{"report_id":"a59fbeb1-944c-47c8-a7d0-aba7470e9454","version":0,"status":"done","tags":[],"date":"2026-07-12T21:07:00Z","url":{"schema":"http","addr":"rndraac.com","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"172.67.212.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"title":"AMM","dom":{"size":283756,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (614)","md5":"efbdc2c1658dd9c487c40b96cba29bfb","sha1":"26e9ef003c0b0b8aba9c02a682d3f246503c8744","sha256":"49e6fad1182b0f2ffcc477fdd85fe79d4510d6d8a0909984338e6de82ed39557","sha512":"001f06e79aa84f414548a3700893468d3f960e08b71772a8b97fbaaf20c8f0915356f226a99de35d4352b51170a8bed417bd2a61e87a0662171cf627b670f981","ssdeep":"3072:M/fazE7LaTzBKIWfBQq2afnpZhTPkrmQOi74LOKlN0z+btYi:Mz7qAI6QqlnOz+btYi","tlshash":"8a544130b628142b0533d5c99db76f2f7472f30be21a1b857aac629e2fcbe70b546154","dom_hash":"domhash84f731992ca417e7e288a47ab2809830","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rndraac.com","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"172.67.212.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:07:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"client.salesmartly.com","ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-07-12T11:22:06.637397Z","alert_count":0,"request_count":2,"received_data":84970,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"assets-cdn.salesmartly.com","ip":{"addr":"143.204.238.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":507251,"first_seen":"2024-07-26T10:32:03Z","last_seen":"2026-07-09T12:30:07.865016Z","alert_count":0,"request_count":1,"received_data":7400,"sent_data":708,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-07-12T03:05:10.777329Z","alert_count":0,"request_count":5,"received_data":3805,"sent_data":4349,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-07-11T21:13:48.566548Z","alert_count":0,"request_count":4,"received_data":2608,"sent_data":2931,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mix-ads.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":5285889,"first_seen":"2026-05-14T23:47:06.027768Z","last_seen":"2026-07-10T07:49:45.107277Z","alert_count":0,"request_count":2,"received_data":50848,"sent_data":1266,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"widget.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2026-05-14T12:23:01.692825Z","last_seen":"2026-07-05T23:21:36.77456Z","alert_count":0,"request_count":2,"received_data":6506,"sent_data":1291,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-07-08T20:47:08.931051Z","alert_count":0,"request_count":1,"received_data":828,"sent_data":799,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rndraac.com","ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-10T15:16:35.444294Z","last_seen":"2026-07-10T15:16:35.444294Z","alert_count":249,"request_count":83,"received_data":5214038,"sent_data":73143,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-07-08T20:47:09.017638Z","alert_count":0,"request_count":12,"received_data":1329536,"sent_data":6176,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-CZyB68TL.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1444cb22ad49f14a981f73c6631cd10a","sha1":"268bbc61b42d3ecf3445635f31e244f81f46fb66","sha256":"27a1229dc87c10b5bde2671a1809b675d8c7b2903bbc4fd371a762af1db02a70","sha512":"5bbe9b32bd16351b6637b7eddb9e6711f771ff1ff35298e48d4bfb6d5175c4da840192b5feda17836d6848270a4dac6d74f7aabb76e4a4a98b51f20d7a241cbe","ssdeep":"12288:ei0HSyXrI/9wjEgSlwGdrPcBD9Fc8OlZWjhmHbFTEhrNVY8yrlI3+1jjyyvJ5LVr:7eY8yrlDvJ5J6XM7D","tlshash":"3ab47d4cf695783ad3f65490a4d64404a26c0768e01888f1f5bcdeb617b6ca2e3b7b7c","size":521080,"data":"","first_seen":"2026-07-10T15:11:33.223414Z","last_seen":"2026-07-16T03:04:08.64226Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/ethers-v4.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e66b864a27c5961a702e18683961608","sha1":"febc146fcf4c2d021f8635670ce4b2f35232e8e7","sha256":"2f426ca96f459f9229cf53665db2de4ec82d15ce49f767915378d87f733ccf9a","sha512":"917e5aa6a7aa64f2dadfe49152f1f6f3107cdc8bce974ed47e364bfcb060267081cfeb2f7cecee4a458828ed822ee9729d97d1bc2f8b47335553e1925ee4eecd","ssdeep":"3072:IMVv7CFGHyjUW15Co8psvoZ0pDrDQciPOP24fuayKqlKT4D2no:IvBfiqDQvPOP2TaytwTg2o","tlshash":"c0541b8472a0b062939629a4142f200bf27bb92d588d046cf745d8f77df99c99a3bf35","size":303580,"data":"","first_seen":"2023-03-07T14:42:37Z","last_seen":"2026-07-12T21:07:43.927297Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/web3provider.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd0acbd0f232a69f443beec9cd608bf","sha1":"1bbb9cee94841cece182da632767fa43970eb013","sha256":"54335e7705b99ad9f87bd7296dfe88f6c8b78f16703f9ecc27e43a62b5be765e","sha512":"e632544468f0d6d6e6ff8dade483d70f2f3ba38dc222a1e7f1c1fdcdb7d2a1615df52fce2d909ff654d71b942306a50d1e62fdf430628e527e70ead3cc6dea68","ssdeep":"6144:W47GR6PGawV6G7MzqnTaO8V4bHEzQva4qUY2OhwznWoxACNvmsZ4KDGAmq+8q+2Z:XGwjw9nHAamsZ3GAOqwJGPv6","tlshash":"bc15f984b664b061839a65e0043f540ff27aba2d780b44bcf654d8f6bcbd989553bf38","size":955210,"data":"","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-07-15T19:55:43.253962Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/clipboard.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ada63b6e3a8a44f2b90b59ea02bcc76","sha1":"d95e207a62c5c223610cad1b3a8e01ac96a185ad","sha256":"6a570be3a0d236133803873c360529709de838739848397c76c9186ff6bf3bb0","sha512":"d9f26d0c63d1f4a7397d1e3ef622d6121f55da2c6685a45aeb647e53a32cea0ba833482630cb9b46a0ef25bc68c8c820378b8dbf8d3566956c2e114dcaad1269","ssdeep":"192:YCHX4U7153pB7BoWsBwuLJoHu4wamacW/C8ZU10QkAVJNeSjSUzo:YTe36WsB9LJqwPVWacJQnjSUzo","tlshash":"95229658729071b196e760a9513f424bf332a469609a80d4b239d8e1bdbcdce5427f38","size":10488,"data":"","first_seen":"2023-04-08T20:30:18Z","last_seen":"2026-07-12T21:07:43.924765Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a399f5e88b3326a934fd6d6cc26c17e6","sha1":"edf7b3780c96fb8558236f673e8d094b6fcb8033","sha256":"220760f32dae60c534a24c99e96b36644f07679087bedd28e23db064763f5d26","sha512":"1fd166dfed8cc32f7d2ca57fac56ab7709f44dc1203c26505962b292ef4c0030f03ed129d8574f76e81da05dcdcb5bea29d1b7beadd624c20115344d60d22333","ssdeep":"","tlshash":"da800082a33a028002c8c0000cc80f022030082c02c0028cbc3880e000aec8820280b2","size":28,"data":"","first_seen":"2023-06-13T15:00:14Z","last_seen":"2026-07-15T13:47:03.33149Z","times_seen":8580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/bignumber.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","size":18565,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-07-12T21:07:43.946693Z","times_seen":809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/evmchain.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"103cf7a3766e010c9499d24721aaf984","sha1":"ca4e27f04aa5be91c32e0942583f39bca5277a1f","sha256":"d93c05813c158faf533a332c1b49f2a9f0432e0454fdefd1a2c9f11428b7a4e9","sha512":"373140cc684cfd8e2aaaf34a7da1e0a5f4bffd39a86c6979203068f9e2991f33be45968c05076b2d06042de30952e9076eb054c27bae0d4d5c91f94db5923b67","ssdeep":"384:3LyedkdCfFDM33MPH0mz7Cb4h/iUJbstZ4xWXZrTOHnf+RJvDqvGKifPauiy1Bes:SCtC8bh9gWe3FptN9Ra6SAzjQiKTsDn","tlshash":"daa2d9f3d354a98e8b7990cc1ce93719c1078c89c45e41feea964aded8f6067a119f23","size":22657,"data":"","first_seen":"2023-03-07T01:24:55Z","last_seen":"2026-07-12T21:07:43.910209Z","times_seen":707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/qrcode.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-07-16T18:49:16.082101Z","times_seen":65026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/abi.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7686cb141a314863e4225a0459e04918","sha1":"d0c3408a5a3c1f7db38f9796eea2ae6d31f707d1","sha256":"239eaf9fdf247ae60f252352b6750733a3270b84075c455ad87464a935c15ac9","sha512":"bc8a2a470e2eac3dcfa4d78928685a2c49011e061f76efa494467cd169b7215b8c720d28645c7fb9fe7778ddc91a812fed8968291a80fc06ac307f53e647fd2f","ssdeep":"96:p8OOjUOj8lhj8VLMj8eLMj8HLMjMRLSOjtOjylZj+zjMtLMjUjVJMjqJntHeHwIX:AI+Z","tlshash":"a2a160b6e42e9c874889269419e90613756041a38ccdad037a9c463d5feec2f947f71f","size":4831,"data":"","first_seen":"2024-08-21T07:09:15.373416Z","last_seen":"2026-07-12T21:07:43.911345Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8ed4b65007655ee40f3a0458aec31e5","sha1":"f27904d1efec760f689791b3e759ffefb8b5dfbc","sha256":"d04f4462c6dd9d66c10c7dfe07ec4709dcfb5990c22e8ae012b8f8d84458be36","sha512":"8b2a06e4ec3b51b56cbe7ca5621002a1e4728763339f9fd9a1844baff58c43cb17fcf389bd7ca4d7ad69e80eb28252f68d8e6fff388a4cab1b9cda6087d17c3f","ssdeep":"","tlshash":"a2e068c260a6294c02208016304ac1031bb608729ec149612c4c67a58fb9f4bc46e859","size":348,"data":"","first_seen":"2024-12-09T08:47:24.134165Z","last_seen":"2026-07-12T21:07:43.976492Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e66c76ab82594522b7535abec2a1387","sha1":"98a560567b0ddec316e7aa4bf2d5b365abb963b1","sha256":"3923ac7eb007ca4928962132b0f0c04f85072b24177d5aac3cf9dc3ee92b6e3d","sha512":"cd4f9c7b424074dba161d333a664b3593ba3a2526eb703f525314959f8df480fa9ebbba8a66bf7fd84a10b65d89c87a61a4e505b5b612fb02d86778e86ada6ad","ssdeep":"","tlshash":"7d810d5bf1f6542101b370288f2f6145b5b2605b2a4adc18fe8d1bd84f9da7dc1a6b44","size":3974,"data":"","first_seen":"2026-06-25T16:51:49.055644Z","last_seen":"2026-07-12T21:07:43.977425Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05b585efc694396d763545bfce12740f","sha1":"c6d10db466e07b479ae7e0797d0cabfee11a338f","sha256":"931f448178fae44e75b503f51b86e43ec779feec4ee14d4b0a88a635ae00740e","sha512":"1dee6df934d35d60f65a865750377da777fb3b64c31cb936a7372f3d8867cd1d988229e1bc424a2fd978dd07f95fb02582784ef683c4913dd007b6f5739e2b18","ssdeep":"384:qPY1s8o13dl3sDPU32ZPc8xp5cubTRUe6BUofhQY0LVnV:qPOo1Nl3sDU32Z08pcuPCeV","tlshash":"41d28304b5f414151727707e597f3089a978b10b010eee44bf9da6e08f9ae3ae9e37d8","size":30749,"data":"","first_seen":"2026-06-25T16:51:49.05655Z","last_seen":"2026-07-12T21:07:43.978554Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8bfa10843436c3406e4f85584a6f89b","sha1":"9985238b7608916579823e64b24b0bcc32ee4e5f","sha256":"274d9cc4c9811d5393f22e5ce0fbdcc4bd891eac252e8300f2c6ca8e802cd58a","sha512":"9ac168bafa50b95643724f59cf5adc8fe1c93df03ade4a9dffafeaace1f6851935c33579daca3443a4e6e9c2e562b151083cfc6792382bc02b782e9bbe7724d2","ssdeep":"","tlshash":"4401ff1971eaa8200877306c8e6a12462422a08b175dee2cbf5c22d4df19bbcc7a2306","size":848,"data":"","first_seen":"2026-06-25T16:51:49.057457Z","last_seen":"2026-07-12T21:07:43.979713Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-16T19:36:38.249349Z","times_seen":723689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b66c28c86f7a748ad292827e42dce41a","sha1":"28a917632ced237bd795c1281b11b8290cb8da17","sha256":"84636d7f6fa124325a937f89a84a68dc04da016f26cab395437e5bf20ccf6c52","sha512":"8526b687f02e998d64e6d51225d856c9c20deb61981306d199f3288e6f5db88b6f71e1b0b45f4d43e7086817a3b3c46ef4f4b29b84077f92af1afc1c79c58f19","ssdeep":"","tlshash":"6a11d0c87ba378356389446b70bf865bb6b21441680c8000d19fe4a57828eb4c737e9c","size":1088,"data":"","first_seen":"2026-05-14T12:23:11.012383Z","last_seen":"2026-07-16T18:58:55.647995Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f0d3975c955fddf8c4b49ebe568407","sha1":"7b559dc893e3a59fe77d9553a8af7d6931f2e068","sha256":"85a50ac089309670d7b46e44d1ef17ab132599486ba995f6f12d07f72f4dd191","sha512":"e28c1ce7e3b1b762886f98bf8611a0b33a157c355a760d83602a75df917689c2013d51d4e52faa14445af13ec9bb6eed797f96db1ebd6a8bc8955c90289f1bdc","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDi:fWYmahMqBDDAx/LANwntDi","tlshash":"507319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","size":79629,"data":"","first_seen":"2026-05-14T12:23:11.157843Z","last_seen":"2026-07-16T18:58:55.554677Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-07-16T18:58:55.571312Z","times_seen":2633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/js/lottery.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"963d305e29398f9a04d9a3b457f76860","sha1":"a42b9f877bbaca04c8281adb273bfa0bcbf90942","sha256":"7930fcf9de55ffdb0d0ec986eb9c35c3e4c2a211531e4f8b9f0f89b2adce106f","sha512":"366accf3f6990c4497654dfa20ebc89cc6612446b814b60cc7a48829654e2636c65f50c2b42c1b5a6cf2ed9e190d40bce34a091b68c98278d5013d76c8e1698e","ssdeep":"","tlshash":"7541520ea8f719b1597330f88abf1151a161c0231208ef28bd0d22d84f4a57d97a67f8","size":2026,"data":"","first_seen":"2025-10-07T03:26:06.193078Z","last_seen":"2026-07-12T21:07:43.948928Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","size":109345,"data":"","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-07-16T18:58:55.657247Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-lang-zh-j7RCDKZ9.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"598494eb8233095c89017efbafd0ce8c","sha1":"d82e737ce18bed0717f202ee7cf72d047e498ecd","sha256":"08aafe35e22d7c3c74c00c632c43fd51d832bc469251952355daf7787cfc22da","sha512":"87c3d4a6dd85e87a62236113b81c34c88dbe60c3e5fb872a9a1931a942d541011ebc6fc6b6c288429b023ba9720ccd971e2d23c6f83f6333e51d6868b1ef1942","ssdeep":"384:cZkpgCp57gBKejSGeHg5+YJxmgM1LKRN8VgsoUGLoZQOuHrhSGXvIB0D0Ru/:2TCDUBKPA5XrhHsoUIooHroYvIyD0c/","tlshash":"2552413e9ae2141a24ff41dcec85179e5ad1fe05200bcb6f95bcbae1b301451e59b339","size":13562,"data":"","first_seen":"2026-05-24T06:20:46.130364Z","last_seen":"2026-07-12T21:07:43.960729Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/lang2.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0398e9f55ae262185e6f557310fb7f57","sha1":"4b8550bfab0b6d5580ab6d4d08a67803c5c4fd0c","sha256":"a68e959b1440a8b83622828a41ecc964ab6df45e29625eed297cbefe1fd394a4","sha512":"1aa92c1afd1d7dd5ea4ff8c61345f753ea5ba1a0c710c2a5d63ec2afb3b86fde5805997994ad22f78ab69512fb4ee7c53575495d3e437e0c714678bce2aad627","ssdeep":"1536:IV+5ysn90a77kA29BtcF76OZEcsE5hRwf:IV+5pn90I7kA2q76OZlwf","tlshash":"4f5371fb458b1485244e720ca5cd390ba52941bbaf1632453bddb1393fce09ec5bab6c","size":65292,"data":"","first_seen":"2026-06-25T16:51:48.982956Z","last_seen":"2026-07-12T21:07:43.961301Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_669122_690097_1774980133.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1729fdad8d1bdbd6f190fe5df0ce7a8","sha1":"e15a0134250931c900a84ba98c319836360357f2","sha256":"7850add8bf178dac6e8a988bd1d7bc4d47ad7c294bcaf98307fb851c4cf6ea0d","sha512":"bf98e085bd335fcabdd2f7594be2b16445d856ddf7d6b97182e08ce4f9c1f947014d196ba2b3736fe8886829982c8bd6625526533eed84188a88fccb39298ee4","ssdeep":"","tlshash":"0a11eb471c63a478bad5727b8b3f88ad3989a1433004cc10bc8dd86c2fd09e20e5eee4","size":1009,"data":"","first_seen":"2026-07-10T15:11:33.227164Z","last_seen":"2026-07-12T21:07:43.970261Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcbd9715a5eee59dc08a7f7694f22db9","sha1":"38149a674151ba36f63cdd12543cdbb9d7f7dd27","sha256":"01d2361b054bb0ea43dc527da376197fc3ea0862e8c3ddb1d376a41ab118f28d","sha512":"8d05a492ee0be9137457f98fc59d846c0d032f6c3b1e4f6da18692961670ab9a62cfc82e06ada7fd45282cccba007ff51e00d96bee2099d027c935dc260453e0","ssdeep":"","tlshash":"7da024f737c314001511c37400473d545431041035dc4f0c404c7d710555170c337d0c","size":80,"data":"","first_seen":"2026-05-14T12:23:11.167523Z","last_seen":"2026-07-16T18:58:55.679895Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6b9cd01afb341f5e05b189891f6bf4e","sha1":"94f03126226649f985acd9278b8dfee9d3568956","sha256":"d37263fd478bbc9919c41d1c8204a82f4624547944fee294077f3ed668ccf769","sha512":"c59368f2f47366f93e007de29dd29620414e152a0d9564390f115faf03899d9a62e4377a30519d4c81026af188c73b8f00fe30eef1c48b847d62ab43ac5e459d","ssdeep":"192:ekWYdcrFPx5kQdI1p3MmWWLSR2E9C7mygdj0XtCuwxLijSy8Tl7Ds6zyRZpk32BK:jWYdcrF55i7WWWnyTMAjP8ORZpk3219Q","tlshash":"6722f81a3832697992b80c9460795712b5ed27133006d4f0f3acce7eb5a1f8782f9db9","size":10466,"data":"","first_seen":"2026-07-10T15:11:33.172132Z","last_seen":"2026-07-16T03:04:08.641594Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","size":52936,"data":"","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-07-16T18:58:55.648473Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/w3model.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aac4569bbff2c557800aa919fb86114e","sha1":"d19621d1d38e488b417c28b3efd879b481566d80","sha256":"5851c751870f4d385689f84d0e346c92234a1c7776f98099222eb30565370864","sha512":"c7498c4cbc7f499a907eadf8de3895070e007505654dd31579067b2de7075a0fb5a1acf3b869d68e0e31ca3bd3c5b99c27a14e6cdf5401d5c25e546c579753a0","ssdeep":"6144:g76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:O6d9DZzaneYZEl5+qQ8zztN85","tlshash":"8394aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","size":429874,"data":"","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-07-12T21:07:43.941583Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/layer.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d128fbe65fa17f4ed6a5e2d627278a58","sha1":"9ea612138bca130087bc9fa8b0928a3b22fd4260","sha256":"d1375ea074b94b3a69861b9c7bda27ca759f4770ed631f8a6c663fab16c4c21a","sha512":"315f4427bc5aeba724074e1ec0e12df9b6d30985c7f5758af9b9ba37f51b81fa7758cb737b145fb67f82a198af2500671d2f83bc7253a62dd11d04cb39308179","ssdeep":"384:BxWCih5o93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:BxDiW3i0QtvTKiFSb2o","tlshash":"32a2c76a754034976323906ad10fba0b31b11d24d7078128f22bb4be1dbcd99a2b7f5f","size":22696,"data":"","first_seen":"2025-10-07T03:26:06.270688Z","last_seen":"2026-07-12T21:07:43.919851Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/scroll.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf35d07d8e8152817269bc6fcb32c80c","sha1":"115bebd455b9bbc3de9a9d23ac1c35c210cdf47b","sha256":"b9743de589958ed4392a78726e1432fcc552687e08385ec1b8276de991bead7f","sha512":"52c51160f11ad2c0dd37e997923dd07b9e90888e810f66782ad9283f4b0b4fa837341fa21411dbd7297cfa77274ecb05b91c36ba22ad872099ecf635701f9d04","ssdeep":"","tlshash":"53119bf4ff5e209a6532306784af50c9782e94339c0648277d9459f94cf9d0ca27af39","size":1032,"data":"","first_seen":"2026-01-18T14:58:03.467977Z","last_seen":"2026-07-12T21:07:43.927805Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","size":50154,"data":"","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-07-16T18:58:55.626608Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/web3.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50b331ceab5cb032bac85cf6eaf4c513","sha1":"9b4f1751f59e6fb18b266d96adefff3b32ecdf48","sha256":"efeff3f4191acfc1a20fef7e327521c4a696edf0dca7a2d86d4045a49a5cde17","sha512":"4bf3be807e6ccecffefdd532966d79269fc9649b08a169694953304fac804b8461ee46b36915314b3141c27a84dbf8c1a6172bef1a2f4d025aa29884640ce2f8","ssdeep":"6144:9ggS4Whgg8WMRelCSJ70OSJeXiqP70X+C8kSlXnfCM7XZfcwJ4ywB8b2IRQFwfCD:K/K+C8R67GFCamsZKpams2JKAF","tlshash":"1c55d9c4b6907061c3666a90442f900ee33ef96d384d016dfa57ecf77cb8a89552af39","size":1337884,"data":"","first_seen":"2023-04-20T20:54:22Z","last_seen":"2026-07-15T19:55:43.309251Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"973e831379b94d060af9b2e9bc78f49e","sha1":"83448e2204ac7f3afafeb07ffa3d2b92a7e31ce2","sha256":"814148cbc3bea44c7786594a53ca13a6326ad08dfd73abbb11e82c285a15109b","sha512":"45e6d9b25a24e2c9a1c34173df38587cad6d7d85753f8211d4e0dff58e73be9e4cb99724024ead994c6cef70aaa958f9f15fb628bc9d83a52b39ca44844f8080","ssdeep":"","tlshash":"5c90027528c2201060173256547658e601308030d4588d51010498a1985543156065ac","size":49,"data":"","first_seen":"2023-04-11T21:45:58Z","last_seen":"2026-07-16T19:29:48.615565Z","times_seen":36760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/jquery-3.2.1.