.359341Z","times_seen":286,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":40,"dns":24,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/","fqdn":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.921Z","timestamp":1790661830921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/ HTTP/1.1\r\nHost: h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 402\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgfuUVQ9C960hRoMR0895%2BR5oYkr0VstUsqVfsAvqU9aXfRbUpfpYF7NpqyoljqxB7x9ZegHtMeZKMONMhSz9z9zZ8%2BOW8KIb5bvb7UrrlNcPYPzJjG5E9r2xq4%2FiRzW64PbpecABJAnoL5wFKs%2BC3P2DMk1FDFFvT0WqCz%2BfvO5%2FQEN4JRjVXTeMDcO%2BsBPBZ2%2FmQfOqmBXhUsCbDt%2Fo55fPdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e0db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":1286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c92052674d8ce6f4b8cf7211ec7df17","sha1":"0623973405fbb6a1691b10861c1a344891c1346a","sha256":"289e6b92e606744e74f6fdc9ee5db6f4c936b7686aa9a691f30c16f4968daa4d","sha512":"a48b860972c1070bd39831b8ff9b94e49fef38387aa9d448c0727a7500430cc06b648b00a528e7e14f17fd8b38e4b32fe10c502e05ff4808dce64464f2915a30","ssdeep":"","tlshash":"8ce0f177e5221a69c44177d6b8c1c50a77804aa3f504d702809bce94c3839e2ad054c1","first_seen":"2025-09-09T19:24:39.814892Z","last_seen":"2026-09-29T06:09:05.418371Z","times_seen":293,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":33,"dns":15,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/","fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.926Z","timestamp":1790661830926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/ HTTP/1.1\r\nHost: 65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yx7kzo813VCtyRoAkiCxJjrR6UarSn%2FqWikKCvRJqbGIO42jqUoMsffw2YjaMMPSFPONZDOIfNDxGhl0Pqxinn4KJvVVzUL%2FacUhFSS5q14Fie7tHgP0T8cWHryYy%2FH%2FBdzDhPbBOhKJsbdiliu9sUN35%2FvOIgN68zpCc3hf06dyZxT1JFTMqT7XX8Riq8ySdE2HRYczScKFXVQeGrpq8CItk0A%3D\"}]}\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-content-type: image/svg+xml\r\nx-content-length: 972\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a428c97c7e3fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1314,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee2e1d04f03d836343ea2639b31cf08","sha1":"34095d7db2b98e0422516f11bf00c95454269dde","sha256":"f6c14eed27159bc82e0f0296ef81c645198119d155e9046a7625ab0fe0efd872","sha512":"43eb52d58fd2c852c3b566680af27143169625e37b2593019b7c09f28b6cb89f3a3d0735d92012e58bb94581e6efebf2d3aa0138714e947b61538bbe41c5bc26","ssdeep":"","tlshash":"8911edf7226e5ec5811c333e925903f9b16226d860f34641aea62e23951829ecca06dc","first_seen":"2026-06-11T07:30:29.753159Z","last_seen":"2026-09-29T06:09:05.420147Z","times_seen":285,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":177,"dns":176,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.283Z","timestamp":1790661830283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /disable-devtool HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pinky-goat.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=600\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /disable-devtool@0.3.9/es2022/disable-devtool.mjs\r\nx-typescript-types: https://esm.sh/disable-devtool@0.3.9/index.d.ts\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 475\r\nlast-modified: Tue, 29 Sep 2026 05:57:50 GMT\r\ncf-ray: a428c9775f0d8deb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":664,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-09-29T06:09:05.351412Z","times_seen":394,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/vQyevYAyHtARFwPqUzQGpnDs.woff2","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.462Z","timestamp":1790661830462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /vQyevYAyHtARFwPqUzQGpnDs.woff2 HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwW2kpqFg0MXr5AobxlWdO0I7QODqjCeIl6jdycua50XcX182I33UT9bM3Hr3LVFQuhVIE3ItCBZjCY%2B30kRH%2FpvKLNxEalo07uAUQqZy%2Fz4r6CydUsP0JSddcrWbpjCfGm3pOwR6w%3D%3D\"}]}\r\nage: 359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c9786c187127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}],"data":{"size":440375,"size_decoded":52418,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"3f70015e33a9796b21ed3d3fe64025ee","sha1":"e6c9d1dd0bcff690b51db55680049b4f989c17c8","sha256":"5ee2b7ec29a1dcf6772a4fae51caa8a7e74265ef0f5f14c73ecf7af616baccae","sha512":"f4c181ce1424bf53ba597590435d61a4ceb712219a1bdde0445bd11d2d4b8b0342daab4fc9e8beabe1a2983b5a96a9f0c374baff17922b2817f024693b69976d","ssdeep":"3072:yNuTSYcLGIJ1e+BY9mxeh5evVt94foO0WcAfYtI4fzM0WcEfD:yNu0H4AEh4bA","tlshash":"4b94c6136214d0385dc729bdf7d9ba1c251ca201fb3286ea62fd426f95c9ef412a27dc","first_seen":"2026-09-25T05:38:00.053396Z","last_seen":"2026-09-29T06:04:56.805551Z","times_seen":36,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/","fqdn":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.841Z","timestamp":1790661830841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/ HTTP/1.1\r\nHost: el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1626\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGMuk%2FvrhOE68MIqqkIXp9KYnbp4hdWZ0pdHr0dJNR2JKJ583jl6Ej8RHgEH02%2FPiU3EEWJ88eRBkZu2lM%2FudXB3jAZ9yTacBVSh9QoOjupHRTVK1%2BteXmWwZ1X3ZVa%2FkBo040VuzXUH11bIaRhAphvKQOkW2%2F5UkBu3EpNzAYJS5S%2B%2FMOTATgfhL1dlITpNUucc5HVYMogWSl4A5WjCeiu%2Bf9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e1bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":2512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f264d3c5f7b7ebe8775107161dc8c0ca","sha1":"60d88c760ebd5a5180312077fd964638849b930e","sha256":"2e6a8da7fb056c2f18249fcaf24e36ad93ecd40c0f6c3dd169061ec809e6662f","sha512":"12e73ec2d942cc782915e702636aa0c9c01cdf1e63099f8ad74532b37f720377f5955b34db3182a4a1eac30f54bf5c569e971551b6d70ce69b4c66ab27e0dec7","ssdeep":"","tlshash":"7931081a0c7fa689c735bc98ff621892b1738115e2f403e3daf39b10888609c0b924e3","first_seen":"2025-04-02T10:59:29.279287Z","last_seen":"2026-09-29T06:09:05.445976Z","times_seen":288,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":40,"dns":19,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/ZjjD2npqa8VUNiqb38BoGSHE70-1.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.034Z","timestamp":1790661829034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /ZjjD2npqa8VUNiqb38BoGSHE70-1.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-2330\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f87ERLYxw5lSlw3fHuP5qSFL6CHQu3%2FLbBB4HKyEpr1HUBQWKLRYPFdVGLACUASoiq8FZ8%2BKa%2FEdIkzS02IrHmnkw5T2VvdUfEFZZtKZSi%2BxqQhJNIMswNkVx0WJYTKWjUdK%2BC5p8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96f7b8b7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":9719,"mime_type":"image/png","magic":"PNG image data, 2048 x 1152, 8-bit colormap, non-interlaced","md5":"50a4c82f0093ecbd8d78f85b691f591d","sha1":"855afc4d65243f4a81932d17b614a80e3270d184","sha256":"7e426939ff92655448b8ae69c852ad986d124ed81ba25b6f180fbdfd9b1db640","sha512":"57acfe3ff3627a24d832f37be249880a7e4f3b423db50812a73339da0b0bebef3483ab4d91ab809461a26695f93aec520080f8dca37dabf82177651f3d2ee2a4","ssdeep":"192:9SM17Kd8K44+ZsqcCmf1z4XtnOJBEHWhK:8E7Kdd44+zcCk5+pOJBEHWhK","tlshash":"cf029eccd55684afc10e2c31568cded7c66eb145122982db7716a8b383fc061b5322a3","first_seen":"2026-04-24T15:23:09.418012Z","last_seen":"2026-09-29T06:04:56.837516Z","times_seen":54,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/","fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.791Z","timestamp":1790661830791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/ HTTP/1.1\r\nHost: v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1248\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjv%2BmnG3xWl9lmpy1f59aljBM17eCMWy4W5STFD9dmTrcAqND6ipBwEJstBw8xMv9pga6tXxkNmR8FX1lUOzbvbfR9AfnYe7PrU7b8Ser9SGo17hVjL8HNa82FFf0tBw50KV19%2Bw8yeR6IfTUOkMyqQ4TFTzAsdMYL6jmzLQew7mULNHxbBENhxiabytK9NxDqtDMjPTC2B6ruJu0zF68SX7feQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97ac98456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":2120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b05fb4b18fe871b8347001697b847b1","sha1":"f8615e5beebf1a23f352508742ba120eb16e5c80","sha256":"c21793083a9ec1cfd7fc610f8c8aee7d77b637cde7534bccdca1e8b6821fbd3a","sha512":"040f3ee9a0b8b3ba63953acde3a12533c29396a99b5795aa2fd435c5468263607bdb57aadda10d88f825edb3f5e331c1b232ee357e3610ebf82cf26a40eaf561","ssdeep":"","tlshash":"5121b7e3b95dac0dd9020a6d5b1127f8ee1c75f6449c02220acf5e5268a1609322e2c2","first_seen":"2026-06-11T07:30:29.694011Z","last_seen":"2026-09-29T06:09:05.435721Z","times_seen":284,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/","fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.922Z","timestamp":1790661830922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/ HTTP/1.1\r\nHost: enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1164\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVAfg2%2BHelmBRPBKqiXizxyFgeZDFmV%2F00ulnXnyIgiDFug61pzsIfn1CjfrwTqb32rtnaKB86JdwJxBDXFYb9g5EEmiVJf9Ncc3EN9Wz%2BuTxs49tHPkqvfj6jcn66RZPUVb7%2BN2am65mO0A7R8%2B7UtQ5qEMNMBXEAS2k%2FJm8UCRudSr5icYJS3T%2FbvPIOTEpwq2yZUxoAr%2Bji5qn5xJgUOZCW4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1164,"size_decoded":2048,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b37f561678007760f1900ae79ea02e8","sha1":"9dcc6586c899eaa80a4ac2c2a1994b6749886b40","sha256":"10d87c9ee524e288a101badbd24e59cbb729a6a848e816570c0f3c4f96c04e30","sha512":"8e642ac9f4abc69b5e2c4d0ad2e1571800042d9f03c4a1b0888b346b6fc6e66fe74e743799e70a42c594c0dac5c984e8aea0078394e0c9c4954f97447b2966b6","ssdeep":"","tlshash":"32210dadc1608eb152009e7bca2c35d40640a33a82b7033e95f00fc79c3f5301e80496","first_seen":"2025-06-20T23:38:08.726013Z","last_seen":"2026-09-29T06:09:05.370142Z","times_seen":464,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":33,"dns":16,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/aqiiD4LUKkKzXdjGL5UzHq8bo5w.woff2","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.095Z","timestamp":1790661829095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /aqiiD4LUKkKzXdjGL5UzHq8bo5w.woff2 HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=3,i=?0\r\netag: \"69e76200-6c1c\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7nhzr6wVHtJBtJsAM4z9SvO7YEYcVqF3PojjFRO25NjEz1vc8lGYgMrkQQexQddZ4DOJ7gbqcwOwIPpXcMi7iCLRbqqgOqq8PXEiW6dvyQ0rsv5PZJZBmzY46Q5CJKLRy%2Bi5i4GPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96fdb957127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":28384,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27676, version 4.0","md5":"f5284a3495917f6a44f26fb5dd1d8afd","sha1":"6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c","sha256":"6aba565c1cc33eb1275f69fe270a717b21a9b2cebbfa3cd109e862f2187a0f49","sha512":"63dfe3cf3aff75ab6a25de7bfaff4f8731d31c98a85b04aa3555b62111c10b48738e9de3624b31b61e0881e995eba8c1ce65aeec39e9aa65922dd67e51c42e2c","ssdeep":"768:fr+UfEvrHN8aHZhqjJvkL1WTWYwHTwyHXhJOFY/H+:6KEvjN8a50ds1W6YwHT9RMY/+","tlshash":"27c2e1fe0439d63cc8558f1edd91b98c0b872f9cd9868a1001edbef4497f8f4620a44a","first_seen":"2025-08-23T14:43:00.600022Z","last_seen":"2026-09-29T06:04:56.84022Z","times_seen":341,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.418Z","timestamp":1790661830418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97e56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.421Z","timestamp":1790661830421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98356c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/","fqdn":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.887Z","timestamp":1790661830887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/ HTTP/1.1\r\nHost: 3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1636\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avGXuRCnMuMDU1SW4z91J9RhYRzZV6j3kB45SjSWlkdUTqmqJo8FozJiOd4l%2F%2F5LshzoVqqiMCAv%2BQuA8ZFBZklcWz2kuuCjMEqjQalZogYka9qqIdFFCACkY4lKDIxBAC8s98U1suKxz6pqcFoXNjgh6LSdPl%2B9vMG1bKwd1UVt0nC5bbCoAMYvxvA2WL6mYvJSApA9SWIDiAxXxW2jtT8bdaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1636,"size_decoded":2512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1d9f166e96ca6643813a52ce800dd61","sha1":"5cb193c0fe42838abb076f604e16ff3eb995778c","sha256":"1f1e6c2ea43ebcbe3c2a532a611017834889b00ca6f5f2063fea04759410d303","sha512":"1ae26ef23cb7529560df4937cc45ad657977b7e92866991bc3a3d1dc1ab71bd32db52b30ded6fa2eb2041b770363782986391f7ab0fbc1043ab35da773069ed0","ssdeep":"","tlshash":"bb310a81a13a98a7e1fbfb534f8c366f68cca0a63f040d2909c025a080c03c488a5b93","first_seen":"2025-06-28T22:12:19.740047Z","last_seen":"2026-09-29T07:47:53.672205Z","times_seen":585,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":35,"dns":14,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.114Z","timestamp":1790661829114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tc%2BAusnapmQauouCPaI3LeF%2FqlVtXUxHqXcoVTkV5j7bEbLX%2BXyZXqU%2FJmhOMdS7yFUGOC2z9zW6aARhuweK43KtUF9U1ycL9Hj52pxhSl2Y60wwUiT7QPzVRzH46wKMzJw7%2FWzoDg%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-df2\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96ffb9d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3570,"size_decoded":2012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a0cb2856f15edf4bbb07e9a227d36b8","sha1":"d9f21a476ed4dc3967816cf76c7a1b414629d3d9","sha256":"648b8fcabf85413ff444fb1cd0e5ed65a31fe82c574e840086f5b350b90e6c27","sha512":"923a5c9b2ae96bf83d751990a815851410d19cda32beda465f9659374bb01c6cb5f5ec1445a43455652a7d6ef239e8543a8c3a735a740fca59e20f265c65aa90","ssdeep":"","tlshash":"c671e0efeebc23d874cca3fae3538099b20e64e41451ce99cc2e9c0cdd4585da497850","first_seen":"2026-04-24T15:23:09.421323Z","last_seen":"2026-09-29T06:04:56.842424Z","times_seen":52,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.411Z","timestamp":1790661830411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96d56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.427Z","timestamp":1790661830427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98f56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/","fqdn":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.843Z","timestamp":1790661830843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/ HTTP/1.1\r\nHost: 6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1446\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BQpze3uqh8jJ%2F19brGfj8CIX3H55Is2eEJFNkbG6ifxUIayXQ6Le0igcK4d7g9wR0wBhJqqoX4P51CqTqDla%2BG46J1ucrROhhK93AIYQLOPnPmG2f5AMURYYQ7noRjHj2rmoy%2FYNuAHglqvvRqMvLm5ew%2BkbcZUSBH9rXTU124qKAeoENAcXbJmXjaU7CxvkuMB7jJKleXQ8bSiVM5O04Cfwq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":2324,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2611650f3bf1d59e660eb3dbcdb14f1b","sha1":"d20eafa0b7a6cf800ef1fc2f181534a83db5cf9a","sha256":"2aca745d61a88a9a898b8fcd91bee3c3dc36d338a8bc41f9f90de924fe1f62a3","sha512":"a0e218a3731b072d1fa74c67dc477ef003bc0c281823933a45bbc0fb87b91ebd587241df9fb0dfa541a72d96bfa4b8bc348f2d4765c2a67fba2564e27d630b6a","ssdeep":"","tlshash":"c731e91f12de9361a2bcca837b50e48c73d3541f740a7a64a56053807702159a669e02","first_seen":"2025-03-05T19:21:16.060703Z","last_seen":"2026-09-29T06:09:05.38743Z","times_seen":419,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":40,"dns":18,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/","fqdn":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.924Z","timestamp":1790661830924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/ HTTP/1.1\r\nHost: sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1984\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vfHWVDw1I3zUaGfrfWZIzMjDWdtBwUn0879AtoxCpE6FlDH8t3AINsdgRACDC2%2BeSl%2F9JvkticwqMjg2stKz28D4WbCHunEaTx35%2BQ5RS4KHmrlRUX%2BIRTvlPAoyP1PkQILoRhSKMdE80u230uXui4z6EFYDWr3Q1QqLcm5nkdthRyGptrJjGwgPccInf3lGTk2sMggRFqXzdgP9rwqVQdNpNo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97bee2db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1984,"size_decoded":2860,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21ea491573af9794b3534936fd4f670f","sha1":"11b83fd6b1345bdea5ff04e5e682f9d77dcc514d","sha256":"92401c017701759fbc8e6c250ed653c50b0fffe78b1d628172650d4367e5636d","sha512":"38c070fc984bf3691a0493a762b2c6677a5d59af6dc48be1c318424ae6c041258277529e64a50106c1df0ff1439e2236238c64a9ffbc4708b12b8cc16df30b55","ssdeep":"","tlshash":"29410a1e0ec8958adb25a519873bcc5a5997283cd4fa41c578ce94a5131d181ab3cdf4","first_seen":"2026-06-10T18:04:23.90852Z","last_seen":"2026-09-29T06:09:05.379957Z","times_seen":288,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":34,"dns":30,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.369Z","timestamp":1790661830369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9ae56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.660Z","timestamp":1790661829660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 19:10:47 GMT","end":"Fri, 30 Oct 2026 20:10:26 GMT"},"fingerprint":{"sha1":"65:9E:5B:37:AA:2A:91:88:11:63:39:DB:E3:F4:41:EA:0A:7F:A0:5C","sha256":"66:8F:BC:54:1F:00:37:2E:B2:39:A3:49:95:4A:E2:63:A2:FF:86:76:7C:89:DD:92:9D:F0:13:61:42:2D:CE:64"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9EUv0t218rFPQmGg59w24n6shDWAPRMp9BNQ0VxLhxna3m8L6vvDZ%2FAyYJidcohw0H5OV%2BgviPaOxzz3QCu%2FaneV0j0Xoe4ClCw72ewEygtvhNqjjl6yVFeYPwfAw3drw7mvTv1\"}]}\r\nserver: cloudflare\r\ncf-ray: a428c9737f728be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":811,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":27,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/Xl0qRJRthxbLyXf5wUwVv5npiIQ.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"143.204.238.101","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.959Z","timestamp":1790661829959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 15 Sep 2026 00:00:00 GMT","end":"Wed, 31 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A6:0F:A5:97:7E:1D:DF:B7:B6:87:60:B7:8C:F7:57:14:93:9C:5A","sha256":"D2:A0:3E:5C:B8:C4:2B:5F:20:14:16:A5:5E:DB:4A:88:8E:B5:8E:CA:C6:4F:EE:76:16:02:F2:BB:70:89:93:09"}}},"request":{"raw":"GET /images/Xl0qRJRthxbLyXf5wUwVv5npiIQ.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: image/avif\r\ntiming-allow-origin: *\r\nage: 9567930\r\ndate: Wed, 10 Jun 2026 12:18:18 GMT\r\nx-amzn-trace-id: Root=1-6a295609-17939d143800372839e05901;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: ac0cb730-5312-4c15-89a5-20125af0b799\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"195cd0def800c3ff71bb6ff9c79a7746\"\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: DfUDmGIHzd-Z9vHMCmrOqxsFIsgNFU_E58GKQWsx3vFOGm6kApWdtw==\r\nvia: 1.1 2b7b29a6198de4be2ad1a26c19a25c2c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"DfUDmGIHzd-Z9vHMCmrOqxsFIsgNFU_E58GKQWsx3vFOGm6kApWdtw==\",cdn-downstream-fbl;dur=4\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":6150,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"195cd0def800c3ff71bb6ff9c79a7746","sha1":"46f1d6d74900cb5b7ab3e2fc6553fdfd5fc1e86a","sha256":"abfc6337ee7126202262b8183429e80be853b4fba8b5d043accd4e165e4233ba","sha512":"ab975aca9981f6db98385a51ff3cc3dab2d0aee8568a86ecbcf99e35b7eeab23f46904129e0776cd9ae262c26f487819ccfd35aca27e05e96ababcef44199832","ssdeep":"96:rGgbisyRqYHRd1RX6Q/127lc6MGICr8WQIimmTCPmJ+u+Y:rGSiKYHV/Q7lQ5I3Q6mTirTY","tlshash":"eda15d45dfb05e00dead5eb8810c473e3364d2e48a3a9eb358823140af857ada959b7d","first_seen":"2026-04-24T15:23:09.426942Z","last_seen":"2026-09-29T06:04:56.847117Z","times_seen":60,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.394Z","timestamp":1790661830394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96656c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":63,"dns":0,"connect":2,"send":0,"wait":161,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/","fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.854Z","timestamp":1790661830854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/ HTTP/1.1\r\nHost: e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2157\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tScUGrjlJc7eTKbAfoEoO9rqtuB0Mrnn9jpH5BzS6o6POFZ9X569zjMKvraLQLf9qaDW0PKZLrtzduRUZvgBBzKrahHtUsDVcG0cU03FqnEweMCvjLWxnS4owmaw%2FDzcXQpedM2L70kbjbRUYfqU1Ulh4p9vPPIuE0HcRR%2BVzKmLmEtUwUSZIe89EwLaWQN4kMjJDyLUKgX3hGwgep3R6cG5wbE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2157\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2157,"size_decoded":3027,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"44d876b6ac55ee75b4efd8c5dce8dba8","sha1":"5ebd26b6260acacb6566675e9135c44aab60637b","sha256":"32bb49f3160ee341add14dcfbc9519de1e4c7b0d7faa825d683afa5d94b7f4af","sha512":"0879effae94d31ef94a067af5a6821d23ea6504e9c800a5f8d04ac97c2e6085516157b85269c269820b58f39d69a1ce32da6453580c0f82526de8db0416c533c","ssdeep":"","tlshash":"0a4109ae8c874e24c67740b15ebd11660592157f975973c6e4a7ac362c5335c0eac868","first_seen":"2026-06-11T07:30:29.691869Z","last_seen":"2026-09-29T06:09:05.35429Z","times_seen":283,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":40,"dns":22,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.453Z","timestamp":1790661830453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c356c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/9ZOkG0aCgT86xGuT3RCAx4DQ.