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97162,"data":"","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-07-16T19:23:57.988292Z","times_seen":7876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","size":19114,"data":"","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-07-16T18:58:55.611732Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj60 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[0:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj61 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.7445985768780561] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:xuanxiang] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object] writable:true] context:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj63 class:HTMLDocument contentDomReference:map[browsingContextId:3 id:0.27875119148797567] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[isConnected:true kind:DOMNode location:https://rndraac.com/ nodeName:#document nodeType:9] sealed:false type:object] writable:true] length:map[configurable:true enumerable:true value:1 writable:true] prevObject:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj62 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] selector:map[configurable:true enumerable:true value:.xuanxiang writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://rndraac.com/assets/js/lottery.js","line_number":6,"column_number":13},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj64 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[0:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj65 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.9526961878876349] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:nei] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object] writable:true] context:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj67 class:HTMLDocument contentDomReference:map[browsingContextId:3 id:0.27875119148797567] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[isConnected:true kind:DOMNode location:https://rndraac.com/ nodeName:#document nodeType:9] sealed:false type:object] writable:true] length:map[configurable:true enumerable:true value:1 writable:true] prevObject:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] selector:map[configurable:true enumerable:true value:.nei writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://rndraac.com/assets/js/lottery.js","line_number":7,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/lang2.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.091Z","timestamp":1783890390091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/lang2.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-10398\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyiufeDjvg7cMgsdHP6xmgPhwB9y3wd2B3XnwR4VaUm%2FDOBn5YkIjvACqZiacUYkvA8RpXFmeQFexDsuC7tU%2BwR6XUUIaTAYB%2BTE4BN7T%2FAo2E5B3Hel6mztSGEN%2Bg%3D%3D\"}]}\r\ncf-ray: a1a3031a1fb5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66456,"size_decoded":21584,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (916)","md5":"0398e9f55ae262185e6f557310fb7f57","sha1":"4b8550bfab0b6d5580ab6d4d08a67803c5c4fd0c","sha256":"a68e959b1440a8b83622828a41ecc964ab6df45e29625eed297cbefe1fd394a4","sha512":"1aa92c1afd1d7dd5ea4ff8c61345f753ea5ba1a0c710c2a5d63ec2afb3b86fde5805997994ad22f78ab69512fb4ee7c53575495d3e437e0c714678bce2aad627","ssdeep":"1536:IV+5ysn90a77kA29BtcF76OZEcsE5hRwf:IV+5pn90I7kA2q76OZlwf","tlshash":"4f5371fb458b1485244e720ca5cd390ba52941bbaf1632453bddb1393fce09ec5bab6c","first_seen":"2026-06-25T16:51:48.982956Z","last_seen":"2026-07-12T21:07:43.961301Z","times_seen":13,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393024\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.032Z","timestamp":1783890393032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"OPTIONS /chat/chat-msg/centrifugo-token?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393024\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://rndraac.com/\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a3032c9d3c568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T19:40:23.978724Z","times_seen":17296388,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":7,"connect":14,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/gnosissafe.f0966483.f0966483.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.351Z","timestamp":1783890390351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/gnosissafe.f0966483.f0966483.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-14d5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6Kejc%2BWRL72NYtOUaF4a2JQiMAqcV0WEfGZO3%2BmkI%2BhOT8j7ryaVEyelJOItJCvykwV2oDnLapKABw4TAW7dR81dSTCDd0o%2BoN9VSNajMfw5zsLj0XbY%2B6GAnFKNw%3D%3D\"}]}\r\ncf-ray: a1a3031bbfc8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5333,"size_decoded":2663,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f09664836ed86e13225d8afd1bb502f0","sha1":"622dff92ecdf8cf78b618732daf2582798c6e4d7","sha256":"ebdc44a5596027ff8e815f4ecdc3cf9384e4a75a5e9292bab16822e989f706dc","sha512":"6d0377c57f7835ab7a3997dac6da26f35a4b9ed015b53f589348df438c8eb7fc88964a2ff78da0021619b73fcad079b9ed060d560db10d1c8e23a5776f8d9be7","ssdeep":"96:LaQ9PKn4jL1kMNJfj/WJbWnveWiGhotyUR6tgUzh2mxnszY1J1yAhQqlQYsEWF6g:eQpKi6MCEh2R0tVxnsMhngSzWou","tlshash":"cbb153cc6696c6b8f08573f8cb262cbaabd74ec4a040c46c97e61c46dd9106edc64dd7","first_seen":"2025-10-07T03:26:06.242712Z","last_seen":"2026-07-12T21:07:43.930316Z","times_seen":21,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/safepal.3547235e.3547235e.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.356Z","timestamp":1783890390356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/safepal.3547235e.3547235e.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1488\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBvZbQB9nuOwZ8r65A5PeWt70NU2UXaU1MJEc98lhQYg7k82BjRH1BLhJpC8E%2F1cUhMhW58xvoPkpUyWcDxfhH6q0XiRcKxnFaKvmp1vDEWaZc%2B8GwgHBC7%2FndOf5A%3D%3D\"}]}\r\ncf-ray: a1a3031bbfcc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5256,"size_decoded":2930,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3547235eb5743afe4bb573e6b9f38f7c","sha1":"3b58fdc173ea7a388885e1057482795813737bd9","sha256":"898d656013f50b4148c5edc9a77620c7310b10c790e0b761dbab0c192f49a864","sha512":"c5aa003a7707798a1adfe9501c358f8e7528a100f28332afa9bc4bcfe7608bda589adfbf6dc7c929b5bd742ee9a0ff5061483bf229078207a2005d41e3d06b5c","ssdeep":"96:LarJYxqhnzuzEKaHaPvS1TRvt3ODsJ4rlzbHHyPiJUY6SJ/lIPx3e/KHS41JHRTc:7EKa6PvS1TRV3OUAlzbHHyPMaSJmx3eP","tlshash":"45b1838e6791c2fcb44171f99a1364a82b845ca83d81c9b6cff61c2ad5120aca873cd7","first_seen":"2025-10-07T03:26:06.25927Z","last_seen":"2026-07-12T21:07:43.907902Z","times_seen":21,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=51c2691d7e362540b4505d13a980dd55\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392204\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.213Z","timestamp":1783890392213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=51c2691d7e362540b4505d13a980dd55\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392204\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 516\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":516,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlnjJfnojyh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Fl2s%2FluFjI5R5IADjl265IAlayh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWfQmvfQu%2BsqmAP94Wyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHpP9tbr3u4sCyi0qH41naVfSc%2BPN6hMhyjI5R5Mev8l5vqlA65yG4pyGIv1azqrnmvrNHbPnzvrCyiyGIKsncWtqHz\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:06:32 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a303277940a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":582,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-07-16T18:58:55.658274Z","times_seen":2520,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":195,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/usdt.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.066Z","timestamp":1783890390066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/usdt.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-480\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4Y7Us8Wo%2BNMN4W%2BzWNUR5oeq7VGAB3merA1JMES03YvWRW56e2IWkrsKpyNR%2BqyhZaiZ0tMXyEijc91wbU4PLPbsqtBZGF827zGTeblJGdHvbbOPgYj8StNoNChSg%3D%3D\"}]}\r\ncf-ray: a1a30319efa5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":1912,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"5c93c13b17ff91e4076e941d98ed2359","sha1":"1644b78c16ffa8cf4e7cb2f46553ce2c64b3a87b","sha256":"8aebc90206ac845cb92de57670afb95018b7555f7feb7cf763b1afb684363923","sha512":"a91b8983967854dfe841081185d3583ab0086f1f4e4bc758cadc1cd848e53ef68d779c985376d948819be49774ca3b647521ae5968bc55e3a55a08cfdf61a8ed","ssdeep":"","tlshash":"1e21b95da508a581f16a4a48821fd335779d5c84da04e2193d1032acce78d204feff5f","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-12T21:07:43.956427Z","times_seen":54,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/web3provider.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.081Z","timestamp":1783890390081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/web3provider.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-e934a\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eoxu7k9%2BPeYtCqzNu2FIa0lWKlUqAnOiFMxOclox3Ip8C5UmsW5vMg3WRHemYXylichp2PkCLIZ1NXjaWtmTChGVCc91jXy71RRc4R%2Bp98SRMhPp8CPRq8xYZYP1Sw%3D%3D\"}]}\r\ncf-ray: a1a3031a0faf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955210,"size_decoded":288120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64169)","md5":"ecd0acbd0f232a69f443beec9cd608bf","sha1":"1bbb9cee94841cece182da632767fa43970eb013","sha256":"54335e7705b99ad9f87bd7296dfe88f6c8b78f16703f9ecc27e43a62b5be765e","sha512":"e632544468f0d6d6e6ff8dade483d70f2f3ba38dc222a1e7f1c1fdcdb7d2a1615df52fce2d909ff654d71b942306a50d1e62fdf430628e527e70ead3cc6dea68","ssdeep":"6144:W47GR6PGawV6G7MzqnTaO8V4bHEzQva4qUY2OhwznWoxACNvmsZ4KDGAmq+8q+2Z:XGwjw9nHAamsZ3GAOqwJGPv6","tlshash":"bc15f984b664b061839a65e0043f540ff27aba2d780b44bcf654d8f6bcbd989553bf38","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-07-15T19:55:43.253962Z","times_seen":487,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":559,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/dapp.f3998a48.f3998a48.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.386Z","timestamp":1783890390386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/dapp.f3998a48.f3998a48.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1511\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yG4hf6D2oNewPkeg1IVaU8WCD8TKwHLz09Hk52hVtbhU4UQnx6eQ7c2qEbGrVzGFQ2mqlQWKJH5GRZOuhuvdClm6b0CW8dRxTTgzo%2FvGi3olbQRxqWvFXG5eFJvjYA%3D%3D\"}]}\r\ncf-ray: a1a3031befe1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5393,"size_decoded":3005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3998a484b54ef6ffb419ea20fd53c22","sha1":"456bd44de0b65733e941c22f6a9e5bbb57f4d2ca","sha256":"df8d28e1d6967bcfd6b9da46542d8915c6a41d864b155cf931638309e43d0187","sha512":"3c7e55e6b6d5de5e7edddf4fefd4b7693090a37d1cd70722326bd7b5c1a3417a3777223cd83d1cf5807c3a505c2ac6f110b8672b35a41e6d8470c93641057f2d","ssdeep":"96:LgjHWiFf3xW4bBaz+pBPM+lu9t/UGGa87se1C:kf3xWMBaSpB0/tUGGa8ge1C","tlshash":"dcb14495276ea2a8b010a7e1830794bd7c86ece51de09871c3d02d19fe9709e1bc29e3","first_seen":"2025-10-07T03:26:06.290391Z","last_seen":"2026-07-12T21:07:43.959223Z","times_seen":20,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/huobi_wallet.c6837656.c6837656.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.400Z","timestamp":1783890390400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/huobi_wallet.c6837656.c6837656.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1775\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBECB4GtXco66KobViP7MjkFUi2KwPE0FeIlGjXMxZsMsieRbuPM0KYA6wdjTNaRbrY5Z37Cxx3FqXEYgJ5vK%2BaDN9i0fZmgoqUbkTy8RcwIE%2BEkKGViJQIM1JLJzQ%3D%3D\"}]}\r\ncf-ray: a1a3031c0fe9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6005,"size_decoded":3137,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6837656c6ff94a6255627b34c606b11","sha1":"dde6166b26e956da57efb73e2a28c6717dcbf62d","sha256":"1cb80613517f8fed11f69222c83bf4944be8c006ab55dba1e10eb561d7d28091","sha512":"a09cdbd93522af4d4c833f2be574bef1fa1d43b4bfa4f5d045ede26b04e730e7b1ff2e5a1a87c0909da2fca03ced439ab609606ab3cbece09c9d71e29d3b2af0","ssdeep":"96:LPql1FWhthG3pNSvqGsFx+KkhX5ehmmXYcHOt4ioEVq430iWfEv:bqjFWrIYyLghXmHI4ilVtDv","tlshash":"f2c1b8cc7ab897f9f002abbdc32614783a22b8eda9538814c7551e1bb46152d4c68cdf","first_seen":"2025-10-07T03:26:06.176316Z","last_seen":"2026-07-12T21:07:43.91796Z","times_seen":20,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.367Z","timestamp":1783890391367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 03:11:20 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A5062D8108AF53434B3FDCF\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15204050908943186341\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: tmwoyG96dIrSkoJ+QtzkGg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: _RF7NMK36K-ApNy2Eoqs2jYKkOjp57sVF1uYnRqMrOf05grawlOPpg==\r\nage: 237311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1088,"size_decoded":1261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1087)","md5":"b66c28c86f7a748ad292827e42dce41a","sha1":"28a917632ced237bd795c1281b11b8290cb8da17","sha256":"84636d7f6fa124325a937f89a84a68dc04da016f26cab395437e5bf20ccf6c52","sha512":"8526b687f02e998d64e6d51225d856c9c20deb61981306d199f3288e6f5db88b6f71e1b0b45f4d43e7086817a3b3c46ef4f4b29b84077f92af1afc1c79c58f19","ssdeep":"","tlshash":"6a11d0c87ba378356389446b70bf865bb6b21441680c8000d19fe4a57828eb4c737e9c","first_seen":"2026-05-14T12:23:11.012383Z","last_seen":"2026-07-16T18:58:55.647995Z","times_seen":217,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/table_logo_1.8c4cc969.8c4cc969.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.071Z","timestamp":1783890390071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/table_logo_1.8c4cc969.8c4cc969.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1627\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wq4wtCta74%2BrprFDZ9jZ9OP0vLsZLu5Vz%2BeTDxC0Dx8d1jmAnP47pvICnr2aRkn01oIx7HyGZSuIbq%2BL%2Bez2CSLGcq%2FFyWeRwSJMo6jlzj%2F0mcbFy%2FNeeDFdDvICHQ%3D%3D\"}]}\r\ncf-ray: a1a30319ffa6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5671,"size_decoded":6440,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"8c4cc969520be3717da2d9a10089840d","sha1":"f3d19cda7d5ba39d9d3104eb606b54d35616f25b","sha256":"7e9dec373babe17c9be30c9fe9aab084ba863bf587fa3837b8aeb2dcce4a53f4","sha512":"526c6f484340786269bdc92322b43cd73513938a0a58674f6e75ea7997f0fed4ff690ccfab7341f0f8e1dff0694c0f7c12a5d872ea696984aa0f7c948ed940d1","ssdeep":"96:xkyE9W44IMuSnFiIbhEgPO3FzjLgLW74PhrTz3i8uskDlyplkTcPro:5SW43y3bhhO3BjELW745OFSkTcPro","tlshash":"68c18c4a59579ce43f4c12a57288462137bcf0c91766e80065b2e1afdad9ece6623be0","first_seen":"2025-10-07T03:26:06.184906Z","last_seen":"2026-07-12T21:07:43.943191Z","times_seen":17,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/layer.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.088Z","timestamp":1783890390088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/layer.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-58b6\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BI0ZOoCjf1uDmrqh0EdHBeKIEpKX%2BQ%2FnXvrX1HFvn0c0VtzeuFd0gFzSEMtmNt3bkEnUFQQteElyvzqAeZe6DDDQ3scg8%2FONpxLgkJeZFlYil5ilVFF%2BCHT2iLLT5Q%3D%3D\"}]}\r\ncf-ray: a1a3031a0fb3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22710,"size_decoded":8632,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22638)","md5":"d128fbe65fa17f4ed6a5e2d627278a58","sha1":"9ea612138bca130087bc9fa8b0928a3b22fd4260","sha256":"d1375ea074b94b3a69861b9c7bda27ca759f4770ed631f8a6c663fab16c4c21a","sha512":"315f4427bc5aeba724074e1ec0e12df9b6d30985c7f5758af9b9ba37f51b81fa7758cb737b145fb67f82a198af2500671d2f83bc7253a62dd11d04cb39308179","ssdeep":"384:BxWCih5o93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:BxDiW3i0QtvTKiFSb2o","tlshash":"32a2c76a754034976323906ad10fba0b31b11d24d7078128f22bb4be1dbcd99a2b7f5f","first_seen":"2025-10-07T03:26:06.270688Z","last_seen":"2026-07-12T21:07:43.919851Z","times_seen":17,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/trustwallet.c6f5bc8e.c6f5bc8e.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.368Z","timestamp":1783890390368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/trustwallet.c6f5bc8e.c6f5bc8e.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1c35\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVTLiH28zL80XREkVFaJuG2lDI%2Fj3WixGoDgW6UBFpia6dhChMrmwuVcvki6avUOeQhRZz22GbbbZ26HRMMQFqT4EwDK6ZCVBC%2F7Gktyz9iZGLx7zpG1MXbM29v4wg%3D%3D\"}]}\r\ncf-ray: a1a3031bcfd4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7221,"size_decoded":3820,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6f5bc8e00aa0b451adadac30f696305","sha1":"ce688c85dd9fd7d8d5fa150c3fbdb76c7d22f43e","sha256":"06637c493c4e3b566c6b186ae6581ba1884b2b277fd37161407937ef7d87253b","sha512":"5aa917db29a92b1b8383445b6416189e19e5e8ceae00e432bf5f2334beeb2f7b30e45dc929cdcb5e939cde70e27d9094707787ca8dbd5b549a2220111a02622c","ssdeep":"192:LcKJuR4ER9jAC22HKDNniHrGzGMCbozAAlkuX:IKJ0HzjACxqDN8GGMCbozAAquX","tlshash":"c6e174ceab130778f141b1fca61248b93e82efeabd20d6a9c7a40c46956516c4d22cd7","first_seen":"2025-10-07T03:26:06.201321Z","last_seen":"2026-07-12T21:07:43.905555Z","times_seen":20,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:06:29.379Z","timestamp":1783890389379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Jul 2026 21:06:29 GMT\r\nset-cookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 23:06:29 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o411JIs475OxLjzDx%2BrK5bLhLK8iPLckKXXEBKhD7XDybQ569FJadeavX9qV1GUg3u9qIQA7DmXdTILUjZrWvCvqHzk427uQkX37V9nv2cUQUpTybs3qXyXkO2k66Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a30315cf73712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":207373,"size_decoded":44320,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4ea99baeefc5e95ca461054a16799911","sha1":"b52af943344c264fb0e2f53bc854fbbfaa6cd737","sha256":"9ee347da134f55be2e0dfd2c8d2cb6bab5963318dc90a5d17f2e8927f75f2d34","sha512":"93306c9c3d8e3c18fe04853f153448a991612ea502b4af22b18be5f7afa783dd8eacd7ecb19b2e746a1e106836eb9403bd4bff45bd5dfb5c2a575827577ba1d9","ssdeep":"3072:1czETLaTzBKIGfqvbwa0HZhTPkrmQOiroLOKlN0z+btYc:HTqAI5vbE4z+btYc","tlshash":"0414a550b3b514d71077e4e1a9ba2d5f2a20f307e1055e843a9ca9da1fc7e72f4932e8","first_seen":"2026-06-25T16:51:48.95091Z","last_seen":"2026-07-12T21:07:43.912558Z","times_seen":13,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":397,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/table_logo_2.6cda9012.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.080Z","timestamp":1783890390080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/table_logo_2.6cda9012.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-217\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GvQ%2F6AQ3eKo77yNGMRbnndsAn%2FfoaLCLudKqHdCbzHUrqLI2gW5ljEtGc%2FxP2H5TBFSm8gqqC%2FoTZfG4qokYB6gt8OsNo4d0FDwhR2AkK3ZkQwLPbmOP%2BPwwMV3%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a3031a0fab712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 535\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":1267,"mime_type":"image/png","magic":"HTML document, ASCII text","md5":"a33e2bbd1ec20760a65fcaae9e353fa3","sha1":"ab0f93d461fe758d3d693219c5a87fc5f343d085","sha256":"36948e71d1048a445cb061f0c0ca9d4b37c4f7849ca99575f2997f67f7af54af","sha512":"c860f13d64dbef4fd7521f302d9da093c0da0b5a588fd78ee51381f1fe0e02174e9b1696b240cbba75c54ce1858a26fd6f8e6be89d0234f488ce3e35bbfb33db","ssdeep":"","tlshash":"a3f0909f6f1b207f2e238562f4c311a9cf640a5bbbd924e28749011f72c904588f5fad","first_seen":"2023-06-11T20:29:59Z","last_seen":"2026-07-12T21:07:43.938195Z","times_seen":152,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/polygon_2.58c43a30.58c43a30.