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.024Z","timestamp":1790661829024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /9ZOkG0aCgT86xGuT3RCAx4DQ.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-2559\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQmKemuCvxwJrMntjeJgn6QsKYxPYnUxerN99zyeMYR%2BpChM3dLZykjxl1ZHRjyXsLXr8uOIHY3618uZrPEmk8Y5atG3U3BWlKcN1a0lZA5h3HAaasKRZeeFFkFIt%2Bp3k%2F%2BESM78cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96f6b867127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9561,"size_decoded":10270,"mime_type":"image/png","magic":"PNG image data, 512 x 330, 8-bit colormap, non-interlaced","md5":"325c005cc1e45972382827f49da0ea96","sha1":"21f62e23c13dade325e4c67f7120144d8c1b000f","sha256":"28a269ed570eb9464988f5f1f95f0ad058af621737c019168764e7ff9729db5e","sha512":"c7a86a6b652478b09fd68683da1c1aa291c52bdb6dcf90f92c1c1876b41e183827e46a4957273291708f691d769268355a175b5cfed0c9107da5ee3b878ddb42","ssdeep":"192:UN57AmbeVJVa3qiQXLS/w78IuvOu1U1MOb9ndxMCYdEyGsSTtY:ituVpiy76vOuW3N9zTtY","tlshash":"ee12c0517a4fa87f5687233802aa639154426de4eee9dc2f07737e3c98281b172586cf","first_seen":"2026-04-24T15:23:09.435668Z","last_seen":"2026-09-29T06:04:56.849644Z","times_seen":55,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/g8LJmKUz0WtDHSj1fupWDp8M4-1.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.026Z","timestamp":1790661829026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /g8LJmKUz0WtDHSj1fupWDp8M4-1.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-240c\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SF1XRiQnCfiPu0EGpTtwkfJBYuLpnP4xL3QyDsplaK2bg7ifc8AZITuMTaIsl0R2rQHTAjCqn8GuoBINCw5SVJLrQnCx7%2FkoTY5TsiLCOEnXnRrbaDkmvje0norA4N4PTpCtmlPvMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96f6b887127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":9931,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"458971cf7b04c53fc2e69b96a2f4d537","sha1":"d213a58fb04b95e7468571d12402b6fde176f172","sha256":"6998349bcd9fff3c7d51d5c589fa7e613916870e0cab65fbd439c8f6f0eee16d","sha512":"187240c70c2be4b21b2a37e41a59bcb8468fecc99d21e3a6a2e86c9df6fa201cce8563169f3e3e6efdb9fe2266529961068a2c3011b6d500b00a32d07d8d5a04","ssdeep":"192:JeKZ9FUyh3ax7fR8QvoWe6h77EE1Ym2VYp3Rz8SXJLR3xfkTX:JeKZnh3a5fFvoWe631Y5VYb8gJRxfGX","tlshash":"af12bf680606954e80c706bde7649e38e358a90bd3aad153b837db654c355b8ec9c8fc","first_seen":"2026-04-29T09:31:56.252985Z","last_seen":"2026-09-29T06:04:56.850607Z","times_seen":55,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.387Z","timestamp":1790661830387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9b956c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.412Z","timestamp":1790661830412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96f56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.414Z","timestamp":1790661830414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.415Z","timestamp":1790661830415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97656c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.431Z","timestamp":1790661830431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c99856c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.656Z","timestamp":1790661829656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a428c9737e0523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.391Z","timestamp":1790661830391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9b756c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.415Z","timestamp":1790661830415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97956c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.426Z","timestamp":1790661830426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98c56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/","fqdn":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.815Z","timestamp":1790661830815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/ HTTP/1.1\r\nHost: 43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2008\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQpTfu6wVyf2ykqe0QXGET0jAt%2FnDEVJt8RlnLACSB2MgyWGaXCtXUf6hS0p%2F5%2FqPuBd1xTon8FiXMNta7E6dq5BMC%2FSB7k2eTmw4fNewnoPpoJp7avpNh1X4e8v4SgAlC8szXthKA0DEW10I5h6dr2UUMB4G%2BZl%2FHGrti8M%2BFQ%2BsCPv3kJQ9RwoxyAV41%2BFUQvtRcso%2FdqOAms9Axj6RtLKpLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97abde0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2008,"size_decoded":2896,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad5cab38c5477b10861597c294caf179","sha1":"c5e68dd36b9b9cfe78e6c8b8c6ca87d9c9975a6b","sha256":"1585361e26918c5ffd73a70b3963bdedd62feda6f8400985db9e85505e7a1ded","sha512":"1273021aac5283372f1a375d9555472c46b2c84000ba7fb89d138defea8184e65bf80a2acc41cd536b8e5d4bb7e58c00557798c89f8d1586bcad083c63b241bc","ssdeep":"","tlshash":"c4412e4541e54a7fc3bf6b47195ee27353434159363f52b70256c4a31504e712e90672","first_seen":"2025-03-05T19:21:16.036556Z","last_seen":"2026-09-29T06:09:05.317538Z","times_seen":471,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":9,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/","fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.835Z","timestamp":1790661830835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/ HTTP/1.1\r\nHost: lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1652\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCkj1bSET4mloXHPZHLP%2FcAyYZFasZSU2TBsLFuiuVZJbn4vNStuoQICniNWAFlrac0uwPPxQXmH0WqMCFFfCDQE%2BZa%2FQ8%2FpEwlGzkZcEOFmH29EE4bE0RxpX3T6FwhGhs58JwiRloyiVaYPsk06eSDhdnHZ5xGT1ufNvJtQOqqQ4TtoANmK6ooj46J6xNwytOQoYLITLns%2F0ap0ZccpYYy%2FnPA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b0df2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a549fff44eb302764c78ee0ccd01e062","sha1":"73e06130b3e2cd9145c4de30d7e44dd0c23a8e06","sha256":"d1bca0a7b38f3021f68467357b841e6d867e22f27951c0faae2535585a4634db","sha512":"e3ca1f88f0646f47959b5cea1768b5226b45f62e63c3591c0b35cf0c29a809dc0cd292a591bced3432debdd6783c6391913f94a1a62b2107e22df83bbf4e55ef","ssdeep":"","tlshash":"9b310c310b1550b24428731ee835e67df00dc8cdb30a5692d45cca4c12be36b6fe7361","first_seen":"2025-08-09T16:24:38.721025Z","last_seen":"2026-09-29T06:09:05.380741Z","times_seen":309,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":11,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/","fqdn":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.851Z","timestamp":1790661830851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/ HTTP/1.1\r\nHost: 7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2174\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pN6bZezSG5lZaf4nWb5iEZlKn09xi%2B7mSiz93CaCyM4oYU9mDi03g3Wxp1kLLIqsBBpzrzTCh6yuzOh5YuHfL9OXD1sA5SF9yVEuqWwhkiRPJFgGTLVhvBdE%2F%2BHmgfLdkmZ515MXdfLpIkQS5O3%2Fy5q9funG8TShpnfHQ8JAdRUM5XZXOnovfpCA%2BLSiiewB7fvZc40bLgZJcomyTc%2BtnLxC%2Bfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e15b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":3056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71fa9982918cdc0d965432847e883312","sha1":"c70649ee620af5cc4620d021c667ae39e1892a04","sha256":"44a6c66fbd56b55dfe9d1206fe2dbb343419ce26c43ebf4e16755592d9c854c8","sha512":"15fd6068bb2d607fb2850d35ba40e8cb9d78d65a35270e76f72a1bf4b3627a7ff02e393c96ba458d9f005f4f840add8d55b570d525ee24a334449a4abb14d38c","ssdeep":"","tlshash":"dd413c9ebaf60492fa9335cb7445dfd63c592cb6b2363e50ad18c0334ae59ee1210589","first_seen":"2025-09-09T19:24:39.772114Z","last_seen":"2026-09-29T06:09:05.333603Z","times_seen":285,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":39,"dns":15,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/","fqdn":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.856Z","timestamp":1790661830856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/ HTTP/1.1\r\nHost: zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 832\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDwRYdD9oULr%2Fji%2FZ1DzSX0HQNxMsA9etM2ZF2R4F6JxNiI4VpHi9RZpgODUlqXBoZEoQ5HJur0hUK4d36sxBJFPP6g5qQ3uZ7aHEhNWCYvLWj%2BBYpjCM8H6HNd%2BwUp0WEGYgQMTyYr%2FjeuH7%2BkMBuj3wjxuAZwECx0lj9vDju7%2BHkaSb8NgbACA7nkXvMTYQIirgs2cGwbeNrbCql8%2FqV1MiZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97bee2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":1714,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"771a036a39eee67730f70216f4a0de6e","sha1":"10e65a6b6410dd038c4f397faaa0f7f32bf69995","sha256":"68a9030633e1b50dc003b84cfcdbf0447f663722e1cc8aebb8b59e33c2609455","sha512":"81c674b05b7835a2c771065722fc77f06fb56b40ab349ef08f58a273ab54d611fdfcf9bd9cf4ddbc6d9e42d4e8e1e2a4ecb42a9ed7113f6a8f08ed85739a5b25","ssdeep":"","tlshash":"e00186f6ac17ca14c2293457d9e4faa2499cb4246807102afd9d1eb419cc2829ec991a","first_seen":"2026-02-10T08:05:59.375119Z","last_seen":"2026-09-29T06:09:05.345795Z","times_seen":291,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":40,"dns":27,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.632Z","timestamp":1790661829632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 14:06:40 GMT","end":"Sun, 29 Nov 2026 14:06:39 GMT"},"fingerprint":{"sha1":"2E:54:50:59:0F:7E:56:CE:77:95:05:FA:A3:BB:06:E3:41:72:5F:2C","sha256":"8E:29:DE:F8:49:2E:C5:53:C1:DF:97:71:F7:FC:7B:49:B2:AF:01:67:17:63:F8:F8:82:10:8E:7A:A8:9D:B2:ED"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 204\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a428c9744f2eb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":551,"mime_type":"application/json","magic":"JSON text data","md5":"7ab2368d0883b3920e61fc38057e471b","sha1":"4816cf6e1cb2b6813fb12c1c7f85375c8760890f","sha256":"3aaaf81360fe649d13ca30ad785f0f0ff6d765a9792107d3eb7588ef7d905b8c","sha512":"b24a23764e949ad99ddd78687b358729f758e21287e7dac1f2170e809b5c53fdd632e97c4e3352436f089b0e7e77f48974f88e40fa94036fd57855aea69e76a2","ssdeep":"","tlshash":"07e02bd05906add9e09e7cadb329340461017b1776c80586445c86c00bd4411f75d58e","first_seen":"2026-09-29T01:29:50.956273Z","last_seen":"2026-09-29T06:09:05.386082Z","times_seen":141,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.393Z","timestamp":1790661830393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9b556c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.421Z","timestamp":1790661830421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/","fqdn":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.889Z","timestamp":1790661830889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/ HTTP/1.1\r\nHost: qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1306\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3F82kvCVaB09niYzN4iFmhTzkDs1%2FrMUsCuzSfyJaUdYgcqpC00lz4FK0GatTyoF3OaZM9qiliAAnhhr3rn%2BFAMk7hFfYq265CX07Wdk3SdMzeimbN%2B33QlA%2FgtyfOXiz4r8L0ir5xaBSwdK%2ByqLY5BieTS3usTXaPeFU7lNMzaHR4dVO6BI0I7wsrV2CJlYibBpIjB89aSpET%2BCRpxDlfAdKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e24b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1306\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1306,"size_decoded":2186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73bc41599dcb8fba90c3f7216b60f320","sha1":"40494127caf63b4f9d056043418d1d82774676ca","sha256":"05c44a451efb7ac86bb3a921d8b6dea43e6f18f8a9f0d1297c3d956cfee964e8","sha512":"b6b4cda242f5835e75c17fe935eecc520dcd00d69babe0322f7426fc5385e4440f73c17a34fcd2ccbe1ad7ad14da33ecc63d63733216543ac8e1a23b38a6c054","ssdeep":"","tlshash":"1321f8ee61b744d1d3429cb5f9c3544510252cc207880c1cadf40aecae332e36e215f3","first_seen":"2025-09-09T19:24:39.818069Z","last_seen":"2026-09-29T06:09:05.375504Z","times_seen":286,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":36,"dns":25,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/","fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.902Z","timestamp":1790661830902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/ HTTP/1.1\r\nHost: lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1872\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9nFVkUUc4VbSmlhGJd7sa7W3QzMokzuKndl5m3pzkln%2F0XIrYiKEmXFffmL8YL38BzqhsmgF7HEEyNijnBXF%2F%2F%2FaCxBG8dbLHvWtXZXxauLqkfOUwhAoin%2FmIZ3ytf28WqIn54%2Bb9Zeki343SZJ6GzV1wtcKTucoAlaHZ3IwXzu2HmRh5QxzNVu%2BlXGWq7qTmiRGes6S%2BiT9QoWV10Nh0Vmv%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e0fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1872,"size_decoded":2758,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa48538b8c0947b346de80dc1db8f9e2","sha1":"96276e1d6db34abd142a0ed483565490254f7f40","sha256":"1524f9642a2f1a5bec991fce624446c42edc2dadd25423bbf62a6cc274907d6d","sha512":"6a0188ae528eb3ab059e6aa4e6c3411c476baaabdad34099c10e60b27bd5aaa82c27df35caeb1edfb62b07763b71e2e4ea83cb419e7a427df38a8a0fc4fdca24","ssdeep":"","tlshash":"20315d5ea4bf54f928c1b41b948392e4e021e121c058b27cc9f1bb7c18f511243a8667","first_seen":"2026-06-10T18:04:23.905993Z","last_seen":"2026-09-29T06:09:05.323162Z","times_seen":287,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":35,"dns":18,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/","fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.905Z","timestamp":1790661830905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/ HTTP/1.1\r\nHost: zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1720\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTmjYratZv9AgVygNEkgKJ9lQeW3V%2FUtJz5g3CbRmCF0VXeQ08zPIeadeZWGEF1MgKB1KtIV0N4v2lnc%2B0guN6%2BN5frkXGzbBkQCNHZLWaSuOHydHDVk9azCDOdL4742F9NDkl%2Bg0hzVNUrkyXp5%2B3cJc1Vz8LNsw6eN0KxXM9lEgAr2oYPjaZ1G7jvGm%2F8jlHLiZfI9JHX0ZnhifHkHI4cwCV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e23b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":2600,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0314e0b2cc12271fd9c1ffaf13f80c91","sha1":"152c1c56734890372da333fe64cd37e79ec81d36","sha256":"b1e1818d8943c7f10fb99aeac6a0a86ea4b4b646b16adbf9d4c4db2c4e8cb7f7","sha512":"ec6234ac2fa864339199f40e6aa08b33ea986e12c61ec951aa3728a2b045af2a29c2fc200b2f5aa157425bd36dbee1cacd61028a810ece6e448b34c6d18f6efc","ssdeep":"","tlshash":"ec310815a47e31a7e3b1dc8a631b5877bb08888960e99cc8309d7cd6c12780d27ad5a0","first_seen":"2026-06-11T07:30:29.733709Z","last_seen":"2026-09-29T06:09:05.423043Z","times_seen":287,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":35,"dns":24,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/","fqdn":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.912Z","timestamp":1790661830912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/ HTTP/1.1\r\nHost: zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1318\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qr17sN%2Flh1CSDTl7HSUGLYZmKS6IyoKL6%2Bvh45Ur4aKweaOEdkk0DKjDoDbH7xgJLHb98Iq93TYsiX0Sgq72dNW%2BHp73hZF4TGC%2FoFSBPzUfos7t5ip7%2Fn0aCavfzadSXmy0iq3t4WqymIV7ZD3MUEGzrTBsmOFPr9BMCC5AGYcLVjVjQ5F5zO8hbfk4PvgrShhkb8fb6%2BjrtribkNdN4pBANrI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e17b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1318\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":2198,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-09-29T06:09:05.357303Z","times_seen":4785,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":34,"dns":17,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.109Z","timestamp":1790661829109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iMCWoGDXp%2FzQxINJDPvq2FwwEdUyJFHm7HOTgkpx9C6WpoFX53CT%2Fm4jF6S6ahQ59fWes59moV1YkHWwnUHJym2izagTku1VUsZ8X8LH9x8PMr%2FOFeS9MJrqsU1rOKw5ZhBbjZqGw%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-1c21\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96ffb9a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7201,"size_decoded":3456,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24cbbbebe06d4a5850ad67e6068f79f6","sha1":"0cb1894f50a5c2ade690c461347c7d8631faf0a4","sha256":"7bd532e3a4ebced01358408339f03d015d9edb8e0156da8919cf386de05e1c5c","sha512":"9f2b4c383ed8f74a51f6617a1cb2a51d923e3a1a5c9589993e05414343b19d7f1f8fb2eef19b8f16124eccd4e301bc80a35d029ab3cd389aa59f643bbbad1ca9","ssdeep":"192:xleT+7MERwQO/fmJEbvqtIxiFbZ3pEKkF9b:6JSKfJl2bZG3b","tlshash":"ece165edef7c2a7cf4c8a7eaf323106c7b0aeca01915ce5ac65d4d5a588284c9915cc3","first_seen":"2026-04-24T15:23:09.438265Z","last_seen":"2026-09-29T06:04:56.859559Z","times_seen":52,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/1729aa1263747dd8b8588b63077202ed2d2d7318.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.116Z","timestamp":1790661829116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /1729aa1263747dd8b8588b63077202ed2d2d7318.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ck1sNOoTBWHxWSu72Q1bQaEesssdX32Y7Zxe9bWnqZOqEcHCpokOBkan3UN47jxjInD5WxA5uhw6JprbS4MLrHURUn4Ddjtw%2FmgLMbGjjr172UsKY9C1F5h8HWDgz9RGm0ggic8VIw%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-1131\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96ffb9e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4401,"size_decoded":2504,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2af18033ebf1d46e16a2a12fa77e9a35","sha1":"1729aa1263747dd8b8588b63077202ed2d2d7318","sha256":"0a861394733fd023e83d260dabef406361dfb0ab1231b6c1bdc9ac6e212ed2da","sha512":"7ec8ed5d91caa45544f2b4e2cc81f4965ff94417ff2d1c4c0970aaefa296186246e141e2828f9e23bdf26ccaada2c9ee68c1e2ecdcb795390195ac8a038dcd62","ssdeep":"96:+Zk7pzJjO2fK2eSRNREFRuSoOApRc7pdL7QHS9EdP1HEDxG:yk7fb2SRNREFRQOApCpdDEJ5EDxG","tlshash":"679176eedfbcb5e5b089e3eefb536098351f98766281ce91c34d2c896096c0cd9994d0","first_seen":"2026-02-16T14:56:50.163733Z","last_seen":"2026-09-29T06:04:56.860945Z","times_seen":54,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.649Z","timestamp":1790661829649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 19:10:47 GMT","end":"Fri, 30 Oct 2026 20:10:26 GMT"},"fingerprint":{"sha1":"65:9E:5B:37:AA:2A:91:88:11:63:39:DB:E3:F4:41:EA:0A:7F:A0:5C","sha256":"66:8F:BC:54:1F:00:37:2E:B2:39:A3:49:95:4A:E2:63:A2:FF:86:76:7C:89:DD:92:9D:F0:13:61:42:2D:CE:64"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvDuIFXWB8qrcldALYF86fcVCeXrbM%2B6bgSki7gH628GDp2RZog4RRBZF%2FJVg47eXRuYxJ5I3XHNvLl3I4Hv11KUChSVKAR793mgAXd6t15UmmSpfD6RNMIJsZb%2FZCWCMX0RGA3I\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a428c973a80b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":716,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-09-29T06:09:05.386784Z","times_seen":657,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/alpha-cacheplus.js","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.019Z","timestamp":1790661829019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /assets/alpha-cacheplus.js HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 01:48:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tE3YKZSWl%2FD26F%2FtCwot8nCkFpSD7HTq%2FR9UD%2FxXWMreA97%2Fx2lZE3WrXwnuTFWk2bUtAqK4tkoic1%2BGFaq6wWRnrst%2FrYUjui5mYjRzg%2F3CmyV3G6cSZqOJT%2FjllxMtd54i0tTwtQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6aaf3b88-366155\"\r\ncontent-encoding: gzip\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96f6b857127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3563861,"size_decoded":721493,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62500), with no line terminators","md5":"1eb8196558a65dc167e70befbfba62b3","sha1":"578f98ae3fb4324b1da1aea820d0349000308155","sha256":"ecdbb6fce19270e08040b626c84382b533ad4a577edb9c20efaaf8b6ecdc66ba","sha512":"b81603e49af99c511e25d9d87f8b944462ab190d14dee2a8dc1e0c53786026d6ef0335d714713cc2b2d89fab7230fa3eec9b5c720ff0fc10d5d61f68ff42eb5a","ssdeep":"3072:vK8qMUbbylcNtoFez19ZQviFZnf9Puza1iPOe:auS6ez70ibf9PPil","tlshash":"7f3540f717a98e7ec0bfec49dd356c0c90b4c9840e1e9156bd23a95bdb8caa8534874c","first_seen":"2026-09-25T05:38:01.266348Z","last_seen":"2026-09-29T06:09:05.349932Z","times_seen":117,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.123Z","timestamp":1790661830123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/wasm\r\nx-jsd-version: 0.0.7\r\nx-jsd-version-type: version\r\netag: W/\"5850-Zla5mhcuOico9+qcpv5wsYqeHHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\nage: 2120296\r\nx-served-by: cache-fra-eddf8230077-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22608,"size_decoded":9026,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"7116ffe340a553a454fef87341c44bed","sha1":"6656b99a172e3a2728f7ea9ca6fe70b18a9e1c72","sha256":"e4f3c00246a775193661f9277ca1288cd310a6514de166ecc2176ccd26fb06a9","sha512":"d9f2e698bf8beefb99d476bd78b26002d7e617ba6e8234c7c93e81ddb74594cf713fc276dc55fe8f5a837c8992fb51a6a52cc183998415cef1b626f4040f2b6c","ssdeep":"384:q1lFv+dy0yrXzRJnzAQTI+q9HU692o3SeHom/EtUHTOih2YeRbpKgYRSE94+D7+:K7zAZ9ao3XHom/L4RbgjSqDq","tlshash":"aaa2859231a428e1f13af73ae00ef1b937139558fb89ba2ac71f25e72c7b50465d6d10","first_seen":"2026-05-10T23:32:59.054461Z","last_seen":"2026-09-29T06:09:05.329152Z","times_seen":653,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":15,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.422Z","timestamp":1790661830422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98756c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/","fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.929Z","timestamp":1790661830929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/ HTTP/1.1\r\nHost: egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1992\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgQoe5l%2FR%2FiNonKBuQJPXrXvuQD%2FQUkrlapFq4O08Xx82jnLPiXz9t0ewJ60jPw6JtRfXceVlJbZMqW0Qq4RM%2FY6XtE8nis%2BBjiez8yvxp8gyR5KypYT8pmMtiZvBWt2B0Gi9lx%2FqrroixEMzaar3ZPumWiQTMoy2%2FfKoyZ2zt4EMe4xo4xfOCYaBYgkTOR4jSJI4VHNYeFeHUYVBPZUywd1aVc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97c7e3eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":2874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-29T06:09:05.41612Z","times_seen":4730,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":177,"dns":145,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.433Z","timestamp":1790661830433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c99d56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.439Z","timestamp":1790661830439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9a756c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/","fqdn":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.840Z","timestamp":1790661830840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/ HTTP/1.1\r\nHost: lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2882\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfqADv%2B5YRZU%2BC4pAwrvY0JuOtVMcKD%2FLqWtpi1HFzI09OV8h2HvlWZ6Pty%2BPcYEWuY%2BuMKMD%2B0WR1vR9W1h6QmDPu8IqTy90PSlvSrSksbqJJ0bwAXJemZB8WldOuYoowpQAqgvzV%2B1EfcGSe9L9Pw1tIKrq60f0TyktIDl2pGJp%2FytHVj3HtMb6kYLtV4lRsw%2FjApryWohtreU4txOkyN4TXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2882,"size_decoded":3768,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8b61c033324d78182bfd7d640196678","sha1":"484f398b8e08e21ba4cf698558e96b279a487f51","sha256":"d6bf599dbff0049dec8d4f08beeb28803a974148c8feeace8345a5237ea6eb40","sha512":"0555bd45dd355a4ce34385e434f1f9c4cfd5eb911a5618166474db77cc9779a376b033149b2945359e78c034d515054cb16aee05141f5698de6c42a690acb31e","ssdeep":"","tlshash":"5d514b3d5ee7c49ac312cdcb342618cb20f9484702815a818c6203fb33b985efd6b8a4","first_seen":"2026-06-10T18:04:23.895397Z","last_seen":"2026-09-29T06:09:05.409833Z","times_seen":289,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":40,"dns":16,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/","fqdn":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.847Z","timestamp":1790661830847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/ HTTP/1.1\r\nHost: nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1274\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRn0Myb1kApbgMOORiJcc1f23pZLhkPDLZsXDcAxUZrtoz%2FeysbPsjvt45zMeo7w%2FAQGesEYMrzgOzV36vsv%2BeplKimt7f1EeZLvSfw%2BG2SF1UGI71EHJ6v2MizOMdOj4hNVmaYUqonuNGOkUhZ9q2qzoAOiu0tmQHDFnqV72MIvXSwDAJg8ICXzFbjySsOpaD43LnEmGuji9SeS2R7yCnpMbPI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":2150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fd3d6ecc45cae27fa8a4e224a23c9f7","sha1":"642381761938ca6dffdb32b5481b4c2d1febe170","sha256":"7e3218626833037cb46dbd0ca48b141b6c084c5c94f11e7b7cf6b2450dbece44","sha512":"18b82655a881b6fe7b49deb081b0336700292a008ee1a57caaa0bf12dbedaa3b67d2dec0b9892b308f5b5704e02b66a760bc7bc29e2664a8373f6b9d3a97f372","ssdeep":"","tlshash":"312117918faa8042edb47a42ff3288907a0290252d6c1b5a34a038bef80874b59ffc10","first_seen":"2026-02-10T08:05:59.35261Z","last_seen":"2026-09-29T06:09:05.343394Z","times_seen":296,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":40,"dns":23,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.107Z","timestamp":1790661829107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMufwW6TlLgH54fVELaxk3vNY0DZx3tgfZuxUWZS1a%2B3zmWkpvhc1B4LwJd%2B8ZofoCd6IvabEWCvZxCtXE6OlYubKCJNz1k0lqqJLLtDLceds0kB4Bl5d5N4SDRzfamr%2FRezAmVUcw%3D%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-411\"\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428c96feb977127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1274,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d29271f69bf5a5cce9b99cad01619a31","sha1":"b6ad9e40c45ed5117f4040e65f8c652bb40135fd","sha256":"84d8f03e0016bfc7b24a243733e74f211aa5e2c3d6423746e0ed93bca660852a","sha512":"564d71caca9c28b10400e0d2eb39a242da88996d6d0f3ebe567c01d5e6824e01432920cb008db0abe44a7e38f2f69b0b8e546c448600432e05d76f2ea24f1eb4","ssdeep":"","tlshash":"3511affe4bb95bf0495e8bbaf932118cba06fc352bd459cec14d5d469091ce8e582801","first_seen":"2026-04-24T15:23:09.436872Z","last_seen":"2026-09-29T06:04:56.867457Z","times_seen":52,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.658Z","timestamp":1790661829658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://sitemulrrt1unux4.xyz\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a428c9737c79b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.sitemulrrt1unux4.xyz/?req=ping","fqdn":"api.sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.300Z","timestamp":1790661830300,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?req=ping HTTP/1.1\r\nHost: api.sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/","fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.834Z","timestamp":1790661830834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/ HTTP/1.1\r\nHost: 4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1088\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOKH%2BPCgJPSPDnhGtpc6yPhlfSfF021Wmx5S3DfWDo0kPtzRLYKWGBnv5sO7O9ieAd0e1WSJmR2l6JlMbWXnyLH48whnGbh%2B5Tp561IKouum36w8Jj5kBhn5gRtc5bAyybCzj2US3GzAerabWtzhDSAXmCP9%2FMZcIZ4sHKkjyKBNTktwwcPibcfMi3RV6CpTDhxEZkkD4lrbR7hisuIhqijYu4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b0df1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1088,"size_decoded":1962,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83b2e6eb3f40be6945e2112c98329b70","sha1":"b341a325a03dd650a117551cfa8b85d0dc92e017","sha256":"6aea9bb753ec96aa7dfca4129ed0fa434f44076efe1a6201470d87f2dc472114","sha512":"58906704666d6ff8441f9d30c52bd971e6dc7c36e22e3e996c91b2c8692597474077890d43f82269f2405512681c920873b67b57b670201d1aabb100e476d43f","ssdeep":"","tlshash":"c111e9be75434472944b64f6cccb83cce1e3060469eddf26816219cd9c1c8c2790354f","first_seen":"2026-01-04T09:33:32.414513Z","last_seen":"2026-09-29T06:09:05.34211Z","times_seen":305,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":10,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/","fqdn":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.866Z","timestamp":1790661830866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/ HTTP/1.1\r\nHost: 5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nvary: Origin\r\nx-irys-item-id: GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 142171\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCOxRXn2RrEbRWX0uN0WkooF3P%2F%2B996tyjLDjybDo9JL4LeR%2FdsMgQKiY1StrfP9vtXmZK7M5C3dcEJRP0C1QmBKIQHGfQTVIJOlM%2FrBrIxQjUwNUS1ihZIU36JBLy4oUeR3C1zEVFDzzNIZLe2j0MeJL6xltl%2Brd0tBE0xh8Zl9C%2BofOjFMexSF6dqkq%2BG%2F0UN884KecJ2eA5RxpnSGBSVi9EA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e21b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 142171\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142171,"size_decoded":143057,"mime_type":"image/png","magic":"PNG image data, 800 x 776, 8-bit/color RGBA, non-interlaced","md5":"22b70ab1a57849b2d9229ea5f20e55c7","sha1":"06819da46a119a541dbda36e9a9eb47a68ee89a4","sha256":"b66c86f3a8fc126a563f582f85ec7e2bc36a4608d33b81e0777401114eed2818","sha512":"925f53ac647440f879a67709f1611dbc4e1b4173be31cee7014417417ed6225bba69c61862d6cd2a48ef04a2bf6abb6c723cfd387af6a975c681c512aab80c85","ssdeep":"3072:UOrY2fP7LgFIvLtU3JffWuVpnLQhvqTjv+6i++iJWUnhJIJ/d0RuYAS:UOrTHgoK38uVVLDn+nwnnIddrS","tlshash":"9dd3132ee8c062716d0d1b7e84c97c73050aedd7636aef3d4e3054eab9348923ba5547","first_seen":"2026-04-17T17:57:05.28014Z","last_seen":"2026-09-29T06:09:05.363205Z","times_seen":310,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":39,"dns":23,"connect":0,"send":0,"wait":313,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.640Z","timestamp":1790661829640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a428c973de1023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423,"size_decoded":711,"mime_type":"application/json","magic":"JSON text data","md5":"7ab2368d0883b3920e61fc38057e471b","sha1":"4816cf6e1cb2b6813fb12c1c7f85375c8760890f","sha256":"3aaaf81360fe649d13ca30ad785f0f0ff6d765a9792107d3eb7588ef7d905b8c","sha512":"b24a23764e949ad99ddd78687b358729f758e21287e7dac1f2170e809b5c53fdd632e97c4e3352436f089b0e7e77f48974f88e40fa94036fd57855aea69e76a2","ssdeep":"","tlshash":"07e02bd05906add9e09e7cadb329340461017b1776c80586445c86c00bd4411f75d58e","first_seen":"2026-09-29T01:29:50.956273Z","last_seen":"2026-09-29T06:09:05.386082Z","times_seen":141,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/FSKOVX1BWF3xbQivs286Q8YiLsc.mp4","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.154Z","timestamp":1790661829154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /FSKOVX1BWF3xbQivs286Q8YiLsc.mp4 HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i=?0\r\netag: \"69e76200-3d92fc\"\r\nage: 