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.401Z","timestamp":1783890390401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/polygon_2.58c43a30.58c43a30.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-18aa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4p7GujRugirrUodzFJwV90XoaqrrygnPOXufqhVCGzShCrvmg1VovGtiVCHO49Ss5S5u3%2BnUXu2epze4u1vYJ2A1brDR3HQX%2Bw%2Fbmgb5ThllJGB7dI0eKdFWLkg0g%3D%3D\"}]}\r\ncf-ray: a1a3031c0fea712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6314,"size_decoded":3395,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58c43a30b560f393205402897ec27bee","sha1":"bff8ee96cc6e340c270a4e56c44d168c0b9790eb","sha256":"f5a9c80be68ab0f4f1b8dc8c5f8520ccf61bc25a9afb645cab9ba8f69370eb26","sha512":"1da1de7ec20dce504a5d61561fbf66d9286c3e59a8fa67b96dd58817182ec2aa37347da2b2c41cce307235a1f42f42b4dd5e6e59d2af25f54eaabf3fffe05072","ssdeep":"192:QAVKJyp/nWiA23QMqQHv1RQt5RoHodonTGLkoCWEEo2:FK2AkltQRoH9nTGIonZ","tlshash":"99d1a4ce67f15bf8f011f2b8d31b48b936876ef56922d829c3a95c16d26281d1824cc7","first_seen":"2025-10-07T03:26:06.286669Z","last_seen":"2026-07-12T21:07:43.965717Z","times_seen":20,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/menu_2.a814613e.a814613e.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.064Z","timestamp":1783890390064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/menu_2.a814613e.a814613e.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a3bbb22-bb\"\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5B8MjaNft%2By6KxImJVDgZBlNCcFera2rZuway%2F%2Be4S%2F2FiCyxfnM6%2Fd7mdj50hY2QzDqI6xJVVdzyKFC1PT7AHk6i6UDPhtPU9pX9oUZn8kQ8h6ynzCZuqoNe%2F3eA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a30319efa3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":834,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a814613e14b69f731068d0365d6ada40","sha1":"61b6f95dbdcacde05d107c8655c6872fd4d43d83","sha256":"bb762b87855427b868822805bffde274eb434cd3803ab5a2a80e502870a4ef4d","sha512":"252487049bbf744f61b33fba0873def5aeca3494e5b6e09600be6429c7b42daeabca50f4bbb42c72b4bd49d0c9f15b669be828a2497ab54983f19856dec442ee","ssdeep":"","tlshash":"9dc0c04f511c4e2cf215c600e3ac3d22847d1083018c00f9cc134030510d569ac333ec","first_seen":"2023-05-18T20:29:20Z","last_seen":"2026-07-12T21:07:43.926811Z","times_seen":77,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/security_audits__peckshield.17a6e4e1.17a6e4e1.17a6e4e1.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.348Z","timestamp":1783890390348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/security_audits__peckshield.17a6e4e1.17a6e4e1.17a6e4e1.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1ba9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3deL9PjcWGk1rRLRDildx%2Bx6%2FpnaK6cM%2FJr71ycQ5LeLFpvdfuMcQ8rt%2BpLZNAq5%2FJDDEvEeY7o%2Bzx2qGljjWXW%2BsTWFl0pJA2Fo%2BMkdqxk4cvvfjXwdeNRgZAPZLg%3D%3D\"}]}\r\ncf-ray: a1a3031bafc5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7081,"size_decoded":3901,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17a6e4e18e4b94902d4e4a446bf7daaf","sha1":"1cb133927c08d18185e6e2a6b5db264113912953","sha256":"a23509634cb6105cdd5fe6e6333e0a22305f2329a3aa2025aea192cd8012832d","sha512":"07760f8f8587a30fafcc85e0c78c854d0767174579fca197999b89def1f816c80513d66b4dfbee65ca4b61756604e31c3206d51819a911d593439abddf8ef57c","ssdeep":"192:/ne7BtCYd0S8drJRfjINruvu8sXzhNrr4/R:verC9xR+Trr4/R","tlshash":"c2e1e78033364cf5f94fcdae3e9052ba262514bfbb951015d4da39773e0b5c0aaa9c87","first_seen":"2025-10-07T03:26:06.230677Z","last_seen":"2026-07-12T21:07:43.938663Z","times_seen":20,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/bitquery.3647db62.3647db62.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.352Z","timestamp":1783890390352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/bitquery.3647db62.3647db62.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-20ca\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcmJCYoJQU%2BmudYsh%2F3d5JzhzslhduAGALXUK7xFY2c%2BR4e9nV6zE8awCYJWzfPxT7ODyzHcQd4dxOO9JJYnxmW84tXLOtu3j8lhZvi%2Bvm4QY4gKyjiX4b%2B%2BQxMVtg%3D%3D\"}]}\r\ncf-ray: a1a3031bbfc9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8394,"size_decoded":4154,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3647db629a4b18f06f992298bb23608d","sha1":"4be0e107de6f0298b6d4b6184d4eeb86de321112","sha256":"4bc1521371d37ab54e50b41b3b8bde27a03ec31f6d581c03e9ba148031054542","sha512":"ceef6d657e5b6916ae2f8039a32bcdd44634652935b85f9272f8e13880a83e69ea78f7b5b890d8863e44cb4abaa43c3df65707cf2aa3f8a7e2f1d0045e5dd54c","ssdeep":"192:PxOGmkvwYQ/MPaZMTB6pv2U0mTr4HQTOq9rwxlnC+SA57nq:PRQEPaSUDu+9w6co","tlshash":"9a02a4c567b5c2f8f544f3f84a1a9036bf5299d2ba23d4a983d50c0ee88141e5daccc7","first_seen":"2025-10-07T03:26:06.245143Z","last_seen":"2026-07-12T21:07:43.947274Z","times_seen":21,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/chainlink.441846ba.441846ba.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.382Z","timestamp":1783890390382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/chainlink.441846ba.441846ba.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-16fa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7C6BLoj7WcYN%2BgqTVcx%2FFKLn6s0j0Y4WQf4FMMeELKD%2BjF3iKaHi6ESBvk4vIVs5c2iLMUrd14YOFOyBmaISkeiFh6FZCgg9frFxxd1H5bdYWHMtxrSXbdX7gRpk1g%3D%3D\"}]}\r\ncf-ray: a1a3031befdf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5882,"size_decoded":3284,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"441846baa4ce12c9b969be28de61942f","sha1":"b4057fcdca8697350aa224b24ab5a0def796678f","sha256":"5c1eb81359600f71bdf973ab20e35142cf2920d6a9d17416fd27834a49bfe912","sha512":"e44742d41ab020cf8dc4f6ac66d473816cd068d0b91e09a39adcc2f0da8c4c7ed73121b5730c6fb7474a95ddb9feb51627a7c12f482d869bbf751220d5b57f49","ssdeep":"96:L3CgyGRnGDjlCuzdWqGSF9+kZFetwtrf79pQqJECvZ6Jzw9afOjio6myNNymJQMl:7XyxNRzp+k6e79arIUJc9afOWo6BNgnK","tlshash":"afc1c78e7bb653a8f245e6fdd746507c3e0a48e4a981cd38c7a86c0b950a48ecc758c3","first_seen":"2025-10-07T03:26:06.173055Z","last_seen":"2026-07-12T21:07:43.929807Z","times_seen":20,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/o3_swap.a3a05a64.a3a05a64.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.395Z","timestamp":1783890390395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/o3_swap.a3a05a64.a3a05a64.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-24d3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8RkHgGOvveJZkP2%2FQ8BTY9ysHm02Q%2BzcfMvTIbVfvTwJ5SUwWScKW0knR7b%2BArdV8PTz5imcZGbzSonY9Uxeby93670YNE2ZPKw3xIL08lulnHqZhQR8vbWCiFQ1g%3D%3D\"}]}\r\ncf-ray: a1a3031bffe6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9427,"size_decoded":4875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3a05a64bf748786d2ffb51ece4efd74","sha1":"f678086f9e02ec09ac048deaf2232eba5d3b5686","sha256":"f6af7ecdb4d50060eed788178f8b8be90916d5e0f373170c25c5fab8df395d70","sha512":"09671ebb3914599c94f33c29d870d29c362cc9f5439753e33b10b55c5da11e29df64e459d3c6da4fad4b0785534c8867db50f4cf296cbb1c0266c3f0c7f89365","ssdeep":"192:CkNEnYKKd7x4D96XQ8xuvKvY2spgri2qWLW4HoPYFpFMDNMjggY:Ck+R+F44XQguv3Gi20YFApuW","tlshash":"ca12d39d9fb686fcf000a7f5c76388687d87aae16d038426cba51d2ed58545cc822cdf","first_seen":"2025-10-07T03:26:06.293154Z","last_seen":"2026-07-12T21:07:43.947825Z","times_seen":20,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/ethereum.db6645a5.db6645a5.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.413Z","timestamp":1783890390413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/ethereum.db6645a5.db6645a5.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a3bbb22-2a3\"\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2f129cFZDx6gYP95qg4ECtiu9DvowHTScyZQ5q6P%2FcN4wpJnnGwukHOL%2FoW4TUmDHcyYOgxglEIv708cF6nki12ALPwryQqwrVr%2BrU59jKUygXQk8qsPabTIYGpGUg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a3031c1ff1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":1018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db6645a5a3c3388fa9dfca945cafa951","sha1":"d5a0d3530f81b5b8c037f6bf0f97e5531272d266","sha256":"25cb88faa997399f1dfe71653605c1403cb9c8e8fb2e3ecc29f14f6bcac8d8e3","sha512":"5078464f29a8550d4e6a0a460a1f9189d26a9531041edab83c8741f6c40d062ba2ff17106638ea003ac1f7d8859afb984cf2991ed159cafb0d93097f67310812","ssdeep":"","tlshash":"770126d67158e724b0001336ca6e703954a76dd8f9b802846ac7290bb2d8cb74ca4ad2","first_seen":"2023-09-30T03:41:35Z","last_seen":"2026-07-12T21:07:43.911872Z","times_seen":53,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026direction_type=1\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393308\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.318Z","timestamp":1783890393318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026direction_type=1\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393308\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://rndraac.com/\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a3032e3f21568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T19:40:23.978724Z","times_seen":17296388,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/start-image.6b4395fb.6b4395fb.webp","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.084Z","timestamp":1783890390084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/start-image.6b4395fb.6b4395fb.webp HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-14ed9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WoYmUXsgGg1enmmhpMXQNSgXdeZw8Fh%2F335Gvib%2FYEkHIf9V6v2%2B9J9ON01BGgB7sQne4KcB4gXNh9HiaAXe%2B78h4EreVfIGI35OLZFIwdxCle%2BDprcOYqh4H47Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a3031a0fac712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 85721\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85721,"size_decoded":86414,"mime_type":"image/webp","magic":"PNG image data, 1088 x 642, 8-bit colormap, non-interlaced","md5":"6b4395fba6876488d6f21d92c0cd81d3","sha1":"e054dc67bae37dafbbba40a7b035d5ebaa029c7b","sha256":"a0983bad05ca4459fbdec8de902459b8893dbedd96f1862e34290182e27898d3","sha512":"2b511f3d52452593e6bad44f24642d0de3dc3500edabadc062e09c55f847211b88756053d6907a03e66989ad3a3d1ae2a2142331492a811a25623a28c7b91da9","ssdeep":"1536:KX0hQvcVey+GZ2aG+T/keMTM1shr1MlXAjEJ3CMlZbaHW7V/s8dGG7z7KF:KXNHGZrNsTMO5OvG279si3s","tlshash":"25830217253e9c293528de890627bcd5aeb04e91ef35821d94f2f5b0a0bb60db4c15be","first_seen":"2024-10-04T10:59:28.202883Z","last_seen":"2026-07-12T21:07:43.950211Z","times_seen":20,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/metamask.be3827d7.be3827d7.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.365Z","timestamp":1783890390365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/metamask.be3827d7.be3827d7.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1a93\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKqswSRP16cQRtI9YgeaVQ3taN7eCjKsWOi3NBspRmsoowk93ok6tLU9LoD8v1x1IrsrVRzRzuwGWeJP9NGC9A9UzrljVqVzw%2BsAfuPmReLCo3jTI%2BlsETMKQa0ZcA%3D%3D\"}]}\r\ncf-ray: a1a3031bcfd2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6803,"size_decoded":3229,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be3827d7ecbdb1fb9c86c18a645a5f7f","sha1":"3ae6cdb811a256ff7adfa6770478eedce6429580","sha256":"6061e0da6f3515225e499d1a6b965869dc94326b635784aa7a1caad33f4adba8","sha512":"5afe10c98475889955dacb06d35ab87db1c866ff7770924f21332304fa28907fa8eb0ebdd18e9fca8ae5758d937b84267e7f7cfada9ec73a0d197a76af480c45","ssdeep":"192:Lju2UQ/TgTEcf3tajvWIpQ0JCQ42uesQuiR:L6zQ/Tgo4tAelsq2gDg","tlshash":"62e174ce2b2481f8a5c5e2edd706ec29edd54de47641c439cbd91e139a900aecca5cd3","first_seen":"2025-10-07T03:26:06.167528Z","last_seen":"2026-07-12T21:07:43.961849Z","times_seen":20,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/graph.6d284b0b.6d284b0b.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.384Z","timestamp":1783890390384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/graph.6d284b0b.6d284b0b.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-282f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dD7lhtsrB3K7Cx%2FDYsgFZLFEdJZojSUbXPzwcdJNdHjjfER%2BkNYWUinhtEBf%2BehKCdXPfhDFRswONGkCn7m3%2B6E1om4TMvIZE%2FbNDCfILBLNXiSIyKmY98KE8awn7g%3D%3D\"}]}\r\ncf-ray: a1a3031befe0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10287,"size_decoded":5114,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d284b0b376ebde014370ec27dcb40d8","sha1":"ce3bc044bd2ccad1fe3eda013db2163c4067aeb1","sha256":"f08c55134bcd9173a8b6f7863e34940767e44a8360368663110b1e3fb9c8cf72","sha512":"569fa73d70fcda41629bf3492733a427e6de4f5424724fc9a44058164c932bda42a3fd38d6141c17af640b5e2cd80b0e22ff4f05f4263701f9df8b603eb6e6b2","ssdeep":"192:dFOItW9PP6wmleN3itJ94FikftBWTZL8eJtAxE2vblihnzRMGHutLCseRhsAX/9N:d0IwPylehgJ9OictAZoeJtkEUoMTxe7J","tlshash":"ab22b9cc775563f8e00ad3daca1d51a9771facfa2512cc78c7a92d4995624afca01cc3","first_seen":"2025-10-07T03:26:06.130613Z","last_seen":"2026-07-12T21:07:43.971383Z","times_seen":20,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/crypto_com.06db3da2.06db3da2.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.390Z","timestamp":1783890390390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/crypto_com.06db3da2.06db3da2.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2bb9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gz31%2FeWh3oXOjJlPod8NnAneuOic1z6mjzgEj9BA8rY3uyaFNocAXNcN4alM%2BvbmgOZiN1%2Fo378R64lyFA8Nr25GFoZVEfcfQLIMgpYc9xTfn2SMF7QIPtRBqFKfyQ%3D%3D\"}]}\r\ncf-ray: a1a3031bffe3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11193,"size_decoded":4953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06db3da2fa90c10d1627fb27e004ab81","sha1":"c9c5c1071b6df0b05d83fb2ecca78ed7889572db","sha256":"56c10b4d5e146d0407c467421ac4eec805c9b2471f65536e5f9b17d7ff13dadb","sha512":"263a69c7d07943cc9578e568d76a5ce8d879429094a5322abae98539259746b98a93f6d7e0ef81640da74041299998da4535ab1e770cc748c74891a508c6427b","ssdeep":"192:SYXPsMz9Sbka6Ymt9qiNlF8nr2mAID49xWMjrZFwfsmMtR76JuQEbF7h1JsZk42G:1sM2Irir2mHNMPfCMtRGEbTsZcWSKunw","tlshash":"143286cd7b24d3f8e248e3ead69644b47b5a9ef07d62c5b4c7d01d4651a146e8c60cc3","first_seen":"2025-10-07T03:26:06.152079Z","last_seen":"2026-07-12T21:07:43.937115Z","times_seen":20,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-CZyB68TL.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.063Z","timestamp":1783890392063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-CZyB68TL.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:59 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A938E4DB935379E66B0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3861233856786262498\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: FETLIq1J8UqYH3PGYxzRCg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: fgYulrYlefrVEU6vnk4b-GRY9HQ1cMj9nx2diKBzULhyszcjWV84fQ==\r\nage: 194373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":521080,"size_decoded":180364,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65426), with no line terminators","md5":"1444cb22ad49f14a981f73c6631cd10a","sha1":"268bbc61b42d3ecf3445635f31e244f81f46fb66","sha256":"27a1229dc87c10b5bde2671a1809b675d8c7b2903bbc4fd371a762af1db02a70","sha512":"5bbe9b32bd16351b6637b7eddb9e6711f771ff1ff35298e48d4bfb6d5175c4da840192b5feda17836d6848270a4dac6d74f7aabb76e4a4a98b51f20d7a241cbe","ssdeep":"12288:ei0HSyXrI/9wjEgSlwGdrPcBD9Fc8OlZWjhmHbFTEhrNVY8yrlI3+1jjyyvJ5LVr:7eY8yrlDvJ5J6XM7D","tlshash":"3ab47d4cf695783ad3f65490a4d64404a26c0768e01888f1f5bcdeb617b6ca2e3b7b7c","first_seen":"2026-07-10T15:11:33.223414Z","last_seen":"2026-07-16T03:04:08.64226Z","times_seen":35,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/security_audits__diligence.da2ff2d5.da2ff2d5.da2ff2d5.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.093Z","timestamp":1783890390093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/security_audits__diligence.da2ff2d5.da2ff2d5.da2ff2d5.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-428d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezY5CDVlEORXyWAvCsQGiJeB9JWBTJ%2FyoDGtZGV5bFLCcMnCXJHqlehpEJej4%2F%2B9Suu8R8eHtssOcEjsXSEXfhlvvGSxy5Gol8gQWqBN0kFL2T8aCwfbFdqU21PylA%3D%3D\"}]}\r\ncf-ray: a1a3031a1fb7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17037,"size_decoded":5938,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4bc64493786e69d228627d5ab6a4be43","sha1":"8195db0d384d909eb85f6ae9ea0328d122032a5a","sha256":"966bafc442eb6670c2cc5086724c2c46666f980c401b76a4a1c40ef6d587210c","sha512":"a9bd21e8806b9faff8dd3165daa5f958e004135552d9b5792a1e28d3560ecf4fa3148389b4ff22c5ae2cd0d28c64af25075185a7c249628df67932b9ee9c8c56","ssdeep":"192:YCiouQRGTTt2O0Mb18tp53Sk4kRXogvlIv4NoAB8ebiu3OrfNH9uSZ0ttgPQRJM:2lTk13Sz46v4iABriu3eFHcy03gPQRK","tlshash":"4072cadc923586faf80443ade979443274a90ce63b90d368f6de0d767f13ce5682858b","first_seen":"2025-10-07T03:26:06.160778Z","last_seen":"2026-07-12T21:07:43.914413Z","times_seen":20,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/evmchain.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.076Z","timestamp":1783890390076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/evmchain.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-5881\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpBS9paoQ1l4UPkWsYsb0tKSW3JTrkN0LG1LMgwDWLlqon55j9J482Fg7qR40Nb6eCYBxKD7HxptzcpXUBVHP%2BB5%2FAlJNBVh3hsFtwljmEbdakn%2BxXzFCH3pZT%2FznA%3D%3D\"}]}\r\ncf-ray: a1a3031a0fa9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22657,"size_decoded":5683,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22655), with no line terminators","md5":"103cf7a3766e010c9499d24721aaf984","sha1":"ca4e27f04aa5be91c32e0942583f39bca5277a1f","sha256":"d93c05813c158faf533a332c1b49f2a9f0432e0454fdefd1a2c9f11428b7a4e9","sha512":"373140cc684cfd8e2aaaf34a7da1e0a5f4bffd39a86c6979203068f9e2991f33be45968c05076b2d06042de30952e9076eb054c27bae0d4d5c91f94db5923b67","ssdeep":"384:3LyedkdCfFDM33MPH0mz7Cb4h/iUJbstZ4xWXZrTOHnf+RJvDqvGKifPauiy1Bes:SCtC8bh9gWe3FptN9Ra6SAzjQiKTsDn","tlshash":"daa2d9f3d354a98e8b7990cc1ce93719c1078c89c45e41feea964aded8f6067a119f23","first_seen":"2023-03-07T01:24:55Z","last_seen":"2026-07-12T21:07:43.910209Z","times_seen":707,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/atoken.30e72438.30e72438.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.369Z","timestamp":1783890390369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/atoken.30e72438.30e72438.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-879\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffm5nYP%2Fb8V301LuOFHs%2BPFKuNJoiJFNBlANzpqI%2BARqOFgyfsebBr0rNSBk6g%2F8wGh3aikFZKTYcjMv30mk60T5LNPv6459xJn8k5SEnWbqI1%2FhopSJ3J93leeEKw%3D%3D\"}]}\r\ncf-ray: a1a3031bcfd5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2169,"size_decoded":1574,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30e724380c57dcd3c3da657ebb7a5d22","sha1":"6fc152e298837fcf2f81118a1a39da4acb47920d","sha256":"76e15e07fcf7764301f61e3ddd0ba74d468844d62235f6c36440ba20dca65d43","sha512":"9448e3b25f1a7f85105021834f94846ef77dfa885f9cfde8020c2733f40884754141c18012cf86399110e3dca6895ea6d3f38f3bea4bdb396f762099c19cdb3f","ssdeep":"","tlshash":"304142cc7734c6789920a2bcd71e1ab1bab75ce291c6825053554c2b3ca45ae8dbccc7","first_seen":"2025-10-07T03:26:06.125746Z","last_seen":"2026-07-12T21:07:43.949668Z","times_seen":20,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/staker.5e2651ed.5e2651ed.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.373Z","timestamp":1783890390373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/staker.5e2651ed.5e2651ed.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-e59\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUJODzVNqD7SNiPyDBAuWcPdTU1qqHlhA84K%2FLR15dLZCL4fDYUF%2FVIVp8MHFZPHysvMbxTiWxcA6znB3X4vP2VWEJ0NfZvdV%2FhQOz4tTMBhCYrwKgSx2zTfpFIYag%3D%3D\"}]}\r\ncf-ray: a1a3031bdfd8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3673,"size_decoded":2398,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e2651ed94a97eb3f4196ea036235216","sha1":"74ee054a3f2a8462510f5e0aae136c0a643c5ec2","sha256":"6e9dcc62d2f0e0af6ca5041496a060ebea85ef7836dff0c576b70ff7dbe9a842","sha512":"1984977e71429caf6f8be69260f48cc5c1f76a3512b707001e46c66fd94221b34296b13ebdc447babf13b94a5b788a3e63291ce4e499a18374a9d29cba29619b","ssdeep":"","tlshash":"e67185c8472a96e8f608b3fa874da5794b238ce57e80d5d4cff82c13e99159d0da48d3","first_seen":"2025-10-07T03:26:06.276534Z","last_seen":"2026-07-12T21:07:43.924239Z","times_seen":20,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/livecoinwatch.44c48d4f.44c48d4f.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.404Z","timestamp":1783890390404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/livecoinwatch.44c48d4f.44c48d4f.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-e83\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UptLeBHqMPrE%2BPB8oU9q7BFzemip35QFDyi6q2psSfJHhWn1zMdwm6FfrWkMbLBtssIcZxhw%2F0gmguLiZqFPCjLDKtvRUnOP%2Ffn9s%2B8%2BxFjLgaOGb0qwPhGx419cg%3D%3D\"}]}\r\ncf-ray: a1a3031c0fec712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3715,"size_decoded":2180,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44c48d4f1c7308ab8f0d25ce77e4d5e8","sha1":"b2d634da220cafd9e60db35f56666dfbe6b3ad29","sha256":"6e779c1036a891bd7eb9dc494d05fe5ed4b5adf07639c873ac0874deb10d91cf","sha512":"6e46d9be181cf882be387f1dc31df0b5821f41d7b9b903763dbe48d074f7f6555eb959ba8ce25d92364d610578f775b9f74815c5fa1753e23af898e56cdb23ff","ssdeep":"","tlshash":"027186c976388ee87744d3fe0a56587a25178ee1ba97d48cc7812e06edd105f4c68dc3","first_seen":"2025-10-07T03:26:06.135742Z","last_seen":"2026-07-12T21:07:43.957751Z","times_seen":20,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/api/index/isRegister?address=false\u0026lang=tw\u0026currency=USDT","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.386Z","timestamp":1783890391386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /api/index/isRegister?address=false\u0026lang=tw\u0026currency=USDT HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Jul 2026 21:06:31 GMT\r\naccess-control-allow-origin: *\r\nset-cookie: laravel_session=eyJpdiI6ImlwWThBK2lqemJEMEVCMGtubmxNREE9PSIsInZhbHVlIjoic1llSS9qQUIwYXo1a0d5R3FCZ0FxbVRLbjkxcUswbXUzOUx4NGlNY3JTNzFkRHVnN1d0Nk5ubTA4TjN2YlZLdGJFbUg2REwyVUUyemJIZUNBZDdkMkF2dU52ZTVqdzdoR0llZWpCTzk3V2g4Wkw0dFEvQmRUV1pTeDBnNDNwVWgiLCJtYWMiOiJlMjk5NGUyNmU2NWRhYTE3ZDRjNGZhMDk4MTQ0MTRhMTFlNTY0NDMyMTMwYTdkYmU4ZTIxZjcyM2Q2MzBiMDcwIiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 23:06:31 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjnhsDHeG5CFqUq8sh%2BSQGZAhULmt3aJMg5oy2%2FlXhh0QhoiuK6zBcBXTXGvX6liMXLmjGcxCIfx0WboT7ya8gjHlLNBEAK6yuhP1XEcNW%2FNN7q04fUSRr6sZAQQPQ%3D%3D\"}]}\r\ncf-ray: a1a303222845712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":1189,"mime_type":"application/json","magic":"JSON text data","md5":"e1628209549afcb1d601d29430f27d1a","sha1":"9fca0bed67a8343df858c2a56b85bb8a419ac499","sha256":"e4292fa7eba73c29a002bac97e3830bc6bffce88f6414ae02df1a813e5cdbddb","sha512":"976516e0d746c72676f5efa81f3a0029ade4879ee379af5f18a8dc529a4b90dedd0a392b148fd9460b73f0ddac4a8e6a69f9d1f7805eb9c38c6dc1990214053c","ssdeep":"","tlshash":"e29002451a280082450160ec601945d446992596081447248cc95f1481180551302431","first_seen":"2026-07-12T21:07:13.846176Z","last_seen":"2026-07-12T21:07:13.846176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=5ffc91e044834285e23e6a9deacc667b\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392238\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.244Z","timestamp":1783890392244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=5ffc91e044834285e23e6a9deacc667b\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392238\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 580\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":580,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlnjJfnojyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCk8BAO9BAYbl2fkl5sal2O8l5s5ICypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWBSH%2FrTH%2Bsnl%2Fs9zwBqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8htNIVNScEPnDhMAf5Md8hP3zGN9c%2Bt3OhMGphsGHWtSIVfVz5tNY8PSH4yAEgyQIWP9wErNlhMAOpyQjWs9upDScWfQuGrCyilN4pyQIafGHVPGc2sSHEfTohMhyhbC8hf9cZNSHVPQcVfVzwP9cVyAKhf9%2B%2Br3zSyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:06:32 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a303279954a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":582,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-07-16T18:58:55.658274Z","times_seen":2520,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":3,"dns":5,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/qrcode.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.085Z","timestamp":1783890390085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/qrcode.min.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4dd7\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjLnzcwc4fcQzC9MQttNvFI0zCpKcznY7vqlaD8dfAfZllHJ%2FtRDSskVoTSeWz%2BVp%2FPx7PxjcfOiK0R9EDcF64TjLhjAt7LC77ccwUAd9fUz5nkq1%2BTiqkI9NxH4XQ%3D%3D\"}]}\r\ncf-ray: a1a3031a0fb0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":7774,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-07-16T18:49:16.082101Z","times_seen":65026,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/coingecko.1cb44723.1cb44723.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.379Z","timestamp":1783890390379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/coingecko.1cb44723.1cb44723.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1e60\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dR98Qcnrp2issJgyVjJa%2BrO5EWUBHgTKW0UYypspzyXx3ZQFrmHz8iBVfcl0U%2Bwtu3qtBbVjxOGGtVICPl%2F21MZpMxMmzBNkpbC4B1%2B0XulM%2Be8jomXEF788q2YaVQ%3D%3D\"}]}\r\ncf-ray: a1a3031bdfdd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7776,"size_decoded":4104,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cb44723956ef7a7d6e92a35c3094134","sha1":"c5caa33feafc60cf845b0873bd4f31e895a22a6f","sha256":"b43ed9d92d85f8c282c353bb9a72dd99ffaf4476154b37ea21d1db0c5cefe5cd","sha512":"3cf386ef4f8a62ac9d34eaa0054166d581ab9677545fec5fe217bf81eca3a128b44c8c5e918bfab2e04abc6d7ebdf033e243a17d8185152e197899dbaf48beac","ssdeep":"192:Wm5WGRlH/r5avC1D9yUUGJMIcr4duOyQSIGLr/fao+9skXkugv8:V5TRt/r5zlz/duPrG/kugv8","tlshash":"3ff1d7cc237962bcf10997f4829b98b5bb57aeb67511c518cba40c0fdd1206d0cb99d7","first_seen":"2025-10-07T03:26:06.190208Z","last_seen":"2026-07-12T21:07:43.930813Z","times_seen":20,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/tokenterminal.e42e1a63.e42e1a63.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.388Z","timestamp":1783890390388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/tokenterminal.e42e1a63.e42e1a63.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-3a45\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hABuToxzdBeby9ZxDqd6weKa%2BIJJJKOIQiSi4%2F6ikFOQGYguzF6%2FO%2Ft8h7TLx5B9hgDmlRRqHmoD3gE%2F1QCAMisVPeMNxjHafFTiQ1QBAByj6PXvf%2FrezwEa8qkmZw%3D%3D\"}]}\r\ncf-ray: a1a3031bffe2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14917,"size_decoded":6842,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e42e1a63dedbc439f16ed25bc38ca100","sha1":"cc85f2b68d4add791234c4ab1fceeab952467cf3","sha256":"dfa4bfb5a710fb5e8a571ed1dd1d727ceba26ab7e1796d5c04f554118a2dc886","sha512":"ed3281598de4ae855ee96305ff40239cfb51ebbe0c981ce336fd549fa4aacc6eae76382c4653499b15d0c9ce3f865f31d5fb7740ea1ec7c3a06c2d6e1812c094","ssdeep":"384:/O0L48PRXFTbRa0G9xxTl6ZudZ5us5YZL5AC8A:/ldXF/00GZl6Zu3PWZtL","tlshash":"9762958db76493fcf044b2fbc56b9078ba46add12d01f868c7e40d47956206e4e62cd7","first_seen":"2025-10-07T03:26:06.206276Z","last_seen":"2026-07-12T21:07:43.973268Z","times_seen":20,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/givingblock.a8b51a93.a8b51a93.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.381Z","timestamp":1783890390381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/givingblock.a8b51a93.a8b51a93.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2be8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1lAiwQxDl7M0cFCm5K9A%2Frod24%2BclwiYj29PCqWt7bmtWLUNt99xkvJghsLWN5GLnqF66GbJZFT9bR%2FwZHUM7SXCJRv8edYrln87Ld2X7CU1YxYHDNZ04F3Fu4kQw%3D%3D\"}]}\r\ncf-ray: a1a3031befde712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11240,"size_decoded":5489,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8b51a93ad679d09dfb657c493601ccc","sha1":"78db16a675eea412baffa917650f1b562fc3ee7b","sha256":"4d7874029160f86b00398737d1dcc9e9ba332e2ea3ae5a93b1eba21f2e284b6c","sha512":"f1439168e674633604b5d2c0db79b02362b2a0a5277fe7e0f0a8f5a333276cdee253832921d8ed656fd99ab604bccb371e2a3d2f98bbb4497cfcb7f0a58a3761","ssdeep":"192:oxZ+2yXrwsVv2Bh5+F3I2ztMQHCSO1zzRfOBj0Okhtlpr9XkTcm2IHe2pUy5v:UUhXrhycI2JMgjYpr9XkTgIHWOv","tlshash":"2f32b7cc9b7b96fcf044a2f9cb4a5478fd4aa9e06d0196a8c7b91c0be85007d5d21cdb","first_seen":"2025-10-07T03:26:06.127878Z","last_seen":"2026-07-12T21:07:43.970752Z","times_seen":20,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.636Z","timestamp":1783890391636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:59 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A930A930637376DA850\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16134971315845804156\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VbsXXiLX6p8NP0gV+iTFeA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: j_HyD1jivO1yT9SzwYr5rwCDYVkYWcFw_-PCA08tNGsS7GuPBp_pJA==\r\nage: 194372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":109345,"size_decoded":39308,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-07-16T18:58:55.657247Z","times_seen":207,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1jtkav/d4w_v2/integration/plugin/image/20260710/1783669585471/sticker.webp","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.721Z","timestamp":1783890392721,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /prod/project/g1jtkav/d4w_v2/integration/plugin/image/20260710/1783669585471/sticker.webp HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 12 Jul 2026 21:06:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 24860\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5401D95943075B63B3A8DF\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"122024C8F9FF1BE3F1512FE31858F619\"\r\nLast-Modified: Fri, 10 Jul 2026 07:46:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7899128416659727074\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EiAkyPn/G+PxUS/jGFj2GQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":24860,"size_decoded":25424,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"122024c8f9ff1be3f1512fe31858f619","sha1":"e2c9617ce2d2ab775abc8fe5958c0f41d55391c2","sha256":"ec9d35f5909c1f1d28a23e75b0f314262c3f1b582abadc128fccf9debf22de3b","sha512":"c84b3f36db10eb7e6bc4c44a460de692eaa6777d310ee68a4584683bf556e667598bf9e33afc30a52575f5dace3f79435dd7838582145ded39641a24aeb1d925","ssdeep":"384:1JPO5L9IyizFpAwxVwzFBhvr+KaEFWgqtPge+s9VvOQqI7rNH2OW2fUtUX:1JPfzRyOwFTCKaPvj9BOQqI75HDfUtU","tlshash":"d4b2e084bb21f5c1b10d2a9a7c536475741a48258bcef3ac73a264fa3c778dc0e8056f","first_seen":"2026-07-10T15:11:33.207531Z","last_seen":"2026-07-12T21:07:43.926313Z","times_seen":6,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":132,"connect":20,"send":0,"wait":184,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/web3.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.079Z","timestamp":1783890390079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/web3.min.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-146a1c\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gq2YKOA0ML9v7fxPDzbWsEGcklRsVBXoXVX4h5htF7ASwOVbJPWLibpLhwMoigruNl5dOlNsIPMxFSm%2FehM4L19lX9177U5A%2BQQkJny64b3Y%2F0BoRwN%2Fzq13wgztw%3D%3D\"}]}\r\ncf-ray: a1a3031a0fad712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337884,"size_decoded":390264,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63842)","md5":"b8264772685dd79e72d854b4619a603b","sha1":"b96164dd553333d7894997093457f04b0c0766e8","sha256":"ececd85853602912a75e478ab98b9f5a0d8a21f3f6e392b475a37f920ebe7b6f","sha512":"73cbea194f7067ef594a90ff82a2ab7af43bf975d33c3e3ecd3c306a9747be19574451d882d36fd1397a9f69a72eb8fce38cd2e5e8499dc3a78d418d774d347c","ssdeep":"6144:9ggS4Whgg8WMRelCSJ70OSJeXiqP70X+C8kSlXnfCM7XZfcwJ4ywB8b2IRQFw3:K/K+C8R67GV","tlshash":"7f2597c0b6907056c3656e91442f900ae33efe693c4d0169fa57ecf37cb8a85552af3a","first_seen":"2025-08-21T03:25:46.594345Z","last_seen":"2026-07-15T19:55:43.275861Z","times_seen":65,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/zapper.f0f00f22.f0f00f22.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.360Z","timestamp":1783890390360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/zapper.f0f00f22.f0f00f22.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-b59\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McO%2FolKLz4P11Chh2CBVK26BTGyaUYBL1HNTGRoqFsnAA35ZJwq0ogI3AJTBYtnk%2F5cZmZZPC6neZJfxSw9CZikh2%2FlYScpaAOryGGFWAgbSohaFn3gGDykYk6HdQQ%3D%3D\"}]}\r\ncf-ray: a1a3031bcfcf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2905,"size_decoded":1788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0f00f223be20098e497cffd2df45d4d","sha1":"e1630f052e682d72c2571179b531a18a52d53823","sha256":"81af6861c95d00b39b481e0ad7c7929b621818bd0f4fb8e305e093bd3dd021c6","sha512":"7f7955216a3fc99e4b54729c45d4da026e9a30b389fb8b4e751bd6331db012e8dd0c89ce4e9493529fe9a3507b1362e22b5dc618e71e901035bda257b64db298","ssdeep":"","tlshash":"ca5133de3a498394258c72fecf6d54fc740689e47513a879c3742c3668a597f88182d7","first_seen":"2025-10-07T03:26:06.226158Z","last_seen":"2026-07-12T21:07:43.908538Z","times_seen":20,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/calendar_today.8f7bc0bf.8f7bc0bf.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.414Z","timestamp":1783890390414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/calendar_today.8f7bc0bf.8f7bc0bf.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-d21\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dl14Idifbl%2FFKSxgh6cC7FXfcTPZ6DeSZ1jiBggLao7QMcC1zc8IpD1Oo%2BiTNXofckV6f%2FY8HB%2F71sDEs6Ukb4yzFpmg4zDDkvB3PHkTHvlvIQ%2B975%2F%2F2UghpDJkLQ%3D%3D\"}]}\r\ncf-ray: a1a3031c1ff2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3361,"size_decoded":1668,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f7bc0bfd125268a67b7976d6c872877","sha1":"19ca38b8315ffcec711035c27d9665cbbb9c5d39","sha256":"29941329072ba98cc33fe82fb98334899f44a2b85630256aa5dc9a536a5b567c","sha512":"ac3c44a44a793960d9de7b2dfbf8016b2b9fb7d3698031b826da36e4470d81bd7c8e55090e1a99f088f85b33be95589c51031068f2e8ded95b641adf5fca0783","ssdeep":"","tlshash":"83617648e6ceabb8ed0e5781d395f5ce383f20fbd9a8cd8648005853cd9117a2d199a2","first_seen":"2025-10-07T03:26:06.209Z","last_seen":"2026-07-12T21:07:43.93195Z","times_seen":18,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/usdt.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.065Z","timestamp":1783890390065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/usdt.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-b25\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FahEjFh7OFR1iYWtDIt6RS2AzkpbgUYgJhWU3y91rQaf9QbkHI0rofQhbkEqSGjREjde5iw%2FXKAX1UMDaiWNDb4%2FWOvk5hLTesAmS%2FUZGStDGGOk2O91GEv%2BMMgd%2Bw%3D%3D\"}]}\r\ncf-ray: a1a30319efa4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2853,"size_decoded":3603,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"76d0f364f0a5142e49d8349f156b9f2d","sha1":"018c96e4a7f6e80e8acd977ff3f1bc866296f295","sha256":"ee7aa2cdf100649a3521a082116258e862e6971261a39b5cd4e4354fcccbc54d","sha512":"81eb4d95300c50ac38b4c27cba5ff30b31bffbf3966b996621b2733bce21e196e59d4197d9756514d44607ba6504338b1fb12da424fd2a3aeebf8c8ea4e3b5cc","ssdeep":"","tlshash":"1a514a5928cb23881e438d374eadc72a70185b782e15638327489c799f11a891c0b9f9","first_seen":"2025-04-02T11:22:24.573179Z","last_seen":"2026-07-12T21:07:43.948374Z","times_seen":47,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/near.ec7210d5.ec7210d5.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.350Z","timestamp":1783890390350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/near.ec7210d5.ec7210d5.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1b11\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QIEJ1oYgNukZytK8MM9IV6JQAixtIZCustth154sL35FW8MhmFBfSaGGY5KxZE2PLqA4Qp80zBGiw%2F6a58Uuxf3p3thGRIfx3ZpfNXReczz90oCeZZ2o%2BtOmJOABw%3D%3D\"}]}\r\ncf-ray: a1a3031bbfc7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6929,"size_decoded":3609,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec7210d5edc9a15fb71bb3e84f608288","sha1":"a6842a5831960b31eeb1c034affb3a158f0517ad","sha256":"8ef3fc043ccf21834547b29bcaee9791012880707fc581e34105e8333610a172","sha512":"9f58dd491a996d3bc7d90ce622cfb3cdfdd81b16f7db15d040adc8c3f5ccc72dc1e89a4fe2e2c47bf34661c2893541366072c0e6c71a80bfe6fb4e1db4f56075","ssdeep":"96:QmZg4c81V4QBoSjHfHCAWhdFF/+5ofk8BflRu/WwjC/EeTlXqytceB+x/fEpUV:jG8L4xSTRWrFp6oHZufuVTl1tp+Nj","tlshash":"7ce172de777f42bcb040e6ede2931475b619adb63d52c92983e86c4ab81291c58d4c83","first_seen":"2025-10-07T03:26:06.256743Z","last_seen":"2026-07-12T21:07:43.917349Z","times_seen":21,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/synthetix.1dc7e151.1dc7e151.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.394Z","timestamp":1783890390394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/synthetix.1dc7e151.1dc7e151.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-200c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r28vNf0IOOpa5OwlEIddjzkGqyQq9IfMS0GvUcX4VDVSUaX5sytuODA3188D3G6H4CFavTu%2F4ubQjoIhaR2zoxjl0hzgFJGgCf9pT3i0rIhIeT3HprtFJTZshCLvqg%3D%3D\"}]}\r\ncf-ray: a1a3031bffe5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8204,"size_decoded":3623,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1dc7e151b9b2618f01e3d7059fd6baae","sha1":"2e967af03cbc6613bf53b06b614ce3b87d9ea2cf","sha256":"29e7e80b834f898f875afdb3d1e1e0abcd93dfbdb6cd9b175c9dd6549a144707","sha512":"dd83326683b0a024c5e71aa97698c808d39ff922e5056d5244a66ae321501ac16dfb4c6b38eb0750be6f07904b56b0fb1f0269d72bc603d0182a6744a3c767b4","ssdeep":"192:XV66/LMAzmmiMOfoUvtONSapsJ7dW29qxXfzDqhEIUGZmvTOK:XV669mmiMrOtOUaqWQqxvzK3svCK","tlshash":"c802a5cce7b051e4d1c4f7e9951bd4f463425d822e62bb2daba63c41ee210cf91a28c3","first_seen":"2025-10-07T03:26:06.133133Z","last_seen":"2026-07-12T21:07:43.920853Z","times_seen":20,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.590Z","timestamp":1783890391590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:58 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A928E4DB935377D5CB0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17389672731008990191\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: QUYS0PYmdi3UBkqdEfghww==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Cp0yXAFiWrjsnB1MgwSL2Y_NAY7BHfDjwc0lrZJYHYNlVW4OZXkfQg==\r\nage: 194373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19114,"size_decoded":7684,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19113)","md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-07-16T18:58:55.611732Z","times_seen":206,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/wallet-logo.16b11b36.16b11b36.