366\r\ncontent-range: bytes 0-4035323/4035324\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KB43987RmfoJvuQNeOLz%2FKhuyLignd0saWCzMbrEEAWxkrVCZJFyvAH2X6dJlES84nwhd%2BZqi35vJQgsCqN2SPdtvtLv%2FtUosYf6Ar3IFD3aTH4eQwZQs6B67YaZ%2FPIGt3YZzWspLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9703ba67127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4035324\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4035324,"size_decoded":4036059,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9de9ba113eb8f1ca99386823b91d5dd7","sha1":"36681774b53174489a888cf919e20e4ba09a136e","sha256":"65d083efb97e50d7d49f53ed25396483eafa93decf7f60bea8e7304342b15061","sha512":"0eff98e971b0cc000f44525fdad5e1b566cd91ac2a613f122c17799da5adbfec0c0218fdd89014fd52ac27c0b458e6e0dfc0ec77b7883e9ca33f0d706745d5e6","ssdeep":"24576:4OmWxkfP3WD7Bh2RF02rcowzKPk8lKoCwU/VK953u:XNGfP3WvB0Cscn8hC5/l","tlshash":"fd2533de3bcfa6dae812317b8ad20700321fdd947558279153e05cbffc16aa4ed90694","first_seen":"2026-04-24T15:23:09.405122Z","last_seen":"2026-09-29T06:04:56.870055Z","times_seen":54,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.425Z","timestamp":1790661830425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c98a56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.464Z","timestamp":1790661830464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c956c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":24,"dns":0,"connect":2,"send":0,"wait":178,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/","fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.829Z","timestamp":1790661830829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/ HTTP/1.1\r\nHost: t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 404\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fL4gVxpcUJZ4DyQl%2FrbNwklr19TZc5T3uLYiInQIDLnIjtjPpGJW03zgqQEot8DCBqQG5qgh4DCjz5xCfjrSmKp5UJsSjTKblfMwkG0J%2BnypTzYJrnHvTLvYzOPyU6z3AOpbN7rEUefr1EAUnvM6wIEtpgQnm0u8E2TEaWiq4uT2IKS3cXqWA%2Bzl%2BIMzv%2Bwa%2BMwgfNALcVgcE3NMNRas4M7q3BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97afdeab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1282,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38e0fdddc2ae9c063534c43963acc120","sha1":"807c4dc8578cfd17d503a3dd33a847d70b3df49b","sha256":"ac764ebfd47367399a0ecbc2236a573ad8bab36a76d7b9ff0406b9901b1fc7fc","sha512":"55b13de8dd085096e32e0f1570c8446afc9a2ae48b3f86cfa5a463a8ae2a3aac1a55ff32e72544e431924947b9e168da887e56bf2b0a0a9e9097ceb543dd6674","ssdeep":"","tlshash":"b1e0f1f097225061d3d0b2332e9b3905170cb905552c0d809837b4fd59254c35e60c2e","first_seen":"2025-10-03T06:22:13.531935Z","last_seen":"2026-09-29T06:09:05.446641Z","times_seen":475,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":22,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/","fqdn":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.897Z","timestamp":1790661830897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/ HTTP/1.1\r\nHost: abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1286\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pBaw0NAN8PWk8tFez3uy%2FlwAoUCK0I1sc%2BuFKnSfyjKtrlUUqQJP5sKOJfRBo0v32xcRCvfMNta5vIzonPqE22UGSwQ6fN6KTPR1Dg2BXI8bmpYQ3ddqV3VAHZhx%2BEZeaCYISPGZmucuxxZPF6Ivgn0eXFMlH7HsHoG9UjUvbDA%2FK9OToyjkyrKO6DGkIa3%2FxQwchq2sr9udgPLVLwVZb%2BfNeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e18b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1286,"size_decoded":2166,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"394cc1979b87058aae23ec953a289527","sha1":"ba63ad16dc17c8100c09092ff69bd6d515795a92","sha256":"9dbe42b89ea8a6a69c457e26a5456cd86e44e3f3aa839d10422a214cee7cb1fe","sha512":"fdf49d3ea66e078ec9944aa697db3213ea3b6c2d55ec8b065f1ebc513977df1f9d01c1528bc0ebb8c89f307923243deb480e6ec1cfb4c3e596d22dcddce2da93","ssdeep":"","tlshash":"e121c8e2c8b8259de223cc07626798a1dca11b3317d62996db20ea35f45a240956d0e2","first_seen":"2026-06-11T07:30:29.744458Z","last_seen":"2026-09-29T06:09:05.423881Z","times_seen":284,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":35,"dns":21,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/","fqdn":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.915Z","timestamp":1790661830915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/ HTTP/1.1\r\nHost: hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1438\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00PanX4uAPzS5vV2dijwJTvtstve%2FEf%2BReHEw8iOOaPSd9I6oO1%2FSURmQ9oxMH6UuMwnSco%2FzWTqBxlotl8IQ78xIRPtKjHBM%2F%2Bjq05hyslZe3Aqq2G65yXVFn6tgWkvwZMOgFUesmW0MCX3Z%2B%2FhBfdhH04y%2BfNLMAOeOvSqA%2BQxOHVdDO9PPhgKy6TnKRhQjZjnlRBF6O4sDTKmGKRiferQUMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e1cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1438,"size_decoded":2326,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"739c17e97821986cee753ce116d27ecf","sha1":"06e069a865b1da92efe4aefc96ae4f088d1fb94b","sha256":"a59b53d6102a24cbc0521f8395b37c6e36f69926ebe63268e389321f871dc529","sha512":"aed4fbd8df5b742900bf36bd92c7734087b7562c9ac0e303a12fa46b3f8b04267e9983b3b7a70e5e35143a7c212d440a74d97266ce3594a7a949dbfe40cea6fa","ssdeep":"","tlshash":"412119f1e42e130ff0f507398c1f634898f24b905834addcb93db2661e603d82268899","first_seen":"2026-06-11T07:30:29.717032Z","last_seen":"2026-09-29T06:09:05.32684Z","times_seen":287,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":34,"dns":16,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/","fqdn":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.928Z","timestamp":1790661830928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/ HTTP/1.1\r\nHost: l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1884\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FCykupAuZTbdj0iYof%2BdXIF8HqxWqy5%2BEISdN7rnvO%2BFB02Up13aRbmYh3Ld77aT2iNhCpVtGIhTeMP68vF6e%2FSCOkcJCbRutnnaepPzBmrsgVbRgNlRaWlGxowwJ6%2BBhfarmrJgFNGZGGk%2BIAYCDaQlF8LmsFsK3qYZwTr781WEqozY6%2BTQUQtejGnf0s3C6MVq8jClkUQ85%2FUIwctt5tdoDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97cce46b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1884,"size_decoded":2770,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cafb298fb3c0ce00dd7cd5ecca87af68","sha1":"c73e7b60042b7fb99394c310037f67df6dbdd3e5","sha256":"8316053d504f8c45143eb6feba6161e5495c8c9d148e2f2654b86ffa765cb6dd","sha512":"a374cb45c93127f3d684c19a92d091ff2fb8ea7eff3747e7ff8f539bb8fdbf0da7fb661209aee6bd9b4cde900540d29de27f2de40705add77599e730f3c0126d","ssdeep":"","tlshash":"9b41fba0c83200f74f7b7a3594501b64ec5a2705cd28ee6c8be9f5203527cd7f26789a","first_seen":"2026-06-11T07:30:29.757651Z","last_seen":"2026-09-29T06:09:05.428641Z","times_seen":290,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":230,"dns":216,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.402Z","timestamp":1790661830402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9cd56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":38,"dns":0,"connect":4,"send":0,"wait":188,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.432Z","timestamp":1790661830432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c99a56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/secure.php?req=cap/challenge","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:51.126Z","timestamp":1790661831126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"POST /assets/secure.php?req=cap/challenge HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=n7l0623kl94iaabl3tgreopgl7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9R%2F9jGqejlm%2FAykRnLRJgWOHkRbwF%2FJr4imIBVUzG9XZyOJCffAeXz2HHGJoj88sF%2BPtNYj1Xf1DA4QDBMdW4EEbDZjcb%2FUlodWWtweyjTsg9IEcDXmOps%2FZvb6ajBQQgBokBr4UKw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97d2c517127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4644,"size_decoded":4374,"mime_type":"application/json","magic":"JSON text data","md5":"4fa79ef859fca9c100fae2b212a3c924","sha1":"f6395a1b22df31d5f67c3832d29cc69d46105b6d","sha256":"279c471c85be438072cc3c9a66dbbe6240e44594eaaa74d68f30597af5ee770a","sha512":"14bc8cb55e7fd07a60ebb40a3313c0d6fbee33a91729e391cce1a164500f6b8f76023dd96558b916286ae56d5b972e0b96735dc6ae2db9da516620689248e7fa","ssdeep":"96:cvKjfplnXgMah5sdgq2VdSypbr0akd0wjwL/tw6lLSDh8G3nhVTexWA:kKT7XXaIdedSyp3CmBlVuhxLBA","tlshash":"98a16d8f876fa4b7f5345b3546193bec85bc12ddecb306ac7a5f179608121c0a906376","first_seen":"2026-09-29T06:04:56.874127Z","last_seen":"2026-09-29T06:04:56.874127Z","times_seen":1,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.410Z","timestamp":1790661830410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96c56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.413Z","timestamp":1790661830413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c97156c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.456Z","timestamp":1790661830456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c656c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/","fqdn":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.817Z","timestamp":1790661830817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/ HTTP/1.1\r\nHost: 6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 742\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3Qsxkkw6xdBCQ%2FxTV%2BqPQLxVyy4VECPvZehScUhAz%2Fa4P9kQzVaIeM9bmD3eMQaInLdYyPhsYj8XSRY%2FVRBgOEB8HbAMfLmkFuxDr8MekhxFPlecWXQKb%2B489ztUZvPoMAhBtxX3pPOUmr6RvmSyNpyy65f5CRn%2FFSZRGxwHn%2B%2FI5HYM24rxCLWXTefnn%2F36TfQtiGcgnaIBpSMIhsSg6LN8Ts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97abde1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":1626,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7d8fcb07ee9d18516b53caa0d64de17","sha1":"0e8e550c8987324229df62620b2583cb377ffdd6","sha256":"6dab8e56b28c5da96f44c1dbed1d2e22a904d9744624886c3eeff2bf201f124f","sha512":"135e619b84976c313b9ec58b69eecd9705813ae75cffff9d52ceaef7b943895a7db9e8df170b4d54b43d2444398e020244a7c39e922886265858a82afe94995b","ssdeep":"","tlshash":"f50165d81ff5c5b439ba0b89744366725a831d74fd38608b0431ca644efc86db5502ac","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-29T06:09:05.356304Z","times_seen":328,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":9,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/","fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.917Z","timestamp":1790661830917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/ HTTP/1.1\r\nHost: aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2583\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ver79oRurGdetdziMmyeFiVfW3tU6gIyxb7dLmJPNzk8M5XbqJsPZOP%2FaF9R1Dpl8BrfOszhBR2apmfRZyQzXjkGlMb2te3Gyr727cgUBAjLRnTq1bdMQKH%2BM81dzBKdKESIIeIlxZY7%2Be7UAn5slhsF4zShuRWLLuWkZaOMAiM9IC3psGE2yD%2BuTx5v3eAhlVYE0S2JM8tLTfJsUIyXQBk01x8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2583,"size_decoded":3456,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c4ce54825b90a5e29f1d01212a5cfbb4","sha1":"080e35b85dd4b25898a2aec6943af4404905854c","sha256":"7385e03ff8f0f4bfc47db8935a39e57e1d2b19d02e7a1510dc6458a79e4e48ac","sha512":"33864c6e123dd07391eed83ef825411c140523c94c56b347215c35253276f9174c4fccb07412b6fe34ecf888a7e088051e8fea9ef8e2c7f0cf2035bf4eef4694","ssdeep":"","tlshash":"41511a5f6e8e7ce3d2c4801e860d914b317912c5bb1eb55bd988c760af22e6d9e248f1","first_seen":"2026-06-11T07:30:29.705894Z","last_seen":"2026-09-29T06:09:05.36395Z","times_seen":286,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":33,"dns":14,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.399Z","timestamp":1790661830399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9ce56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":48,"dns":0,"connect":4,"send":0,"wait":194,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.751Z","timestamp":1790661830751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 50896\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-29T14:31:50.297727Z","times_seen":300165,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/","fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.787Z","timestamp":1790661830787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/ HTTP/1.1\r\nHost: buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1264\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEO2TMDq1RiGQ61CDBRqQqyTGkJ3F5%2FNFmPgsrD1xnmhMykPEW7ksvwcmcfyqVI07sWUBz42%2FPplzzD6DDJUxqJq2BDvnvK5fAoziKkFbHMICpndi9IPHKfSj9wD4DCvyNIGZcKzpVE0w8liK16jBPL5B5pGH7m%2BVlWBg4UNImVZD6bvrWFX5u%2FcXC5sr6btCWncwObqJ1vF2wVaBNJwyFpe5HA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97aaf3523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":2139,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-29T06:09:05.413515Z","times_seen":4707,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/","fqdn":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.907Z","timestamp":1790661830907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/ HTTP/1.1\r\nHost: 2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 4844\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMrEVd8Bb7z1iwoxVq%2BBrlbVUJdVkLrSVPo2mMccB8SvkYyAXg%2BR483wGROAWfBdvrSQild6rRo5C45IL8jS2TVFVt%2FRZrZCwA%2Byd5h9F1G665c7ka0pPciGZmT2XK81gQvqZBVPW9ZGMzR10BIcsgZapI%2FtKeBV3qDoDhdV9ZeXWHexZlnXvzZ35OdjsDpDmD8pI1jzdO8B%2Fh6rRavzyJGnIlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e08b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4844,"size_decoded":5724,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fede23a3362cc6ad2d14390d8dc13767","sha1":"b05217c63e6573c9c272ab9948eff228e3de4cb7","sha256":"a93378956b2085e9cc71239b969063e26489c396fdeec7aab8428149f292608f","sha512":"46b8ed4bc99a69d8d9124a65d2423fcb316f1c3319b033119870988e73b3893947358069d0196c1b9c89ac89aee34fea6fa2ea2fc45b69b75a62910b2bf6c7eb","ssdeep":"96:Fv73oiQWckPHE1kJyks8HBmsG46hlasbX41OBoj6vF1:97kWck/E8u8H/Gvl7gOZvF1","tlshash":"2ca18eb746666bc0d2f8454229466363c9d90ca72fa6cdc7724b6406d0ddf918df8fb0","first_seen":"2026-06-10T18:04:23.898247Z","last_seen":"2026-09-29T06:09:05.43862Z","times_seen":286,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":34,"dns":16,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.428Z","timestamp":1790661830428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c99156c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.436Z","timestamp":1790661830436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9a456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.408Z","timestamp":1790661830408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978b96a56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/","fqdn":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.914Z","timestamp":1790661830914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/ HTTP/1.1\r\nHost: ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1140\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpmVpZcqjlBbC9gEtUlNKqt616I8pIB9TIe%2B5ILm0kpvrr9CToiM3EtS37gg6wtpNsPTKIz6yBgHiZApm8g34ASpC4oyqHu6DNwKgTZRjkG%2BT3ymyuJ1JSGKu%2FDe61O5qFgHG0NSaZF24umdJhhkApC%2B%2F705t0bOYxwmO6mBdhS6TPpGJkVGnXC%2Bd7PjrF5Ej3CMRotwwgyRTOB8OG%2Bm73i6Wvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e28b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1140,"size_decoded":2022,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38199112def1eae2fe5fc00974d1d026","sha1":"d70d4dd4ea783a3dced58500831af409a2e39f6d","sha256":"58e137e626c100f7c0833a85cbcec7d41d366f3467372c333bf2cbf093329915","sha512":"c37eabb11ba6027c77f3ddbdeaf7dd1a24cfafee67ffdb62c354c60ef51eeb9b6ccb7ebdc866601ce090c54bb24eb736955eb5b74b905addf734b54da3d049b3","ssdeep":"","tlshash":"1d21a386ec313f278f2a52a66eb351492a9cd038fba2b9b1662908c0493c69dc895024","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-09-29T06:09:05.424872Z","times_seen":368,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":35,"dns":26,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.094Z","timestamp":1790661829094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2 HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=3,i=?0\r\netag: \"69e76200-14d4\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdpHREu3v%2BNeodB6%2FBdTAIBW1mTx4OgQKMID4t0GdwqPDHZBGyfsBSwXEZsgamlNmCS5wTzprkTBu1%2FOhOqS1OTaD4LDsW%2FhCv956JnAleT7U%2Fu29txgKQNklcXHOa1W4aBtH2jMGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c96fdb947127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6047,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-09-29T06:04:56.827908Z","times_seen":59,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.404Z","timestamp":1790661830404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9cc56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":32,"dns":0,"connect":4,"send":0,"wait":189,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.429Z","timestamp":1790661830429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c99356c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.529Z","timestamp":1790661830529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /disable-devtool@0.3.9/es2022/disable-devtool.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/disable-devtool\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 02:57:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 28740\r\ncf-ray: a428c978df3c8deb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18401,"size_decoded":8525,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14919)","md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-09-29T06:09:05.340719Z","times_seen":374,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.647Z","timestamp":1790661829647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:05:13 GMT","end":"Thu, 12 Nov 2026 17:05:12 GMT"},"fingerprint":{"sha1":"3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23","sha256":"0B:F3:1B:F3:1C:34:BF:C5:3C:C4:C5:D7:82:EE:73:AB:76:EB:51:11:1B:89:CD:E6:C6:FA:42:22:5A:3F:7C:AE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-egress-limit: 1000000000\r\nx-tdly-egress-remaining: 999967928\r\nx-tdly-egress-reset-timestamp: 1790737760904\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1790661830812\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 5\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":422,"size_decoded":900,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"72c21bc0915f1f263c4858c65a59bf3b","sha1":"d6def455384192f052d1bef3756e2af41a9cc001","sha256":"4ef8f608bd56372bd9513c9196373b15aecbce54adcfc2f0860477525d574bb6","sha512":"a8b382255c355599954bb8dce2a90816c459d979e6bf64a5757e68b5ce220288386543a87947f12daf8282b994bd4135119f69f5824c8a24c94d454f2f663dd0","ssdeep":"","tlshash":"4fe02bd05906add9e19e7cadb72934046001771776c80546845c82c00bd4411f75d58e","first_seen":"2026-09-29T01:29:50.93751Z","last_seen":"2026-09-29T06:09:05.319936Z","times_seen":141,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.657Z","timestamp":1790661829657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"OPTIONS /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":681,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/assets/core_27d1859f63.php?req=ping","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.305Z","timestamp":1790661830305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /assets/core_27d1859f63.php?req=ping HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLLwVKSMwLX6eGJI%2BAlps8O2OqjCv%2FMrHYQQeiUia71afGD4nONfUPxA%2BnRsZcCW4jRYBwXo%2B2I7FSZNJt9pFiutnGFycC2DiT1NJSOntBPCxb3KG6bCMcxbjEGcfGnBdeXvuihn5A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nset-cookie: PHPSESSID=n7l0623kl94iaabl3tgreopgl7; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9776c087127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"n7l0623kl94iaabl3tgreopgl7","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=n7l0623kl94iaabl3tgreopgl7; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14,"size_decoded":953,"mime_type":"application/json","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-09-29T06:09:05.325437Z","times_seen":1110,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.434Z","timestamp":1790661830434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c9a056c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.451Z","timestamp":1790661830451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9c256c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/","fqdn":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.868Z","timestamp":1790661830868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/ HTTP/1.1\r\nHost: 