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.794Z","timestamp":1783890391794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/wallet-logo.16b11b36.16b11b36.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImlwWThBK2lqemJEMEVCMGtubmxNREE9PSIsInZhbHVlIjoic1llSS9qQUIwYXo1a0d5R3FCZ0FxbVRLbjkxcUswbXUzOUx4NGlNY3JTNzFkRHVnN1d0Nk5ubTA4TjN2YlZLdGJFbUg2REwyVUUyemJIZUNBZDdkMkF2dU52ZTVqdzdoR0llZWpCTzk3V2g4Wkw0dFEvQmRUV1pTeDBnNDNwVWgiLCJtYWMiOiJlMjk5NGUyNmU2NWRhYTE3ZDRjNGZhMDk4MTQ0MTRhMTFlNTY0NDMyMTMwYTdkYmU4ZTIxZjcyM2Q2MzBiMDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:31 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a3bbb22-1a3\"\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZOS253dLgWaZ2OdW0no57Y33vI9yuV65VYr03%2FMpPSK6UnpyAzdE4fKInrJ19XLzTt%2FDrUsAEz5CfrL5ZN5WYnH2vhCFe72GsDAym67afEzWYiwK%2FT7FOxdD0c9hg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a30324b857712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":928,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16b11b365146cdc9e93d5c9d51576add","sha1":"839d5139a86b77b0746ef547834ebfe07f4d0590","sha256":"083b3cb5805f57c4472e9796e52c050d053abdd3a0a3e7d699d9ace96a97e089","sha512":"0ff9435c110adb630d66bec7661a808b20a69660187ca5bf5c9a7305d3247ef15e1bbdbcf05a54b1675d72f06b7595ed14160543942273372759bbfaa03945ae","ssdeep":"","tlshash":"7fe02b7450fded044d14c1055a7f76762a5933d3878c0348b40c1a65ff05bdb38166ac","first_seen":"2025-10-07T03:26:06.15652Z","last_seen":"2026-07-12T21:07:43.936129Z","times_seen":18,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/chevron_right.59de6f6a.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.405Z","timestamp":1783890390405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/chevron_right.59de6f6a.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMBK%2BdqmT%2BgBHfM6kdubRm%2FvwNpgKXVDqcaPOCr40aqiC2YXb0NdaOBpXfwey6GBgVugBPS4zbNDhNNdZyEG9TXDdiwxv1N32UGf7Y%2FRNqJdq7LI1nbWrZM8ErWFyw%3D%3D\"}]}\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a3031c0fed712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":703,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-16T19:33:26.202407Z","times_seen":540502,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/svgexport-3.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.408Z","timestamp":1783890390408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/svgexport-3.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-34f\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkbtcqoeNwoAV96%2ByY3N0IbFpc8r%2BDFrtrODgWRhyjvjA7t%2B%2F1fB0UndjD%2FowwOcppwKBleDXbKl%2FFxpVGxg7svoHAjKlwcLqXAuA62%2FCDTBvG9dDkRmt5Xpl5juLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a3031c0ff0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 847\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":847,"size_decoded":1581,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"30a9eb155e415d00d91e2f64d740d226","sha1":"56369fe70c47ec7cd0339ec1dca6b537d84843ea","sha256":"32103492ccceca92e1f27f1228ae1a68d885912385e79611e5810fc8d897ffde","sha512":"8e71d7665e83086285292856b15b819ea9b290355c8ae627aeb973b1c93d135a35e649ce697eae9911dc6a6c6729f3443ae2e22fa27dc29c354d51a3edb7bd89","ssdeep":"","tlshash":"6d0186dbe319292bc6c6a33081cea725a40959134737db2c03792025488acbe8da2607","first_seen":"2025-10-07T03:26:06.295631Z","last_seen":"2026-07-12T21:07:43.928546Z","times_seen":19,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/ethereum-transparent.1ee60bb4.1ee60bb4.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.062Z","timestamp":1783890390062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/ethereum-transparent.1ee60bb4.1ee60bb4.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a3bbb22-390\"\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GpfjVT%2FtIxRf%2BgchZASKLGHYUeYt%2BawvAMHsPoDOSO5AX%2FITfy4PtCUOyeH1gOpaE2ahPplkSwyxKzYZy0z080uIiWx3TjrkfkNV0q%2BImEGsoR0%2BdfZkLCRO23kb6A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a30319efa2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":912,"size_decoded":1115,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ee60bb478fe138506830c04c6d139ed","sha1":"62038ceaebd598522ff880348711a12513ad9bf9","sha256":"f8a45232fcca122b5775ab21237d6691ef9232bbfc4c8553b9503e39fa8a7724","sha512":"8c1d2aaa52c4f0e74bf8db531f02a6ea7b0e2bcc82204ae97a5ef0fd907ebd92dc5546869cf326b9c0688045b4ebc4192b952703029de5db281ceb1e84d6990c","ssdeep":"","tlshash":"22116bf196fcd1845604f3b2551e3931783955eb46d492843b6c0a862ff8f564dafbc0","first_seen":"2023-05-18T20:29:20Z","last_seen":"2026-07-12T21:07:43.974198Z","times_seen":80,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/mew.3963198e.3963198e.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.367Z","timestamp":1783890390367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/mew.3963198e.3963198e.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-630\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7modv1IrrW6tZBCM1Xg9tFDEJeuQxiOl588nfeYNQUWMkYSPVP8TeA6YV2AbpmtGfljCfrrN8UTyqcxQ%2BlaWB7EKNOH%2FyZaPf3hmBNIIci3vMfOZJdukai2GIpr%2BA%3D%3D\"}]}\r\ncf-ray: a1a3031bcfd3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":1433,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3963198e20c6c396ccc5aa3e9a6f69b3","sha1":"a95b3bad300f7d0bc24c1837115faaea128e7cbb","sha256":"4b574df54f3eb29f5ea362f53466a517332c2f436b9652066c76329a90a9d2c4","sha512":"642a2de1e09368690fee57b5018a8721fdc934eec0b65f38b8dc0818f7ad09fb3f9236d46aa9962792b13121b6404b6e86a5d0292815703bbcda824c6ca06c28","ssdeep":"","tlshash":"15311fdc365580e9b804e4fcc2aa4a7a32a76cd6970bf048b791280fb18205d29297cb","first_seen":"2025-10-07T03:26:06.170448Z","last_seen":"2026-07-12T21:07:43.958308Z","times_seen":20,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/pillar.dfa8413d.dfa8413d.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.375Z","timestamp":1783890390375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/pillar.dfa8413d.dfa8413d.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-eba\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcmrC0c77OMEgVvvIgynNW%2Ftkm7tH%2Bm%2BI8LC2d70s%2FN%2BiOQqUiQGhZg6XYaWLvb%2BCIdmh1YNiBWE5iEUCX3bmq6ID9F%2FG4CnZR2TNnjIviKOtIqhqNJPihUDC2I2Vg%3D%3D\"}]}\r\ncf-ray: a1a3031bdfda712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3770,"size_decoded":2335,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfa8413d4e5ae259c771202a8e99734b","sha1":"34a85331e662708c36dac086975fb9d1b6051213","sha256":"231e43068c62ef4413c5d0eb2a6c5c6bd7351de76d967451e5e7eb32bcc44803","sha512":"e73e83586f1aded13f6b00956d7e77f5623edb414135e6bb46e2ae17c46501d5b985b5c5d6bf835162bdc540f7a065b51e3c5ccbebf5b28f1663ab3e11cf8f07","ssdeep":"","tlshash":"837196cd935dc2d4f010b3f8c92a64fa7f2b98d95e50d93487a22d2ba44187f48285c7","first_seen":"2025-10-07T03:26:06.204322Z","last_seen":"2026-07-12T21:07:43.936607Z","times_seen":20,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/ethers-v4.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.073Z","timestamp":1783890390073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/ethers-v4.min.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4a1dc\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ru7Z4n9RpXkx5vubBKT5fZfnjiylJ4vgXMXZpQIvFyzba9X3bofLcXmBGjE01aZaaU3mFSeKgpDLzfd4x5bH%2FLNDCtAt3PHQMF%2BIUD2ADra%2BpLq2YgeHk2koN2CsA%3D%3D\"}]}\r\ncf-ray: a1a3031a0fa7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303580,"size_decoded":96065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e66b864a27c5961a702e18683961608","sha1":"febc146fcf4c2d021f8635670ce4b2f35232e8e7","sha256":"2f426ca96f459f9229cf53665db2de4ec82d15ce49f767915378d87f733ccf9a","sha512":"917e5aa6a7aa64f2dadfe49152f1f6f3107cdc8bce974ed47e364bfcb060267081cfeb2f7cecee4a458828ed822ee9729d97d1bc2f8b47335553e1925ee4eecd","ssdeep":"3072:IMVv7CFGHyjUW15Co8psvoZ0pDrDQciPOP24fuayKqlKT4D2no:IvBfiqDQvPOP2TaytwTg2o","tlshash":"c0541b8472a0b062939629a4142f200bf27bb92d588d046cf745d8f77df99c99a3bf35","first_seen":"2023-03-07T14:42:37Z","last_seen":"2026-07-12T21:07:43.927297Z","times_seen":39,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/debank.5d89f0e4.5d89f0e4.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.357Z","timestamp":1783890390357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/debank.5d89f0e4.5d89f0e4.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4286\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4ySLPFr7hElgvoNdU99H0CL2ZA0NHP4YA3WEjx4a%2BP4aK%2FMAJwCPp47RZ6X%2FSwVybEYBSJ%2F8%2FjxOap0yYj4poRru7kHfDQnbUj47Ir43RMgQcu%2BJ7rJ4EWv7QPk7w%3D%3D\"}]}\r\ncf-ray: a1a3031bbfcd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17030,"size_decoded":7499,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d89f0e4196d7295a6884f13471d590c","sha1":"e771df14fdc15ff0fec808714fd5b4a6d46e3340","sha256":"02339b6faee7733451bab9b08386470bedc337afb0cfb6af2c644cbf27e9b86d","sha512":"f6f5eafa5c508f14ddea321e907d586a78b9f9fe5edf4174bea885589803d30b817e8381c57e76cdb4299b090f59f779a3d778fa8d7dcf2133952b729ac54de8","ssdeep":"384:9XHM58i009VGMfA6nOAca3975t5NNFzenc2Vg1Bee4JBe:9XG009IMpHrjRNtVBeDJU","tlshash":"ba7294c8277a12fcf145e6fdc61a25f47f066ce56a02c674c3951e0aac4206dc996cdb","first_seen":"2025-10-07T03:26:06.14253Z","last_seen":"2026-07-12T21:07:43.972803Z","times_seen":20,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/theme/default/layer.css?v=3.5.1","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.363Z","timestamp":1783890391363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/theme/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-37bf\"\r\nexpires: Mon, 13 Jul 2026 09:06:31 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cutQHJqJ%2BjKPsUifVvJspy02o95frzxFCAPwZpuBnDFv1qIrRewsJ1iWAbi94W6T35xVXJmtwVoCeIt4G0sacuZkXnNhK%2BSucf%2FJIgrhQz9hs33cy99nIscC7L2jUw%3D%3D\"}]}\r\ncf-ray: a1a303220843712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14271,"size_decoded":3545,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-07-16T19:41:40.495419Z","times_seen":55576,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.205Z","timestamp":1783890392205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Fri, 10 Jul 2026 07:05:27 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 6_q6f0C9wvq8qujsxfceaGWX3PjR93nq1rIdG9VliyIPbrhEOygGDQ==\r\nage: 223266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11881,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-07-16T18:58:55.571312Z","times_seen":2633,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/zerion.5b3b1ed4.5b3b1ed4.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.362Z","timestamp":1783890390362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/zerion.5b3b1ed4.5b3b1ed4.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-848\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNZmCqLXirv0Z9gB9slnPv9ci5UbC3oCYm%2Fmc0tgSeLqKLFSZEGu4IVVYYwVU5m8ir2GzpvBk2U9Gq2MN5Jhq67q%2B7SAvYVy4uujTwBqpWR5bPCmaAR0dqnoz%2FqPWQ%3D%3D\"}]}\r\ncf-ray: a1a3031bcfd0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2120,"size_decoded":1572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b3b1ed49c1fde67f81d0387fb55cd6a","sha1":"cc94f8c8be0b99ebd9658ccdedf25faf5c2bb355","sha256":"c210d3972e754b80db04264ca89663ba70943b20e7622c44a333c0d4570d0b0f","sha512":"ee7b9447f7502a18321136f66c0f5df9a7d6fb9bebd1382ea6a818bc2c03972af3e7a113c0f7eb766ec82a66884dba59deca667043b11471d38441a333e83f0a","ssdeep":"","tlshash":"bc4124b413a9d190b41c727d8b1824fa2aeb18d9fd62d184d3737c662490a6c1c6bccb","first_seen":"2025-10-07T03:26:06.24985Z","last_seen":"2026-07-12T21:07:43.909145Z","times_seen":20,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/info.7b6d0bab.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.418Z","timestamp":1783890390418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/info.7b6d0bab.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1222ab\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXJGX5%2Fzjeh0IA0J%2BFdGQK9nL0OFLDapcYM8kIZ8C9h%2FoCX8Due%2Fk6SZXkFnCMuR%2FOFriePPoB1vA83xmZ%2FeGOEvjOdVRUzvuwXmURLvichbln9WR9W98tkKdMHHnw%3D%3D\"}]}\r\ncf-ray: a1a3031c1ff3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112109,"size_decoded":14905,"mime_type":"image/svg+xml","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ace88dcffca360bea8503a6220123526","sha1":"e8673cd326f467a801a993a570fe6d5e798ac5b0","sha256":"02b9617d8c37de91a3b81f3cfc72b1a320f59dd0bc378999ed122580442f2315","sha512":"d10fb13a3d0ec9e98c5eaaeae3f0440abf4ab612348f62c10c329f4c177e3c5fdf2f7bacc6aaafa13bec4a25eb921066841d58d75dbabcf30226f75b3f5e2da8","ssdeep":"768:qMgBDHbvr5JhbvDAWJbpNXsr3Y3Y313d2F+FNAnFpBSaR4bjapGIqIoyKvnnsvrL:opbYWSaEnnsvr4Z7c2ameIK2KKk","tlshash":"58b3232e4ba3214658035c786bee36402174d02b9649edec3ede5788cf9b7889ce179d","first_seen":"2026-06-29T15:02:06.696607Z","last_seen":"2026-07-12T21:07:43.921479Z","times_seen":8,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/security_audits__certora.156d1fcc.156d1fcc.156d1fcc.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.347Z","timestamp":1783890390347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/security_audits__certora.156d1fcc.156d1fcc.156d1fcc.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1146\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WS4esMX6ChSS8Rp3It%2FjlymrD1c765RCW3CRoGe9Kiy90mx%2FIblhrdrKAuRQ5VWcaNsPd%2FsrnaQ50FvOvs9NHlO%2B1ez47lbZabSImRATNd48%2B%2BIBr5a7iNhStmtLaw%3D%3D\"}]}\r\ncf-ray: a1a3031bafc4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4422,"size_decoded":2173,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"156d1fcc621739bbea76f12ab1ed3aa7","sha1":"3d12ebea79ffe1daec3b99ebdacdff4a79806477","sha256":"1657fa19eef7e9084ea5d810e12255e3fafebdefbaa1554cccec3fda9963619a","sha512":"6cca847a0107562e783d680fc627e529f20e47d7c4f2562d76b1e177eaa6015656514e85e5666ee4d343a1f8becb6fb528eef53c179414b3cb91dfa18d8ec216","ssdeep":"96:evCDQUtTBKzFVLoJYJjy6BnNco+omMjb0ARejb1:tDQUDEVLiSFBNco+oHG","tlshash":"6f91409d037d04daf5879690ea621a82396ea0a717f4c5a4f1ff1833bb138a5432f147","first_seen":"2025-10-07T03:26:06.198992Z","last_seen":"2026-07-12T21:07:43.914943Z","times_seen":20,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/instaapp.70b374a3.70b374a3.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.359Z","timestamp":1783890390359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/instaapp.70b374a3.70b374a3.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-ec9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNJJwM1ownRCyoebt2MEQyshV0m5TNWDi2ZktOkXvIBuoxtYRIpICHREJv5aIlziGMg33ROOViXsCseikZB%2BQT8XiKm%2FK6nCDzB5YG07Rw9Ag6HecrihVhyE%2BSSpLw%3D%3D\"}]}\r\ncf-ray: a1a3031bbfce712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3785,"size_decoded":2348,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"70b374a3db01bdf1a36a7e627fbcf351","sha1":"5ae8b81a6ec116babd794c4cf7b2f94122646898","sha256":"fa76ed841dd4943fcae5555438f258a160f90f686cad00a32339ca8732392704","sha512":"472b4291e4cc33fee8faa8c291256ef1a04648101fe3885196c0b32da30b69f5f293b6eb40dc7e051cf49fd67b4a523f2f2e33463cf3c19f4f7c7193ba54a75b","ssdeep":"","tlshash":"227174ceb76646f8e540b2fda31254b5258a8dc93c92e8eecba92d4ad01941c4d32dc3","first_seen":"2025-10-07T03:26:06.187705Z","last_seen":"2026-07-12T21:07:43.953786Z","times_seen":20,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/gnosis.130f219f.130f219f.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.392Z","timestamp":1783890390392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/gnosis.130f219f.130f219f.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1713\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvCWqunZwdoIa155G3ILIKZonWPFUu3QJzwSIMiaXiepnoiYeZEbW%2B6anN7sXtwmH7DXeJ4WNj2%2Bn5cTwHy2MYFN2Um1PT%2BUuihJAfLpYUhpuXZBRfx%2F%2F4RbJJg1Sw%3D%3D\"}]}\r\ncf-ray: a1a3031bffe4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5907,"size_decoded":3365,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"130f219fa7128dfe37d38ee62050b0d1","sha1":"0ae78c0c65d5dc2acb1abd46ff585acbf04b3b3c","sha256":"670fd67ba9be738032863f50d4633385047bf4e32bcf621ee6c73cadfccf0fb7","sha512":"8ba79098dea5565b4d7e5c17313541146d33e032eebdc9631c28abee4db3138e11d8cba54e81e11ce2580f65fdee76380022481bb796a90138c01f3e058f5df5","ssdeep":"96:LbcNgsh8bYyXUzv8L/MjmWLk0W8cprpkfeK4+X/6OXH+ySJFueVAEXjabXVJdmaa:HatqbYyXUWMjmW40qprpkfeK4U6OXK40","tlshash":"fbc161dd9b6082b8f005f2fdc65394b8be659cf22e46c835cbe90c0aa49509d9c64cd7","first_seen":"2025-10-07T03:26:06.254575Z","last_seen":"2026-07-12T21:07:43.962395Z","times_seen":20,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/svgexport-1.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.406Z","timestamp":1783890390406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/svgexport-1.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-2a4\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JM7JhPp5KCC9EB%2Bki1TXrPMvhO4rHKuHPOL3P810wjJLjCwZgOkFY%2FtPsvCaedSwzVbmC4YpbLRqrzr%2FKZZ9Z6Uo%2BN1L5Q%2FWR%2FsfbHhmX0TVONJqa95XbJ40w7dibg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a3031c0fee712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":1408,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"31f7cb58938fbf83f5b8b573cd6e744c","sha1":"cb022f5a8492dca317d0da36955a0dfe67541309","sha256":"e9860ce56a643f34ce9ec445b3b873ad96ddc2b5131706dd4e8ce27a36c89bbd","sha512":"2872b3fa0fbdc444940bea3a77e93d03d364477ade392f1e444f0e5d9017dd4fc9e1f63692a810fa3c743ed357019cead9a85b37c441c2c435bda948df3db825","ssdeep":"","tlshash":"fb0123d703672b74c3c2ec310cf60663790c8a148118b90a9c857336a9339f8f794567","first_seen":"2025-10-07T03:26:06.178975Z","last_seen":"2026-07-12T21:07:43.932914Z","times_seen":18,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.482Z","timestamp":1783890391482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:58 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A92535465393120F648\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13627685531916948298\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: xrnNAa+zQfXgWxiYkfa/Tg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: euTc65p2IXi8t4lQToZ0HF7R7NLSzE6quXH7P6INTGBrhFjNPIiJfQ==\r\nage: 194373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":10466,"size_decoded":4942,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10465)","md5":"c6b9cd01afb341f5e05b189891f6bf4e","sha1":"94f03126226649f985acd9278b8dfee9d3568956","sha256":"d37263fd478bbc9919c41d1c8204a82f4624547944fee294077f3ed668ccf769","sha512":"c59368f2f47366f93e007de29dd29620414e152a0d9564390f115faf03899d9a62e4377a30519d4c81026af188c73b8f00fe30eef1c48b847d62ab43ac5e459d","ssdeep":"192:ekWYdcrFPx5kQdI1p3MmWWLSR2E9C7mygdj0XtCuwxLijSy8Tl7Ds6zyRZpk32BK:jWYdcrF55i7WWWnyTMAjP8ORZpk3219Q","tlshash":"6722f81a3832697992b80c9460795712b5ed27133006d4f0f3acce7eb5a1f8782f9db9","first_seen":"2026-07-10T15:11:33.172132Z","last_seen":"2026-07-16T03:04:08.641594Z","times_seen":36,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392194\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.209Z","timestamp":1783890392209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"GET /plugin/info?plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392194\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 8eb8a1ee49e92879681c39b736ef517e\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 4bd20bbd-ca23-4d63-a43c-f8f40a01cd41\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a1a30328bb43b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4938,"size_decoded":2769,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"602c68b5fb09181b63aa4a4d83a092db","sha1":"77fd52f30a913468bdbbe47e158daef85278081a","sha256":"58282d677441c306fa802df31e473f027a89a7f3d054b56d8f8f464e21d2a280","sha512":"ea8c45862fff4fd58239cfa66564995d7b76557e4088f1a0e15d1485b514fdd3aec1597f9c9761c921ab9978225d7c847f9be103386e1a8730203247ec52608f","ssdeep":"96:CeIRZ4p/Qb2mz9dtnK+2H3ErMBL/H/ddFpfnZdSDHZ093:hIjlqmz9jnKdrB/H/LQHK5","tlshash":"9ea15070a15bc962e19308a821fc9e205d9b5bb8c0cc8a54edecdd1d89fc8f6a71740f","first_seen":"2026-07-10T15:11:33.196937Z","last_seen":"2026-07-12T21:07:43.94604Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=d5295e6175455678468f8f8ec8309637\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392239\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.251Z","timestamp":1783890392251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=d5295e6175455678468f8f8ec8309637\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392239\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 353\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":353,"data":"data=0qHafQ8hMhHKtTc8f5KWBSH%2FrTH%2Bsnl%2Fs9zwBqypyQcWPnuEPhyiyGH%2FrTH%2Bsnl%2Fs9zwyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyGYptntEPVzErdyiyQfjP3EjreOhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhyh8htnVvyAKhyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:06:32 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nset-cookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e; expires=Mon, 12-Jul-2027 21:06:32 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a303279956a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":787,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"740396d4de58a89bdd60143a28629999","sha1":"a02c10649091692a28a9f6272ee2bfa9f17ea3df","sha256":"6a9bd05a331198028b8b5b6ccda742396c308546b557d50e90fd35fce4d974c0","sha512":"36843768bb9e092e58b3f02db65c30571b01a486a907ad4cb38156bcb3d8155d644a093a126df2cd4d752e323e38fc99d136d8fe0427987cf4557682d9eb4937","ssdeep":"","tlshash":"b0b01221203881930e8540cd50082724597400014a200b03c458c31c034c54822014a4","first_seen":"2026-07-12T21:07:13.870822Z","last_seen":"2026-07-12T21:07:13.870822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=403415afc95ffc9d8fa9f53a669e15f3\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392720\u0026_lt=\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.725Z","timestamp":1783890392725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 May 2026 10:33:25 GMT","end":"Fri, 21 Aug 2026 11:33:22 GMT"},"fingerprint":{"sha1":"66:AE:2D:94:59:D4:27:FE:72:D4:A2:2A:60:36:C1:B0:DE:5C:8A:BB","sha256":"30:37:3C:6F:90:83:7E:BF:5B:35:F1:92:2D:75:33:36:F2:C6:B6:D9:89:4A:FD:B6:CB:B6:B8:98:C7:21:FA:C0"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=403415afc95ffc9d8fa9f53a669e15f3\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392720\u0026_lt=\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 339\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":339,"data":"source_url=https%3A%2F%2Frndraac.com%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=9d7facbe5939203bb33ac676c7b6e3cb\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext="}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:33 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a1a3032ab8c4712b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://rndraac.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 058b6369-ae83-4f30-8566-82ce94ef04d7\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":795,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7827487ee3ec1f4ca36fe1690680819f","sha1":"68cb067cd81e4e25000d3fb89e818d2032a0095c","sha256":"ce42bab24174f15af31d8d4963f7a06014da2f15d34f26013ade149149211582","sha512":"0fedb2de8c5fbe314cbeeafb9af52cfb7816417a72f9300c95d1f68144e5c38df500d03995adb9c67ee0d4cda2bc18b8344529bfe31ddce9c6c1b1c096f64b5a","ssdeep":"","tlshash":"cac08c17aaa953a229c3244e100c2902b14a1455dd9a922688bc832a8acd2e83263410","first_seen":"2026-07-12T21:07:13.871957Z","last_seen":"2026-07-12T21:07:13.871957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":10,"connect":15,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/ssc-iconfont-Cok29e2F.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.528Z","timestamp":1783890391528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-Cok29e2F.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 03:11:20 GMT\r\nx-oss-server-time: 7\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A5062D8AFBCCE33300A8CC2\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15621541519379884351\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VMTZyHw38prZOvfAtQLupw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: BQIEfjS-LJH1RKrbEp8nharxm7q0pBsjJTh3CrH23iPPwkXcP9Uzjw==\r\nage: 237311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":145893,"size_decoded":66059,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"54c4d9c87c37f29ad93af7c0b502eea7","sha1":"87f904b71c9afcf9ed19c7376d00b747acdde5e2","sha256":"72e216cd0db7e2cf0dae0c882196d7762f13797a6c17620e2ae48980cc1cc498","sha512":"9b3cbb51565f3cd394c7760d81b9a5b8159f25c7d65383476c14294d561b383646b6807f4790d854453755bb2145129a2633219a81b1b68b3bf74ee37da56c82","ssdeep":"1536:JunTDOzLoiyVimLONTaeMxv0UqGgzlfzLSqFpFWGFeFjF4FFcpWtE+uV+F8oe5Ix:JFoXVdU6xcnnz9u+3","tlshash":"2be3087cea5025ddfd39ce5b231072289c3630effef54c48aaa6324a5be548cc590979","first_seen":"2026-05-29T23:23:06.269655Z","last_seen":"2026-07-16T18:58:55.598082Z","times_seen":174,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/plugin-D9ZPiLYT.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.530Z","timestamp":1783890391530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-D9ZPiLYT.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 03:11:21 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A5062D97594F9313591B7EE\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13738230387522877023\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: iyX3KhAxxmbhcaI45AddUw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: cKgGshwshsJJDzCxLZca8QUgTi0XroyQWjoroch3dcv0Dzl1fjjehw==\r\nage: 237310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":315855,"size_decoded":94182,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8b25f72a1031c666e171a238e4075d53","sha1":"fd2501966f00ca4f05fca68334d49de48e43ffb0","sha256":"08b631868e960ad013517c58469ba302d1eb9ca79caa96bf8702ff9d45fe2ed7","sha512":"2c5c2a9802caeed211e24213b51110dadad6f0a88a60ede751505de74275cc4d06b1eff838f7941329a15a0d4fab205b629f05eb358e5f94f67f6246b3ada7bd","ssdeep":"6144:JFoXHJxcnDC95VSSTDSv8MHz3xQRcOcOc5mjAibMHGWp:JiXonm95VSSTDSv8MHz3xQRcOcOc5mjI","tlshash":"0e64f87cdb10313df937ca1266d0b69c6039a1e7feb30d4cba567229c2d60c94ab1a5d","first_seen":"2026-07-10T15:11:33.183276Z","last_seen":"2026-07-16T18:58:55.656745Z","times_seen":37,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.588Z","timestamp":1783890391588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:58 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A92DA989C3131626D7E\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11117890345216515431\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hROW2spQLPFFIc7LAqymaw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: SRiTHpI6OPpeselsrTS7XG7OMFRp2EV7iaJNP_1DSOdE0HxYk4ON8g==\r\nage: 194373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":52936,"size_decoded":20358,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13923)","md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-07-16T18:58:55.648473Z","times_seen":207,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-lang-zh-j7RCDKZ9.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.690Z","timestamp":1783890392690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-lang-zh-j7RCDKZ9.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-CZyB68TL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:07:01 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A95AFCCE6343393974E\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7105403390265326253\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: WYSU64IzCVyJAX77r9DOjA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: zZ_Aha6_ZRzRFCrXi9CDFWd6GRKUtABtYe3VwnVUVY7uGyTqFbrA1Q==\r\nage: 194371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13562,"size_decoded":6121,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13561)","md5":"598494eb8233095c89017efbafd0ce8c","sha1":"d82e737ce18bed0717f202ee7cf72d047e498ecd","sha256":"08aafe35e22d7c3c74c00c632c43fd51d832bc469251952355daf7787cfc22da","sha512":"87c3d4a6dd85e87a62236113b81c34c88dbe60c3e5fb872a9a1931a942d541011ebc6fc6b6c288429b023ba9720ccd971e2d23c6f83f6333e51d6868b1ef1942","ssdeep":"384:cZkpgCp57gBKejSGeHg5+YJxmgM1LKRN8VgsoUGLoZQOuHrhSGXvIB0D0Ru/:2TCDUBKPA5XrhHsoUIooHroYvIyD0c/","tlshash":"2552413e9ae2141a24ff41dcec85179e5ad1fe05200bcb6f95bcbae1b301451e59b339","first_seen":"2026-05-24T06:20:46.130364Z","last_seen":"2026-07-12T21:07:43.960729Z","times_seen":11,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/transak.76404065.76404065.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.376Z","timestamp":1783890390376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/transak.76404065.76404065.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1027\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwbFpdJd0AbcKe%2FhYSMASU8In75g9aU33ZNknT0EWxSuX78vggh1KRh3Fnyj%2FcF5RR7zDVXrPbeEJ7iRp%2FUSnC819dYE8KEO3JG5uTspTK7cN6mcubfAsJySl7IIFw%3D%3D\"}]}\r\ncf-ray: a1a3031bdfdb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4135,"size_decoded":2544,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7640406527e6e094f983fded77c6a408","sha1":"4ddeb11f92c941bd5482bc4b2fef5de5ce223ae5","sha256":"3e2f9a58dd6ac4bec258ba52ed0fd8b7f1b0439d20bd445cad0a37372ae4b5e8","sha512":"b7941250e6fc90e9a7777736fbf6a4211e26389deaf129291f3694a50f8e7b609da15daafc01b93aa84120924a4793da6301673375b0a6e24b45ee491041a355","ssdeep":"96:LKuDdG25zsIEw7prCzCRUa3yIqjSM/cbMZ:JgRozusfqjrcQZ","tlshash":"df81948937f451e9a008e2e867b670bc267e12a37e71c01843ff7964daa550d8a64c83","first_seen":"2025-10-07T03:26:06.252294Z","last_seen":"2026-07-12T21:07:43.944291Z","times_seen":20,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/unstoppable_domains.36136ae4.36136ae4.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.398Z","timestamp":1783890390398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/unstoppable_domains.36136ae4.36136ae4.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2431\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YPO9%2BsCtphtBwuNTuJFxjn2MctTK2s114YNW4Gzzq6dKRl9fcRut21uIlxEMSUrqCGzQFtE9p9gxvoLt9jAzNlGYxRSjD%2BZ2zkET0M7SVp1tCIPN5nBW6mrT5phRaw%3D%3D\"}]}\r\ncf-ray: a1a3031bffe8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9265,"size_decoded":4395,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36136ae4926ba3ef3e3f6d8710488adf","sha1":"318f0a28f979436e757ab387adadd5f15fadab5e","sha256":"6a7dd1fa04c4f426af81a6930b98279cde06e4fa0904291129c1d27843a78da0","sha512":"845fcbd91678ad63136ae191637002d0c2103be9f4b8e158f1488615a4b468302096b9ecbc4675204f29a8d34e8974916d57e7e15a6be098f7d2a6c7a68268bb","ssdeep":"192:l/cJ0HeTiLR8G4FDCDJRQUaFEDSJMm5VknUdj05y4pyA+Dx:1cJYRr+bwSJ/8nIj0MQyhDx","tlshash":"a212a6d4a7d6a3f8e109b3f5871059a9be0a69fe3d01e210c7ec1c56be1106ec819ce7","first_seen":"2025-10-07T03:26:06.154309Z","last_seen":"2026-07-12T21:07:43.93244Z","times_seen":20,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=ce91012c2d73170ba62787a83ada623b\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393810\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.813Z","timestamp":1783890393813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=ce91012c2d73170ba62787a83ada623b\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393810\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 513\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":513,"data":"data=0qHafQ8hMhHKtTc8f5KWBSH%2FrTH%2Bsnl%2Fs9zwBqypyQcWPnuEPhyiyGH%2FrTH%2Bsnl%2Fs9zwyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyQIKsNcbtNIVfVzErdyiyQskI3O4MeV%2BMe6krel8reojMeOmIQOSMel5MeD9lQDayh8hf3jar9V%2FN9VvyAKhr5up1GuvlCypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhy9lQljrAlqs9H%2BI9lSlAX%2BI2IVs5HvlQcAs5I%2BM3s5lqypyGXErdyiyQcvM2yjl5s5rARSInO5r3Oks5RqsQlaIns4r3l8IAHVyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:34 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a303315cbb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":635,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"740396d4de58a89bdd60143a28629999","sha1":"a02c10649091692a28a9f6272ee2bfa9f17ea3df","sha256":"6a9bd05a331198028b8b5b6ccda742396c308546b557d50e90fd35fce4d974c0","sha512":"36843768bb9e092e58b3f02db65c30571b01a486a907ad4cb38156bcb3d8155d644a093a126df2cd4d752e323e38fc99d136d8fe0427987cf4557682d9eb4937","ssdeep":"","tlshash":"b0b01221203881930e8540cd50082724597400014a200b03c458c31c034c54822014a4","first_seen":"2026-07-12T21:07:13.870822Z","last_seen":"2026-07-12T21:07:13.870822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/images/logo333.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.060Z","timestamp":1783890390060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/images/logo333.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-3b6a2\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Xi%2F2DdehVDRJunoNPWc4ARxyec%2F1%2B9frb9cJFulF3DMNzjMxwuANC%2FywNYBHdujNAkM4N1rC9QCU8t1aL7CgOXfoiGInUZgbUnxcZ1UzcaDVqYW5NwMc5oEjzgDfg%3D%3D\"}]}\r\ncf-ray: a1a30319efa1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243362,"size_decoded":238041,"mime_type":"image/png","magic":"PNG image data, 741 x 764, 8-bit/color RGBA, non-interlaced","md5":"f6b1f7f927c2e2f55a061c06e17422fd","sha1":"7876c103cd8a636c813555b22c4f723b70613749","sha256":"be2a0096a92ab226c30be1f6e28ac8a9452959e4136f2a8c16776427544b1dd9","sha512":"a3039118d6cb6da9237c58fa565c979bcd00ea9e38f25a865523789eff6d0f6b955ed90c4d9e8aa85419bec475bceb875f5c56f63a23831433d787d6e8e8c7b5","ssdeep":"6144:+Pkbwjs88k/fjAW8H4gMWizUesUNtyy1oGef9i5dmMw4TCJ:+swsDe8WUMWizUMcjGef+ALJ","tlshash":"833412eacf97a573a3b4c7e12671bcd361cc6987d505108c0e5dc3d21e7c0878aaa578","first_seen":"2026-06-25T16:51:49.029889Z","last_seen":"2026-07-12T21:07:43.916845Z","times_seen":13,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":606,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/jquery-3.2.1.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.083Z","timestamp":1783890390083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-17b8a\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yLUxiDK1MXkWgEjnL7W6zEhog7okM2FctCmyoxW1cmyjryfQd9S%2BCFqy3%2Bcj1hH6YAB03d4Of0ngBD1hoC4IDQFvxVUx3zO%2BXqpc6p2qQj8oZpkLQafImAzRsvFjg%3D%3D\"}]}\r\ncf-ray: a1a3031a0fae712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97162,"size_decoded":34743,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-07-16T19:23:57.988292Z","times_seen":7876,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/security_audits__quantstamp.4e81de4b.4e81de4b.4e81de4b.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.345Z","timestamp":1783890390345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/security_audits__quantstamp.4e81de4b.4e81de4b.4e81de4b.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2a0a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45IbFGlKa9UMGvEXfGiQ%2FKBYIDRYF8LsKvEqQ0M9zgiGeRhqV3fsePzzX4cuqwAbliW8ju6%2Fmay8mtgUZucnBKarxh2EMUvvb7DBJh6dvToOLTkC13EfwOCar7Xa9A%3D%3D\"}]}\r\ncf-ray: a1a3031bafc3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":4580,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"546af5bb29b1b454686a6d829e99b69d","sha1":"e71282d798cc7ef3a6621d8238cfe31b6f2f4d41","sha256":"56f86c257f64da034cbdcf73d4e1844f6728740f72b6989af9cdc61a532c1b96","sha512":"99aef09edcfdee859bd6bf3ee5c5841e584294dee3ad9efd7c0e39c1c3c967190d55c9b16f2110ce6e3b54f89e058071344241e4cb9a9a84527beb08c19614b3","ssdeep":"192:h6CayrCknQMeFEVmRZ0fc0TAN1f3gnykHjOvU8zqZf/zdfA5L3NxSgt9oo7s:X/QMaE4xf3gnyCYmZf/zdfA5LrNtKws","tlshash":"6b22a89da5a0adb169d58b5c4c36058436fd30ab7b728229ccedb7227f039d1047e747","first_seen":"2025-10-07T03:26:06.106102Z","last_seen":"2026-07-12T21:07:43.929124Z","times_seen":20,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.586Z","timestamp":1783890391586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:58 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A92AFCCE634335B774E\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3956808462139976565\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: ofDTl1yVX934xLSevlaEBw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: A6aD1woCnE-6HBr81B85KwnI89ZXT_SpJmA8w7--LyB-oRzOheQpjQ==\r\nage: 194373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79629,"size_decoded":32460,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1f0d3975c955fddf8c4b49ebe568407","sha1":"7b559dc893e3a59fe77d9553a8af7d6931f2e068","sha256":"85a50ac089309670d7b46e44d1ef17ab132599486ba995f6f12d07f72f4dd191","sha512":"e28c1ce7e3b1b762886f98bf8611a0b33a157c355a760d83602a75df917689c2013d51d4e52faa14445af13ec9bb6eed797f96db1ebd6a8bc8955c90289f1bdc","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDi:fWYmahMqBDDAx/LANwntDi","tlshash":"507319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","first_seen":"2026-05-14T12:23:11.157843Z","last_seen":"2026-07-16T18:58:55.554677Z","times_seen":207,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/js/lottery.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.341Z","timestamp":1783890390341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/js/lottery.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-7ea\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTTFZ8V1wgVOllOUwL06aeYRoDN3ObeQ8oUrlkRJJ%2FzVz7%2ByUHKqmt0cTtSKrqXJfchdQ66Ags0mOlB7u3Iu%2BhHnKcCk8dyGwRxBtv99Ri8ZEeCNyi9SlI9FgWDd1Q%3D%3D\"}]}\r\ncf-ray: a1a3031bafc2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2026,"size_decoded":1316,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"963d305e29398f9a04d9a3b457f76860","sha1":"a42b9f877bbaca04c8281adb273bfa0bcbf90942","sha256":"7930fcf9de55ffdb0d0ec986eb9c35c3e4c2a211531e4f8b9f0f89b2adce106f","sha512":"366accf3f6990c4497654dfa20ebc89cc6612446b814b60cc7a48829654e2636c65f50c2b42c1b5a6cf2ed9e190d40bce34a091b68c98278d5013d76c8e1698e","ssdeep":"","tlshash":"7541520ea8f719b1597330f88abf1151a161c0231208ef28bd0d22d84f4a57d97a67f8","first_seen":"2025-10-07T03:26:06.193078Z","last_seen":"2026-07-12T21:07:43.948928Z","times_seen":17,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/binance.bfd81e57.bfd81e57.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.354Z","timestamp":1783890390354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/binance.bfd81e57.bfd81e57.