4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2526\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0OV3h1xs9a2b315Mai%2BRKzJrI299lIKW7ispKDM%2BfP7aOogw3ME%2Fgk1IfcJP8LfAtAEP1Evyy2ZONp48XMkDvgJJWKH7AsDVJq7g2K6sYadpGGGllysG2YU5iEsErQjz5GuYFaMlKkvhj%2FxB%2Fw99hiNSn9YokkCXcUCDQ%2FOKYdtKJUAwlkeXlKy9J9gSjRW2tP2%2Fco4CAzYOKRIGgeXqWc%2F5LE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e22b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2526,"size_decoded":3410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34a4929f26a305bd1a8ea7fc9d0dc5b8","sha1":"b7bcdaee70176b8002e5f8573f97b543ca3afada","sha256":"10685e6d4638ee21f86f918ceb78a3e03eb6d392b6d64a99210e1eaf9341abf3","sha512":"3009b184219cf11e09493a9e0c00c1bf053dd8d6b63e0298126ba7f8f8dab504829f8622644a9771a915fa6d022a1103f70951f7c8797ed71af572c309bdc629","ssdeep":"","tlshash":"3a51396a23df013dd8a07ca3e64184a1ea5687fc3a8d56810f89e81296f60607006bfc","first_seen":"2026-06-11T07:30:29.743241Z","last_seen":"2026-09-29T07:47:53.597303Z","times_seen":508,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":39,"dns":25,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/","fqdn":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.893Z","timestamp":1790661830893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/ HTTP/1.1\r\nHost: crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1226\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACK5mthtpWchqilSKuVJ6VHvWfsEuFF2kpJq8vD0AqSZeKsvtb0mBYa89%2BG4TCAycWx0RahpAd1Zb9P7r2RzY05P99sSssuvznZucSH9w9MOzRvE%2Fq75P7%2B12vCiAOimVIUO93YaupY4tfczPhf%2BJ9MJhUmfFc%2FFYkW5ct65nzAlBO1DUCkFh02bS1K2kc0QTQptGt3Auq18p%2BRJ1X1GxvNLzss%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e1db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1226,"size_decoded":2106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"deee48bad1fc92c6fd6a9a0e674b79bf","sha1":"4e9111335476a86a3f21ee4d49d4848987a238fd","sha256":"15aae5f5c33873d84b119f28e4d22497a73baff226d0f5fee4d38e0cf409f8c1","sha512":"d9fb58405ee580a2e169ead3209a47627f632a9c8afd0f5c31ef29e6f86cd5bfa6aadd3397312d92f4fedd354220c1f7782679d811bda52fd3996f0035b7881a","ssdeep":"","tlshash":"4521b7afa47fc325c3d238581d19054b0bb6026975c7e33cb954ba81797700dba260f0","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-29T06:09:05.443843Z","times_seen":419,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":36,"dns":22,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitemulrrt1unux4.xyz/24s1RHEMIZEIF0tJYVJugDOVA.png","fqdn":"sitemulrrt1unux4.xyz","domain":"sitemulrrt1unux4.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.155Z","timestamp":1790661829155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitemulrrt1unux4.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 21:05:18 GMT","end":"Sun, 27 Dec 2026 21:05:17 GMT"},"fingerprint":{"sha1":"4D:5F:34:91:90:9A:5A:6C:85:C4:02:1C:68:FF:4A:45:7E:DC:88:97","sha256":"E5:D4:57:30:3C:45:F8:5F:13:0E:8A:37:FC:E1:BD:79:24:C8:88:FB:B4:F7:B8:44:12:37:23:71:0D:64:91:4E"}}},"request":{"raw":"GET /24s1RHEMIZEIF0tJYVJugDOVA.png HTTP/1.1\r\nHost: sitemulrrt1unux4.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\netag: \"69e76200-67f0\"\r\naccept-ranges: bytes\r\nage: 366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbY1GgKjpg2Uf%2Ff6lpaSLuO10mDnG3iLxHP%2FdewMovdG5R7h9loLe%2FnqC%2FClkAEYC1XxSMC4zogW6wA87k5x%2BuVGhdRX7NlUMpju7cQM1YLM7sJADLq91Ay6MWIXDQ%2F%2BXsqMBh5a7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c9703ba77127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26608,"size_decoded":27324,"mime_type":"image/png","magic":"PNG image data, 374 x 375, 8-bit colormap, non-interlaced","md5":"28f3c1cc4d40a59fcf0f079642b9b0cd","sha1":"f2a99d499d2f432ff42c683adce3d4f8f0e67b97","sha256":"d256b15f5b457d476bf59db37035aef282e31bb2c1c79a6e1e1b568eb3e6247f","sha512":"7e89e7b186c93607bbcd7d6c91c615613b478e12f76fd6371e0cff13d94827e900a7195c2aacf29585349ead1e87f7ac8e3ff1f6ba2c162938f4dd4178057fdc","ssdeep":"768:as3FNSH36osLOmYPLwpyym3Kx4F3kpyhuMY:9VNSXtlpLKc90","tlshash":"42c2e0e2010ad43ac1879667bdd6e812073e0a5de681ca86637c8f0b8e4d488ef5df48","first_seen":"2026-04-24T15:23:09.42495Z","last_seen":"2026-09-29T06:04:56.88502Z","times_seen":59,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"sitemulrrt1unux4.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.371Z","timestamp":1790661830371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978d9b056c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.435Z","timestamp":1790661830435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 29 Sep 2026 06:03:50 GMT\r\ncontent-length: 0\r\nlocation: https://muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a428c978c9a156c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/","fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.808Z","timestamp":1790661830808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/ HTTP/1.1\r\nHost: f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1000\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6S9aGYeiwpy7hsXI7l8sBYVAnXZtEFv0UmcUtrtjPmq4G6Hz1GS%2BT7duqEXEwV%2BNBzQV3enYmC1190G4orXsRcSOJhc4Tif8N%2FOQmkdL6HpDXRLjQLEOY8mYY%2BxFcoqtDPkUMlIQaJEUjjYH71VKGFKS8fVtNPDv9jpXOdMrk91tOYGDpvBXvoSePV%2ForFctlARYcXHZVWSlTNytwqn%2BCIlRfCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97aaddcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":1880,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7aae514c4eada8141a37a9035f55e164","sha1":"d25d7fbc63b22b825098116ebbd65896f6ed6bc5","sha256":"e5710984e7f46092329faf76466920cec1f9fef2975e3f0bae48ed87d06aa9a0","sha512":"e888f76d362655ca1064e7359d96ebb8009c92c3a52534110f9d46c06e59dd44ae71c0c28c69c22d0c6ff23d5625135792f40c7904b690a07c99b392904ebb04","ssdeep":"","tlshash":"4e11c89d4bf55e17d356d474901f5f8304b2f6ad0c51c261cac6649d44740dc3e4691f","first_seen":"2024-06-14T11:01:45Z","last_seen":"2026-09-29T06:09:05.357947Z","times_seen":4374,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/","fqdn":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.849Z","timestamp":1790661830849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/ HTTP/1.1\r\nHost: tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1878\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SrMP3j4wEYsLfS8qJt9LFTgtg3G6pr5890rPatsdgJ%2FQ5GzPG%2FO1dQo2yPC2Hhn%2FksWIM0mN%2FSRU2yI%2BO6EN9kfubnF%2BQjKGamPD2x%2BlzYj8rWJ7LS%2FlBdeUSRJqXMN%2F1a895pbc4bTcoTpqddcTCeA9NQeY%2FVdQS2T0ySt4Ff6jzu2Z2SyHiiBW0PDGXO%2FhJegZb2jL6UO6b%2FFqNFfZqwi%2B3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e26b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1878,"size_decoded":2772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c08d5d7c5a8030437630a683f3592e8","sha1":"e13d5394ee2c8f68a8e428b79dcfd3eabd494797","sha256":"fbbb918fb6d655669ac630ad4bf78f24bf49b750235bd9721cf39b470c1c283a","sha512":"fa7f66ee600e3a2f961061efd0f81290b3946673942332f8587f54effbb14d5cf30036605eb77fcfa0f8d01269cf8c15d4b7c2f70b82d5b17158a8f2e8073c9d","ssdeep":"","tlshash":"9041f729c672167aee6f5c14d1a0308df62ef8850690bd4579e3de63e0283db74588b4","first_seen":"2025-09-09T19:24:39.883139Z","last_seen":"2026-09-29T06:09:05.349065Z","times_seen":289,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":40,"dns":25,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/","fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.891Z","timestamp":1790661830891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/ HTTP/1.1\r\nHost: zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 910\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKaCFUOKwWmINcw8COI4HShDNI7dO12FZjH80l3M5rVHYhWzk2Iz2zbTKM7vfMfuRJNrAhjANRhCB46O%2B3pXSEL0nGqRZZoo8SC1QCOsy4Cp%2BHpbtygVAcrlBgvgJEck%2FCm7wbE9BYla1kkphcgac17qlSrgFbkaS4k4O2ayq0FMEl3gPwHFH%2Fh22NDmC%2Bt5FHr4BM2OHvv1rbF8BLZLVub61qU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e1eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":1786,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-09-29T06:09:05.43488Z","times_seen":4585,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":36,"dns":22,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/","fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:50.895Z","timestamp":1790661830895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/ HTTP/1.1\r\nHost: 3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 06:03:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2470\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qe0WDTBOKCoqx7xVTAR7aK0LuHs4vLxw67W4fvagkb4Qoo1eqObU%2FPs9AjO5MigiZlwhYcbhLyfBmBYVXdNNW58INd4iZEAi51GysOLsLgNjcqBZfv%2Fpp33bldEiH28gMArWFvCESD3A%2BjJH668eusYxu7UW3Tjl9hDRHosBguSyctQHocTzCemJTqsBlr9T3D07Fou9j0xoIWfWCXqYF7Ijo4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428c97b9e16b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2470,"size_decoded":3342,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4355d3f289b817968cd2b1f249ba51b5","sha1":"477353c1a6a88d3d79647d85af54eccdde58b182","sha256":"3f2a414142b4b1afc8d993da729eaef92ff5d0fe00106794c4e2e0e4bc1a146f","sha512":"d832eabfa8fea1aef11fbdba8460614ad29991aae9ab3b260d9b01c267c2a338c5f1d9c50eaa599b916442a3b96617e47a8ea7f849d2401b14cd03d2e34b2d88","ssdeep":"","tlshash":"b6513b71b53df5f288802ad7318b6995368db17a8225e1c9944a42a4f2a59af700cb03","first_seen":"2026-06-11T07:30:29.726152Z","last_seen":"2026-09-29T06:09:05.358632Z","times_seen":281,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":35,"dns":20,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sitemulrrt1unux4.xyz/","date":"2026-09-29T06:03:49.637Z","timestamp":1790661829637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 14:06:40 GMT","end":"Sun, 29 Nov 2026 14:06:39 GMT"},"fingerprint":{"sha1":"2E:54:50:59:0F:7E:56:CE:77:95:05:FA:A3:BB:06:E3:41:72:5F:2C","sha256":"8E:29:DE:F8:49:2E:C5:53:C1:DF:97:71:F7:FC:7B:49:B2:AF:01:67:17:63:F8:F8:82:10:8E:7A:A8:9D:B2:ED"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://sitemulrrt1unux4.xyz/\r\nOrigin: https://sitemulrrt1unux4.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 29 Sep 2026 06:03:49 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a428c9735e33b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T14:35:43.538942Z","times_seen":18724128,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":151,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}