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1df9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71mQjZqwXEoM2FumdbSAHCKlMvG6t2v93yHnV7cjb94qGWgqpbyZmote2VamR6LeBRXO673j2mF8PuY%2BFazV%2BcLSpPv0X0LbLwOxKdUT71irM57nQ7sYv%2FgXHXNPsQ%3D%3D\"}]}\r\ncf-ray: a1a3031bbfca712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7673,"size_decoded":4154,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfd81e572476b6d13d4b3752ce5fe2dd","sha1":"44fb5a109015dbcc6b72749d2e36cbe1413f0812","sha256":"80a5301d2e03b46166abdff385e960ba13594e49ceb87f24305e520a939e2720","sha512":"208b22870b3db73a227a64de821f9409504f8ab26314b8aae308cb0a545f86ab251f4a287c3f0c5d0a1509031b81f3dd9d8f41a3ffd31e4500dd8354ddedfcf1","ssdeep":"192:pE94ulQiNDXJ0cjU+952z5CJV5QGGQMWxAiRG7Kie06ohA2L:um0C6oCJ7QG+WxBie0B","tlshash":"85f1a5cd67a5e2f4f400f3fac23254a877476af66f61d760cb9b6c12a55209c8826cc7","first_seen":"2025-10-07T03:26:06.163691Z","last_seen":"2026-07-12T21:07:43.942096Z","times_seen":21,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/dappradar.e1a29dea.e1a29dea.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.370Z","timestamp":1783890390370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/dappradar.e1a29dea.e1a29dea.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1692\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hc9vl4Vr6KjblGB5%2FwqqH7ezub0Ba7GFmBo%2FS1dWfSU%2B6MiBWp19lyu4VRiikQhCfvQCeAcPLBWHlKGfCyAGyA15UMhQCgn74H6W1knEcGLghYx1cX78Ey6r8quODw%3D%3D\"}]}\r\ncf-ray: a1a3031bdfd6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5778,"size_decoded":2817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1a29dea05b2432fdfc23063e39744b7","sha1":"1651ac9dfff529ae572aee96ae926a12366013f2","sha256":"894f6b7b1a561943c1e14b6ead6b00446a1a388ba429832c03b2e848c3240805","sha512":"bed4143b46aa85beb4f50e2c232ed052c91d858bae6ca3032936c9bc30587b67d77ad22aacbf8c0f2f338e330dca03cda71c77ec3d6352738e30db883f4c888c","ssdeep":"96:LwrzbPa3OZnVkmoL8rr+RwB7+6CISYvp6kHgrcZpxc5KoNVii:srzbPVHoLsaM+fYvpxHCKepb","tlshash":"cec185d8abb05268b508b0b9c699e4f93d225df57103e060d3fc2c1f6af112e8925ed3","first_seen":"2025-10-07T03:26:06.261741Z","last_seen":"2026-07-12T21:07:43.943698Z","times_seen":20,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/unstoppablewallet.bef8a344.bef8a344.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.403Z","timestamp":1783890390403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/unstoppablewallet.bef8a344.bef8a344.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-11b7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=padHovL2V10Zg3FxL6Q55K4tBd4%2F9ffOvn2I2cS81sR8RtJq%2BpsyL5eQGZe7GvwjQ9J3XqHBZko1VQlG9TH1Xw53hXWZQ3tiHxLcl4B3CsqI6t1weIO3%2FIe8pOtAcg%3D%3D\"}]}\r\ncf-ray: a1a3031c0feb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4535,"size_decoded":2450,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bef8a344b82e4388c07f419be684cf67","sha1":"a30a9e0d8b63bd0d1d565fcf23441f735d287a46","sha256":"eefe56b2253f78acdd6fa25d471f2bd4f32d6954e849b1aa9c4319c7a12750a4","sha512":"51362342e9afa65548aed7e74b48c62d96897385d85cf1400a1cffcc579aeed52585bb66e33eb556b079dfa07d0952fc81b090deb53eba91f0822fdba3988857","ssdeep":"96:L+Sf84RLvT6fXWoiOHt8mADKv1SkKVH5pSs6TAa7Sr4d2u/M0XzkSWEHRaX:AMTT6vZz8mADKv1SxH5AasScE0bWr","tlshash":"68916698777092fcbcc66378972158aea4272d9c39b1d07c83c96817e2d309e885c9d7","first_seen":"2025-10-07T03:26:06.216246Z","last_seen":"2026-07-12T21:07:43.93769Z","times_seen":20,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/favicon.ico","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.778Z","timestamp":1783890391778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6InlJc09aZmV5UGdycFVGZkgzdjg0WkE9PSIsInZhbHVlIjoiTEhSZGJkUTRTYWVjcWNpRnJLY0M5emlMR1pJTlA2eldPV04vcGdHeHhjUDNLajU2Q3Rld054QUNpZWFRYzZRdFNOcnpyMmM4NnpBa3ZXenE0YmhITStkeVRZTnQrNjBESjNKcXVyM3ZIamJxR0g5V0Nibkx1ZjZqTXRkNktyRjgiLCJtYWMiOiI2ZjI1Y2VlYTA4Yjc3ODIyNTI2MWVhNzVkOTI1MTM0MjQzMTNjYTA3ODI2MDM3MTA4ZTEyZWMzOWZkZWNhODNlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:32 GMT\r\ncontent-type: image/x-icon\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3bbb22-0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUBkbfF3q2UhgpYCgZxgqmW6bRjdBkIbznMVVmPgJj50%2Fd%2BBwJi6ls%2B8fBhRUpCtDoY6uTHxUkatWpqRubTH1gG%2Bg7AnW0Hynhyv4qxKn5Dovx0OarWAYM%2BpaKeD5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a303249856712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":690,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T19:40:23.978724Z","times_seen":17296388,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/g1jtkav/p1/integration/plugin/image/20260401/1774980000831/image_1774980000830_3027b80f3127900621b423be25b.jpg","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"143.204.238.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.723Z","timestamp":1783890392723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/g1jtkav/p1/integration/plugin/image/20260401/1774980000831/image_1774980000830_3027b80f3127900621b423be25b.jpg HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 6721\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 14:26:54 GMT\r\nx-oss-server-time: 21\r\nx-oss-request-id: 6A51012E75AAC536361E3236\r\naccept-ranges: bytes\r\netag: \"9AC7637CFAFADE28E1AB1F20F8D6E8DA\"\r\nlast-modified: Tue, 31 Mar 2026 18:00:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9500521526859711011\r\nx-oss-storage-class: Standard\r\ncontent-md5: msdjfPr63ijhqx8g+Nbo2g==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 217e7e1681602f97edd05a1be6d5e5bc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: pq4-BZh8r8H2NukqZxl1g3Ld53jF_sAzByEXa0uWv4H1sWf6iz0eaw==\r\nage: 196778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6721,"size_decoded":7400,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"9ac7637cfafade28e1ab1f20f8d6e8da","sha1":"77631034701ea2ad07117336c87ff7b05269cef5","sha256":"bbf1e17646e0ec2f443d38e178188632791f0bd35c5083d7e95985dc0db6a8f1","sha512":"5d120578ba6c36f75bd687ad49cff3a971c5431731d9b891f16bac85c371f30c3fd1d4faff40bdffbf5d7773caadc45374db4313990d216655be856dc5d3f49a","ssdeep":"96:AyZHFo6yqGU8hv04P0pKCN25RXepfGwsmI5p5OHGMqE1RfD4YFAf115z:AsFo6yqT2zCN2repGwsmIHYHRqGRD41","tlshash":"63d18d8f6d69f349e8b1e27ab2d07809c7433e36facb275f5a8040641ec05a0489fa04","first_seen":"2026-07-10T15:11:33.231336Z","last_seen":"2026-07-12T21:07:43.916227Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":30,"connect":8,"send":0,"wait":11,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/css/index.a5c69d49.css","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.030Z","timestamp":1783890390030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/css/index.a5c69d49.css HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-16f21\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nytzUfqXSbU8cghSo0YvTF%2Fc1YKfLEE3JvHBZtwDD9nfPeCpAfH%2B3jDv%2F60WydRzmWCVn53sMAFEYVEa4TvxP2CyeMdQfKDykJse1vUlkrTvVrTjzp%2FZ05xrbjkKBA%3D%3D\"}]}\r\ncf-ray: a1a30319bf9c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93985,"size_decoded":26706,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e29fb5b8c9d4b7f9b2888a33652fd9c","sha1":"528fcb33d3b1e7efc7c76b52368ca83fd6e870de","sha256":"90ee6634455ce38498e00377912a34269ad088d1e4eff9c5e467e564c7bab64d","sha512":"dd9117a6edee46e9f3ee636b581da63dd78e4ae1dfc853833aa16ce02dddef010a04ca4b67c6cf2604c799ac26508b249afbb766b00552787dccd0d04298d3af","ssdeep":"1536:BlIUpuK7hmVmg26S1Wu3xdynf7DhgnOhlNb0:wUpuK7hmVNS1Wu3iH6nOPi","tlshash":"5b93f83719012e3ae52bcd16b6c1ab4a1e60c133e15307adfbb476288bcf9c9167b745","first_seen":"2025-05-20T00:16:39.803029Z","last_seen":"2026-07-12T21:07:43.969618Z","times_seen":29,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/furucmb.1d88a0d9.1d88a0d9.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.374Z","timestamp":1783890390374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/furucmb.1d88a0d9.1d88a0d9.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1985\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=244TGbdA28fmGutDv5%2Bvw7%2Bsz3A2uXUqJRkOUmKHacPO5aCaTXeDfjNf8ipmmCP9quE2GunmuYkzh5LFtS6VgOW2%2B9mbtRcdpahxuGH2oncbQhqTRUwFyge9mgoYxg%3D%3D\"}]}\r\ncf-ray: a1a3031bdfd9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6533,"size_decoded":2959,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d88a0d98b9c1b3ccb96db96db6300e5","sha1":"86eaefed96b705de4bddfc60c68e4cdfcfe86d7a","sha256":"1e7783111b6d9f0e484fb76f08de0b11aa01eabb6cd208f6de97e52bd6006194","sha512":"1eec810042475003a7b948701932f9120896189c6de294fa8e9c46f4edd8807594a24fb03ea6952e0328e0acb95a93c721bd2f39bfe9cecb42650389f142a023","ssdeep":"96:9Ic7x7Mmz1VU+j0KSjunp2ZdMdo46GwXyG5gIcvcU6JLxa0t7vMOzNjfqSWZ4SF:9j7x4o1++jFdnQZyVwCGXc27jFE","tlshash":"71d12359332dc2a86a09e77d0b0f987a6b6654e0ee94e0a8cb512507bd414ff0d6dec3","first_seen":"2025-10-07T03:26:06.264219Z","last_seen":"2026-07-12T21:07:43.906152Z","times_seen":20,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392194\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.212Z","timestamp":1783890392212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"OPTIONS /plugin/info?plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890392194\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://rndraac.com/\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sun, 12 Jul 2026 21:06:32 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://rndraac.com\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 650fb53b-b8fa-452e-a5c4-2bdea73ac5b1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a303277945a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":728,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T19:40:23.978724Z","times_seen":17296388,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":8,"connect":16,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/venly.66445664.66445664.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.378Z","timestamp":1783890390378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/venly.66445664.66445664.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-d62\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vYfMWdIVHL1qgAagEhOB097Zlls7kRgHuBnD9Wc%2BpDGAK6jyFHvA9e9xLi%2FTkJflyWiMZV0067n1drHAU%2BeMX%2FckMJDNLH0lXaBKln%2BOlO6qIK7bhIlEUQ4O9OPMg%3D%3D\"}]}\r\ncf-ray: a1a3031bdfdc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3426,"size_decoded":2326,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6644566460fb1d5e5db1bad964f8a055","sha1":"b1906457147a43446bc99b6ab105fde22554eb29","sha256":"49e145fb2fc0b48a451e035b51180e57b83a05bc3aa15a4f694fcbe2249b2ab2","sha512":"44c640f88f9471b3370c7b980fb9e1ee1bb0e96927440ac89b2fcd92dbdecabd646061795cbffee1ef4d48621dfd1a4276ea50580804d6b4db8d626acdc4a47b","ssdeep":"","tlshash":"5a61944e87e283f8f186bbfdd10a60e52ad558a5b613d078c7c23c11d4a304e8ca18e7","first_seen":"2025-10-07T03:26:06.113696Z","last_seen":"2026-07-12T21:07:43.944898Z","times_seen":20,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393024\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.029Z","timestamp":1783890393029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"GET /chat/chat-msg/centrifugo-token?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393024\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: dd3ad2659d9342c2e9ae9ddb2d52e532\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:33 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a3032ccea67131-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://rndraac.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 9d4ea52e-3da7-45e6-8ecf-c502c3474912\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":1047,"mime_type":"application/json","magic":"JSON text data","md5":"b8b22e8cbd6f779d8d3585b60824d485","sha1":"e45bfa35b85eab8fd833916bd6ef3198cb99966d","sha256":"5bd63620c9f475bedce30b3bda74299c6c7cd42e44ed1dd5fe5fd38e322844cc","sha512":"86bb368fe5c0e66acb37423818d55cf9ce0d1ddaae17b95ea5a502f4f0d2cfd9706ff241a46f75eee54b4e15babb1e36afbed7a32e020d5a97fc47f02781d07b","ssdeep":"","tlshash":"21f09e8f593c014f9bc03d6808bc5c1c4a1500aed85889d2afde8a768fa0220b09142e","first_seen":"2026-07-12T21:07:13.886002Z","last_seen":"2026-07-12T21:07:13.886002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_669122_690097_1774980133.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.343Z","timestamp":1783890390343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_669122_690097_1774980133.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 12:58:08 GMT\r\ncontent-encoding: br\r\netag: W/\"D1729FDAD8D1BDBD6F190FE5DF0CE7A8\"\r\nx-oss-request-id: 6A50EC60637FD23539A8DC50\r\nx-oss-server-time: 28\r\nlast-modified: Fri, 10 Jul 2026 07:24:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17233871809613923654\r\nx-oss-storage-class: Standard\r\ncontent-md5: 0XKf2tjRvb1vGQ/l3wznqA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: QVUZM8ECeBw_6sFoa5Q8PM8HcE_i6lP9FvY8ldtb3uwOEXbcisi21w==\r\nage: 202102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":1118,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d1729fdad8d1bdbd6f190fe5df0ce7a8","sha1":"e15a0134250931c900a84ba98c319836360357f2","sha256":"7850add8bf178dac6e8a988bd1d7bc4d47ad7c294bcaf98307fb851c4cf6ea0d","sha512":"bf98e085bd335fcabdd2f7594be2b16445d856ddf7d6b97182e08ce4f9c1f947014d196ba2b3736fe8886829982c8bd6625526533eed84188a88fccb39298ee4","ssdeep":"","tlshash":"0a11eb471c63a478bad5727b8b3f88ad3989a1433004cc10bc8dd86c2fd09e20e5eee4","first_seen":"2026-07-10T15:11:33.227164Z","last_seen":"2026-07-12T21:07:43.970261Z","times_seen":6,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":22,"connect":8,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.526Z","timestamp":1783890391526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Fri, 10 Jul 2026 07:05:27 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: oEzjTsOrY3pzCKwsHzBB57zLmwhcJk-xrHV8lF1QpCXEiGSVTcG_mA==\r\nage: 223265\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47223,"size_decoded":47882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-07-16T18:58:55.632265Z","times_seen":3145,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":27,"connect":11,"send":0,"wait":13,"receive":10,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/bignumber.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.075Z","timestamp":1783890390075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/bignumber.min.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4885\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MZJn9yZQ8sqtVolkxoJ4HmFYOG%2Bd7ULUzUxKeZf99iVE1fKe6NQf3uFyvreAjzCZI%2Fpjv%2Bz15nma6JgRp9iK6nG4Oy5Wi9UdnxhBxgsYPmF7MwgGW8bpeO5zlB9hA%3D%3D\"}]}\r\ncf-ray: a1a3031a0fa8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18565,"size_decoded":8965,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18564), with no line terminators","md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-07-12T21:07:43.946693Z","times_seen":809,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/img/icon_eth.f763823b.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.523Z","timestamp":1783890390523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/img/icon_eth.f763823b.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-141a\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCi1nqwDFsvl6xMcMLOS557heAjK52dq5Fc02WCLioQry8sq5CJWSMTx3%2BE4hiJBmqNZ3Y7a6JkIYZaIAzpWhoKYruZhk3HiQfY2awXG5lAPQK402TUb%2BUKjze4QTQ%3D%3D\"}]}\r\ncf-ray: a1a3031cc81b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5146,"size_decoded":5905,"mime_type":"image/png","magic":"PNG image data, 64 x 102, 8-bit/color RGBA, non-interlaced","md5":"f763823b6f779ff3c972a65d2b3d74e3","sha1":"bc7847ce616c57706a0011d46253cef8a16013ce","sha256":"9f549873c01c1815eeef9bf4cbdbf0351eb84f32c24940a9b5f31f687e7e93f2","sha512":"2e2078ac38d9affb45e52570ab6c813af5aa951111903bbfd81f8e39df40a1c4b7bd245a73e1d9d3d8d444abbc69993a32ac1cdc10bd3c4ace8a54eca84e8185","ssdeep":"96:IHj26FbfEQepmefNcjk4QdykY9k8kR/BW0OzRvH5bArY5PPqWmvUBswL:IHj7FToAkqV00fae/BswL","tlshash":"a4b18e70cabd372c9e1945669770246ba93c0489f368745e0ef6d03abc89f6e692c905","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-07-12T21:07:43.934463Z","times_seen":84,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/api?address=false","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.389Z","timestamp":1783890391389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /api?address=false HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Jul 2026 21:06:31 GMT\r\nset-cookie: laravel_session=eyJpdiI6InlJc09aZmV5UGdycFVGZkgzdjg0WkE9PSIsInZhbHVlIjoiTEhSZGJkUTRTYWVjcWNpRnJLY0M5emlMR1pJTlA2eldPV04vcGdHeHhjUDNLajU2Q3Rld054QUNpZWFRYzZRdFNOcnpyMmM4NnpBa3ZXenE0YmhITStkeVRZTnQrNjBESjNKcXVyM3ZIamJxR0g5V0Nibkx1ZjZqTXRkNktyRjgiLCJtYWMiOiI2ZjI1Y2VlYTA4Yjc3ODIyNTI2MWVhNzVkOTI1MTM0MjQzMTNjYTA3ODI2MDM3MTA4ZTEyZWMzOWZkZWNhODNlIiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 23:06:31 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cEu7mU%2BShff8v7gXeZZYz9kaPqLelzhy5kU%2B2IbcvZMuk%2B6NF0NEhTJMx58OProR12vS9DFmZN6cg7VO8kHhX3737xvF23bXgDH9Uzsg%2BQTrPDP3lTH%2FpOj0I8Ciw%3D%3D\"}]}\r\ncf-ray: a1a303222846712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10335,"size_decoded":4698,"mime_type":"application/json","magic":"JSON text data","md5":"e98d35265000a3da8b0a7e110f23e72c","sha1":"b2363b82939ff172da831583fee508c379793142","sha256":"fbbee471e3de2543f23d7656c3d49dc38832a7ad3aac9b3ce562f9bc36b3ed1b","sha512":"9209a37f554964352b50164df1b22cfd38a0553efaac7d5c15ecc7588b155291289440ccc05e9cdec185a510b52b6a8943324f9a73f6941457a821bbf9846149","ssdeep":"192:4su8DuqXyG4eTDU2GpJtSkxlXHo7dZ2saTbqg7WirS0S9:QTDvhGyo73raXJdrS0O","tlshash":"93226027450c7f2af841bb50866f84666dc73bc80ba84705509ed87356f037e9ea32fa","first_seen":"2026-07-12T21:07:13.888981Z","last_seen":"2026-07-12T21:07:13.888981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/css/common2.css","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.032Z","timestamp":1783890390032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/css/common2.css HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-ba42e\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5AuPvNUI5RWudLUErqSgAHcJ9uOpK%2BXm%2B36YTwHvvQaipwH9f91ONisLTTCyf27HC5m8NtT8viYhLoLgcbb5%2FViFZ569kefIvLzMjZxjsNpa90UTkvRZW6SEu6n9w%3D%3D\"}]}\r\ncf-ray: a1a30319bf9d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762926,"size_decoded":147519,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e56e90863c2203b9581da5e63922c0f8","sha1":"82a6e7b9bc2867392892e1bd17b07e888618bcc7","sha256":"119d66d11c48345a7012c7202b22ef3e03595cf20eccda2908ada3de6c20fdeb","sha512":"8a299395847f84905fed7681828b4f72eb7326aba3f2d3bf4481b2280d0e2a5b474dc5235ec17a68ee758954b5f727dc4756fa1722bacb284d39b827687d4e73","ssdeep":"12288:dc6ezh84aacrJtRlb8xewrVsa2S6rnCa4AVXlGEbzRnQdAbhs8kqmHotO8VgGyhs:+8kqmzVDg","tlshash":"4df4d8659af31988751b845c1bee671473289083c60acdbd7b8d7748cfca7e484a2f8d","first_seen":"2025-10-07T03:26:06.196318Z","last_seen":"2026-07-12T21:07:43.965145Z","times_seen":17,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1jtkav/d4w_v2/integration/plugin/image/20260710/1783669581476/sticker.webp","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:32.719Z","timestamp":1783890392719,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /prod/project/g1jtkav/d4w_v2/integration/plugin/image/20260710/1783669581476/sticker.webp HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 12 Jul 2026 21:06:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 24860\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5401D9690BB9A2835D9D5F\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"122024C8F9FF1BE3F1512FE31858F619\"\r\nLast-Modified: Fri, 10 Jul 2026 07:46:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7899128416659727074\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EiAkyPn/G+PxUS/jGFj2GQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":24860,"size_decoded":25424,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"122024c8f9ff1be3f1512fe31858f619","sha1":"e2c9617ce2d2ab775abc8fe5958c0f41d55391c2","sha256":"ec9d35f5909c1f1d28a23e75b0f314262c3f1b582abadc128fccf9debf22de3b","sha512":"c84b3f36db10eb7e6bc4c44a460de692eaa6777d310ee68a4584683bf556e667598bf9e33afc30a52575f5dace3f79435dd7838582145ded39641a24aeb1d925","ssdeep":"384:1JPO5L9IyizFpAwxVwzFBhvr+KaEFWgqtPge+s9VvOQqI7rNH2OW2fUtUX:1JPfzRyOwFTCKaPvj9BOQqI75HDfUtU","tlshash":"d4b2e084bb21f5c1b10d2a9a7c536475741a48258bcef3ac73a264fa3c778dc0e8056f","first_seen":"2026-07-10T15:11:33.207531Z","last_seen":"2026-07-12T21:07:43.926313Z","times_seen":6,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":133,"connect":22,"send":0,"wait":194,"receive":4,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/peakdefi.2fce9c3f.2fce9c3f.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.371Z","timestamp":1783890390371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/peakdefi.2fce9c3f.2fce9c3f.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-aa6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDYF2DjtHZAm9aJ7ol0eW%2FvaqNEIs29P0%2BVGDaF9Zai1n7Eq6uabaieD4VhrElOFNcGtYSulIhbpCEzH%2F6qkhzjT8IjC9hyGRy6zYgFnsWaYGm0eIeA3xgzFufQxyA%3D%3D\"}]}\r\ncf-ray: a1a3031bdfd7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2726,"size_decoded":1793,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fce9c3f9bc5965f0ef0a2e440eab492","sha1":"8dd6a5a9db732b2cf04e0666a9d6e777f8681e21","sha256":"456b5fb96813fff94bf7862878a461180a3a20303f0c71bdb582126d51b44ca7","sha512":"829035b71e4619a4bed7448ca2fa1b48658c3fb811bbd806cb98b153d97956f0b84af90cfc060212667a65808467f38b7a8c423bf4bb1c89995bb8a32a7398cb","ssdeep":"","tlshash":"cd5144d9529d61d4b904537a8f1a467e7a3288f69664e480cb622e1f3c104ff0d7cce3","first_seen":"2025-10-07T03:26:06.236414Z","last_seen":"2026-07-12T21:07:43.915468Z","times_seen":20,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/w3model.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.078Z","timestamp":1783890390078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/w3model.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-68f32\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGy6cNNFtDM9NkEras1RJ%2FYS5Y0fxxDm5H0UXtKdqcu0VgS1eX9qCRdkwr5GQrmrRK6PUc27FDZO0nq2QnD2auqLhY%2FQjDPMnZqwQeuVhu8%2FyjfY3D5v0k15GsKIIQ%3D%3D\"}]}\r\ncf-ray: a1a3031a0faa712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429874,"size_decoded":205288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44112)","md5":"aac4569bbff2c557800aa919fb86114e","sha1":"d19621d1d38e488b417c28b3efd879b481566d80","sha256":"5851c751870f4d385689f84d0e346c92234a1c7776f98099222eb30565370864","sha512":"c7498c4cbc7f499a907eadf8de3895070e007505654dd31579067b2de7075a0fb5a1acf3b869d68e0e31ca3bd3c5b99c27a14e6cdf5401d5c25e546c579753a0","ssdeep":"6144:g76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:O6d9DZzaneYZEl5+qQ8zztN85","tlshash":"8394aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-07-12T21:07:43.941583Z","times_seen":50,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/scroll.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.092Z","timestamp":1783890390092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/scroll.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-408\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LkFnHUl9btaOg%2B5gHCdKykHr0hrtp%2FjumG7mtBa35ktj9S5NCXN3pyd51hAyEfMcDITDCqlleNlTRbi%2F67a4yKuToX2KpoDcl0CiGvXdwsZOvTrakJwUcDzQrqZ7A%3D%3D\"}]}\r\ncf-ray: a1a3031a1fb6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":1215,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bf35d07d8e8152817269bc6fcb32c80c","sha1":"115bebd455b9bbc3de9a9d23ac1c35c210cdf47b","sha256":"b9743de589958ed4392a78726e1432fcc552687e08385ec1b8276de991bead7f","sha512":"52c51160f11ad2c0dd37e997923dd07b9e90888e810f66782ad9283f4b0b4fa837341fa21411dbd7297cfa77274ecb05b91c36ba22ad872099ecf635701f9d04","ssdeep":"","tlshash":"53119bf4ff5e209a6532306784af50c9782e94339c0648277d9459f94cf9d0ca27af39","first_seen":"2026-01-18T14:58:03.467977Z","last_seen":"2026-07-12T21:07:43.927805Z","times_seen":14,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/svgexport-2.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.407Z","timestamp":1783890390407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/svgexport-2.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-34c\"\r\nexpires: Tue, 11 Aug 2026 21:06:30 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIe4pu0c%2BmCeLVTmer4ME0FXFXaA1JNIGl9jK0Hh2RG7j%2Fzln0uNvvrTcOgVHpYnjC2%2Bku%2Fo%2FLorDyh5cxXTQDcjsMYUzeJWSTnckF3PSfzJ17kyjKMkuJTgUteWFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a3031c0fef712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844,"size_decoded":1574,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d96be76bb5d8d7657f2abd077de64379","sha1":"96f4499276e20886488e34fe641c2a3129551061","sha256":"a04a779c67646c86803f987bfd1fcadca2444b3d7834bd501cf55267b0e8b0d2","sha512":"3eadb8f3dc4df4e64a4d073b5b3d6d1eb9ab8ce2e35d207734e331f36c7d32b7fd7b7bd4160480738c0e2bba1356c6fd9ef69bb4356c3ec3ac7ab0fe5e203a59","ssdeep":"","tlshash":"d40175a3c71ba954c9dd6b314ccb6e720a0b917d4261062f020b7fc75c8777b20da207","first_seen":"2025-10-07T03:26:06.279142Z","last_seen":"2026-07-12T21:07:43.945431Z","times_seen":19,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393308\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.314Z","timestamp":1783890393314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393308\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:33 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a3032e3f825687-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://rndraac.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 32658290-cb47-49cb-a180-b428f54095f6\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":713,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-07-16T18:58:55.667152Z","times_seen":2105,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/images/shadow-grey.png","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.902Z","timestamp":1783890393902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/images/shadow-grey.png HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/assets/index/css/index.a5c69d49.css\r\nCookie: laravel_session=eyJpdiI6ImlwWThBK2lqemJEMEVCMGtubmxNREE9PSIsInZhbHVlIjoic1llSS9qQUIwYXo1a0d5R3FCZ0FxbVRLbjkxcUswbXUzOUx4NGlNY3JTNzFkRHVnN1d0Nk5ubTA4TjN2YlZLdGJFbUg2REwyVUUyemJIZUNBZDdkMkF2dU52ZTVqdzdoR0llZWpCTzk3V2g4Wkw0dFEvQmRUV1pTeDBnNDNwVWgiLCJtYWMiOiJlMjk5NGUyNmU2NWRhYTE3ZDRjNGZhMDk4MTQ0MTRhMTFlNTY0NDMyMTMwYTdkYmU4ZTIxZjcyM2Q2MzBiMDcwIiwidGFnIjoiIn0%3D; _ss_s_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:34 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=4,i\r\netag: \"6a3bbb22-88\"\r\nexpires: Tue, 11 Aug 2026 21:06:34 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdFQmqCvGfBBhWKRMFLFttIkhquJEdgSDygBrKKd2CFuu6RESi7R8SYS13K51M7kRncMZkYk1HmbY9JUi25tSEKCaG5soBv5B7mrDCADf6KZPCTF0HQW%2BNFSF2Ct3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a30331e8e9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136,"size_decoded":857,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-16T19:09:14.271671Z","times_seen":17191,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/clipboard.min.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.086Z","timestamp":1783890390086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/clipboard.min.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-28f9\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcpmyAAvWTRAk0zc2Mr9%2BmgDTspz7AgDPqQF9K%2B%2FS1niEvcbaQqc88SZvIorv2TQHqyaaJGqovjOQ2qd9hME5yQ5DdfE26po1GhJ5i29TLYzyMv8ErdUODCTxF7VPA%3D%3D\"}]}\r\ncf-ray: a1a3031a0fb1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10489,"size_decoded":4146,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10396)","md5":"0ada63b6e3a8a44f2b90b59ea02bcc76","sha1":"d95e207a62c5c223610cad1b3a8e01ac96a185ad","sha256":"6a570be3a0d236133803873c360529709de838739848397c76c9186ff6bf3bb0","sha512":"d9f26d0c63d1f4a7397d1e3ef622d6121f55da2c6685a45aeb647e53a32cea0ba833482630cb9b46a0ef25bc68c8c820378b8dbf8d3566956c2e114dcaad1269","ssdeep":"192:YCHX4U7153pB7BoWsBwuLJoHu4wamacW/C8ZU10QkAVJNeSjSUzo:YTe36WsB9LJqwPVWacJQnjSUzo","tlshash":"95229658729071b196e760a9513f424bf332a469609a80d4b239d8e1bdbcdce5427f38","first_seen":"2023-04-08T20:30:18Z","last_seen":"2026-07-12T21:07:43.924765Z","times_seen":92,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/enjin.ab823c16.ab823c16.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.355Z","timestamp":1783890390355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/enjin.ab823c16.ab823c16.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-c49\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZZ8OggDqxprnxA82ON%2B5hJ6%2ByutL50HdBEW9K0QAbYVvBzJ8Yq1BYLzIGS80zsELlTzBwaCfc%2BgPthT5HFCEnOG4cFOdVhhAafCAR4LkXAluPQioGsNLuCUC%2BS8OA%3D%3D\"}]}\r\ncf-ray: a1a3031bbfcb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3145,"size_decoded":1908,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab823c164f59a3c140e962324fe51c77","sha1":"74601be1acb39ce75c1c0255b9e3e5853dacf288","sha256":"4f5d5e53c099006b1ad6bcd78be0b37e45eff793506f3b31ae05e157650ad0de","sha512":"98f92c3c973ae0a97a1d20b7f7fdf22d8263ce93ab3947898e5171a45db1876fb23327af7eb2245d221ab453ccad1b464410eab6b7247bcb5ee93f2327e5ebb6","ssdeep":"","tlshash":"e8512258662542bcb30ad7fcc74d98bc8dca68e0a55589e8c3d33e66a401ced5cb0dd3","first_seen":"2025-10-07T03:26:06.247655Z","last_seen":"2026-07-12T21:07:43.957175Z","times_seen":21,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/coinbase.7afd176d.7afd176d.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.363Z","timestamp":1783890390363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/coinbase.7afd176d.7afd176d.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1afd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrlCEP7BOuCz90ouAAM9FBb5ptzDyDcNkepvWzD2UbV1d%2BUb%2FL5e1AcGrXDxUXjOL02OcStezRz030HT46t%2FOUXFsGu0j40L6BZJ34K8Ej6oN1zTBMk6H1USAXbfFQ%3D%3D\"}]}\r\ncf-ray: a1a3031bcfd1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6909,"size_decoded":3566,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7afd176d71947d5df9aa0481d754ecb1","sha1":"adb4dea5030a47c24be9e33a05914f4e567b521e","sha256":"dfbf25df895974c919b0c06d6b004a6d7768797f8094b1b2f3e3f96606d930a3","sha512":"8827f46dee0b5b2e4d13e9e4f6094e626721ef6c55ae54c062fb4441d5f7bba6137f1d9e97decc3a373e596b4340dcd794e28c9a0b4dca3851225db15dc75aa4","ssdeep":"192:vjROk4Uv241QmgtizjLMN1UaBLIYz78KHqF:v1EUvXQttWPMM","tlshash":"7ae193ed277581e8f58aa2f6c767a8f8bd924ed11d41c924c7a60c1fa8a101c8d75ccb","first_seen":"2025-10-07T03:26:06.233474Z","last_seen":"2026-07-12T21:07:43.904772Z","times_seen":20,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/alpha_wallet.0700ec50.0700ec50.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.397Z","timestamp":1783890390397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/alpha_wallet.0700ec50.0700ec50.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-18b0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuhoIan4cSBNmtd85FrpTiFEfbWJT0fbbvlQBL%2BV0zZ8PvwQmQARGxyY1It2aIYFCIwdN5u5himfvbZ%2BLWkY64Tmiwj94F2vaEAbL1FHAf0iPslw6XYbuXAXYedPtg%3D%3D\"}]}\r\ncf-ray: a1a3031bffe7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6320,"size_decoded":3414,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0700ec50c33629832d667260c6df50b5","sha1":"3e72194305101995edb017984aaa2400952aff73","sha256":"25c38688cd27bb66e8c55b51686a8ff9cd759db77adf99877a673c76ffbc851e","sha512":"9bc8b4e78e162890aaba803f1be4ec6e35bb199c89667f6a5c4228638001632bb705ee3bdde89083bbb5dd96542ad660a2698e108926a545e6475be515b9c8f0","ssdeep":"96:Lwptpkx00Extgg8EbT6UOXIyEa1Sixq9UJosLcJZjGBepyzXxEmim/b7C:ykixz/bTmn/Y7206BEyNE5AO","tlshash":"3fd1a5c937b583fcf8069bb8936b90747a559dd63911e958c3900c66f8a106c8deeccb","first_seen":"2025-10-07T03:26:06.116496Z","last_seen":"2026-07-12T21:07:43.931392Z","times_seen":20,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:31.591Z","timestamp":1783890391591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rndraac.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 10 Jul 2026 15:06:58 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A510A92669A4C393229CAB7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 10 Jul 2026 02:38:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12708522076119217507\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: 8qJFifcjKSlc2ZVLi4Kniw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: wyEMlq9kM2TAJK6fZIHcR2S49hQZz-UVhfyDm54LcXiDDvruKJXTCg==\r\nage: 194373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":50154,"size_decoded":16351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25425)","md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-07-16T18:58:55.626608Z","times_seen":207,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026direction_type=1\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393308\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:33.315Z","timestamp":1783890393315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026chat_user_id=f84a489a808d30d418196a78338562e5\u0026direction_type=1\u0026plugin_id=g1ljqd1\u0026over_time=\u0026env=chat\u0026_=1783890393308\u0026_lt=62c1f32cba7c725a53ec2d2dcc3a8f33\u0026_u=dd921363f875a3da8c82bc55f4dc062e\u0026_xma_=669122 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: c856f0b6a9cca7fd5a41c9d03f414e1c\r\nOrigin: https://rndraac.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: ss_uid=dd921363f875a3da8c82bc55f4dc062e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:06:33 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a3032e6fcf5687-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://rndraac.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 37452fff-0060-416c-816b-7e5972d192bb\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":778,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-07-16T18:58:55.654844Z","times_seen":1849,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/css/lottery.css","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.038Z","timestamp":1783890390038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/css/lottery.css HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-17eb\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmDLmay1hrarQHPiJOHj8l%2F5%2BzkkXjqsqWJ1n4M3XP73dYrlBXmr9muSB0nW19M7dO%2F0nJoP0r0aYSBSsP7ZKdzy6Zb9pJiPKpi%2FjKQ1W0EjIQhZFtB0GPzHDEjjAA%3D%3D\"}]}\r\ncf-ray: a1a30319bf9e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6123,"size_decoded":1784,"mime_type":"text/css","magic":"ASCII text","md5":"627b01cc459f8fc5b7a5da5f86b0e506","sha1":"1eac7f9a9051aff4b5be072a335c4a7289182ecb","sha256":"8e949c1fb1a40c310740992b0d017a1e9472092b93743b4ff00371429caa335b","sha512":"0fb9a61cd74f43908fe5e736ff889da7dc2a4efb4a7b4e4ea7f9e04af0fde009dac3e6f74675d005255673b34dd09379233f403b74d676661df3d809e6d6d207","ssdeep":"96:XA0yBGAu4bHbJ2uQhHU5X+qfNMRqeZHFEaFICWrGo1p2A28q0Ng1a2TPxGJVBK7U:py4Au4bHbQuQhHU5X+qfNMRqeZHFEaFQ","tlshash":"1cc16a103a630a80bb3fd9c617ed47181209714b6dce8dadb79931190f4a9bce5dbbc8","first_seen":"2025-10-07T03:26:06.158344Z","last_seen":"2026-07-12T21:07:43.95571Z","times_seen":17,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/picture/security_audits__trailofbits.77c4cf4d.77c4cf4d.77c4cf4d.svg","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.087Z","timestamp":1783890390087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/picture/security_audits__trailofbits.77c4cf4d.77c4cf4d.77c4cf4d.svg HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4951\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hb3BZuDQvyyFG3%2F9m1CerpMQa6ZGs1NV1lxEkUBBhKnl%2BSAw%2F9GSjpQUjw6Uv1TmxSNYpGzMiIrFMxiQs5EF2x%2FRO8vmcGoiZTnUiQJcURLybVMvCzpwpFJaU%2BTJPw%3D%3D\"}]}\r\ncf-ray: a1a3031a0fb2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18769,"size_decoded":8881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc25d271093806a1e6f552ff08179d67","sha1":"fc827f3c0cd1968d19153c486ca2542048a6daf8","sha256":"1813597c661f35294198aca45389015e78bc957da91ea96aeacc600715962c0b","sha512":"2c64d428914597bb6e27e55bc574c60f1c3389b0f1fd2b53bad2ec693db39ad23d77026e8bdd3b3dadbd209fd9744e553fbafec306c810f3a349409458837cd4","ssdeep":"384:3t1c2EMqJGqzKPt69XOqulWRcKYbuqxJy8K+wxBBbv6vugvF:91cmsG7Oc3x2+w0pvF","tlshash":"158208f533e5c5f1b94886ec5a6550722a3234baf213db6cc9deada4fd028dc40698d3","first_seen":"2025-10-07T03:26:06.223244Z","last_seen":"2026-07-12T21:07:43.933886Z","times_seen":20,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndraac.com/assets/index/js/abi.js","fqdn":"rndraac.com","domain":"rndraac.com","tld":"com"},"ip":{"addr":"104.21.61.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndraac.com/","date":"2026-07-12T21:06:30.089Z","timestamp":1783890390089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndraac.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 13:43:11 GMT","end":"Mon, 05 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"12:F6:FD:3B:CC:44:88:79:4D:CA:6D:F8:FB:F3:F9:04:83:D4:6C:0A","sha256":"2F:98:3F:7C:7E:27:82:26:5B:D9:BB:37:75:CF:DD:CF:51:31:B0:B7:18:E2:45:9E:2C:C5:A2:2B:AF:4C:C8:F2"}}},"request":{"raw":"GET /assets/index/js/abi.js HTTP/1.1\r\nHost: rndraac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndraac.com/\r\nCookie: laravel_session=eyJpdiI6ImgwZGZoMTR1T2k4aGtMd3liU0d4MHc9PSIsInZhbHVlIjoiOGRFekhxZkppSmhIejN5a05ib3ZlL2FXNEZNSk1oZmZNZDlmNTA2cUk4a00zUXBqWDNjbzlxY3d3c0tuYUhCS2JTWHRHcjlXbXFNbC9PVUZLV1dyZmtvRmxXVmxvcXExdjJ1V2E0RjR5T0ZmTzRWYTN0NTVaSXo1c0d4c2lJWGciLCJtYWMiOiIwODczZTY3MDM4ZWFmNjhkMThjMTJjMzgxNWFlN2FiM2I2NjU4OGFmYWJjM2FhZTA5M2EzZjU3ZTczZDYyNGMyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-12df\"\r\nexpires: Mon, 13 Jul 2026 09:06:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85KzLk2u1Gto%2B%2FqLgrS3ihw2WcOVt9YKuIrWFBM4KJP%2BXNvC7xKVHsJ5y3nHAcEzLmPg1Fk5IDvsyM4eAj7JM5XY%2BAhiPBe24GWsFQZ5jz%2B82%2FYWKqiBW3DZUWYPww%3D%3D\"}]}\r\ncf-ray: a1a3031a0fb4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4831,"size_decoded":1238,"mime_type":"application/javascript","magic":"ASCII text","md5":"7686cb141a314863e4225a0459e04918","sha1":"d0c3408a5a3c1f7db38f9796eea2ae6d31f707d1","sha256":"239eaf9fdf247ae60f252352b6750733a3270b84075c455ad87464a935c15ac9","sha512":"bc8a2a470e2eac3dcfa4d78928685a2c49011e061f76efa494467cd169b7215b8c720d28645c7fb9fe7778ddc91a812fed8968291a80fc06ac307f53e647fd2f","ssdeep":"96:p8OOjUOj8lhj8VLMj8eLMj8HLMjMRLSOjtOjylZj+zjMtLMjUjVJMjqJntHeHwIX:AI+Z","tlshash":"a2a160b6e42e9c874889269419e90613756041a38ccdad037a9c463d5feec2f947f71f","first_seen":"2024-08-21T07:09:15.373416Z","last_seen":"2026-07-12T21:07:43.911345Z","times_seen":28,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"rndraac.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"rndraac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}