{"report_id":"a705e5d2-7f84-4f99-b449-41559a65d5fe","version":0,"status":"done","tags":[],"date":"2026-10-07T14:37:56Z","url":{"schema":"https","addr":"holder-zama.xyz/","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"holder-zama.xyz/","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"title":"Zama: The Confidential Blockchain Protocol","dom":{"size":72614,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (632)","md5":"3de7b160957bbad480500ed22c03df03","sha1":"6a332b96b2f64aaa367856eae4bf34d98898a1fe","sha256":"8b47f473a180f28a2d1929a580b13b06868d7ca582123334c1c05bef92f62228","sha512":"c3ce05d0324c5209987671bb710e7d2f36cf1b5353206ccd9e6a7752c6c0132ec77c8f574c9affac6a6b57bc97ce3f71123865af251f9c8b919c41e8fe490562","ssdeep":"1536:40y6C4Yf08f2xHtCEFEXGJ1oOpqEZEfEREeEOpqEHEYBsfrgq:40y6C4Yf08f2xHtCSkGJ1iqkSn+y0","tlshash":"ee63421299f0246b219388a9f5226b8a9f91ed43f9070008f1ed47ca7fc6d55bd07f6d","dom_hash":"domhash3218610559a4b92bd8a9846f80c4a629","first_seen":"2026-10-07T14:38:07.766783Z","last_seen":"2026-10-07T14:38:07.766783Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"holder-zama.xyz/","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T14:37:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"rpc.ankr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"holder-zama.xyz","ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-24","domain_rank":0,"first_seen":"2026-10-07T14:02:21.476146Z","last_seen":"2026-10-07T14:02:21.476146Z","alert_count":35,"request_count":35,"received_data":1051824,"sent_data":17918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-10-04T07:35:13.58453Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-10-05T17:10:00.051896Z","alert_count":0,"request_count":1,"received_data":20809,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-10-06T14:34:08.477959Z","alert_count":0,"request_count":2,"received_data":1546,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-e46bcc67.brucelee18.workers.dev","ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T13:55:31.407951Z","last_seen":"2026-10-07T13:55:31.407951Z","alert_count":0,"request_count":8,"received_data":968263,"sent_data":4223,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1rpc.io","ip":{"addr":"104.21.77.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-10-02T11:31:53.841541Z","alert_count":2,"request_count":2,"received_data":1599,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2817504,"first_seen":"2023-07-30T16:39:25Z","last_seen":"2026-10-03T19:36:15.28593Z","alert_count":0,"request_count":2,"received_data":1545,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3470079,"first_seen":"2024-06-07T05:17:26Z","last_seen":"2026-10-06T11:19:25.197859Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-10-05T20:23:58.256827Z","alert_count":0,"request_count":2,"received_data":2543,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"holder-zama.xyz/js/page.js","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c24786859f1412c412d4fd78a85d1da5","sha1":"36305a4f471a3d9e8d2b6391f18e51ce1e778792","sha256":"5d22ed17f72c330b5267612f44c1db059e830c269d20a82c8795812935dd58a9","sha512":"57dfdb8f79eeae411f81d0805c3ebf055ac020d8784ba31c9f6e827573a712fa2062605ded66916b4d042ef75caa89c046a59a3f31ec77f74c06a28984fc8ee8","ssdeep":"","tlshash":"3d41982eb5a23172043b63ee879f9ae836e510974142ce013d9cc8c98fe447516adef8","size":2403,"data":"","first_seen":"2026-09-27T02:44:53.597859Z","last_seen":"2026-10-07T14:38:07.852692Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/5152ad1f-9e05-4206-bb3a-315ea61d76e9","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4b1ac876cdfc4255183ee72762ef19a","sha1":"efc19e68318bde2722a7057cd64e7361d50caf63","sha256":"f06e5e96800850caa721cace7eeee388d97b33253fbfd428085e81fafef53aac","sha512":"d1cbf0e06dd63656fd7a6346a4c515ca259a91a9cb7661fc7a30bc49551717a820505fae5adc0f6f5a1222a09f9bc941604bdd6a9378600741e130fa254bfaf9","ssdeep":"","tlshash":"94f08b294fe85b4b928a4666429e2e6c065c2047737a6e32c3e6cc2241e16d02466a6b","size":530,"data":"","first_seen":"2026-09-21T14:26:22.587739Z","last_seen":"2026-10-13T10:45:26.211774Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bed96558c46d7e6396c5a1483fe6603","sha1":"d1937d202cf2698867bfe5181d527479e53938f6","sha256":"79cfcc300a793a1d3da6f525a45e27dc9298ed82757c0dac8c038ce79e8680f9","sha512":"e05297bb57bb5d665fd70e1c72dbee8fc83f7a3128fe528b9f5621ceb9d0ecfc5bddfc03eaca99c4657e0d553f40e1d5dcc99a091ccb9664e12d7751e9ed9784","ssdeep":"","tlshash":"8d60000000c30030cc3c000030c3000c003c0c333c03f0300300030c000c3000c00000","size":14,"data":"","first_seen":"2026-10-07T03:41:39.925242Z","last_seen":"2026-10-10T14:22:55.108431Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-14T17:39:48.096448Z","times_seen":862996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/334480fd-540f-4c9b-8402-2306b2d35736","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","size":16644,"data":"","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-10T14:22:55.091737Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/7ee9ffb2-b877-481f-be00-7e952f4868ed","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","size":70200,"data":"","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-10T14:22:55.094653Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/f82a41f3-60ab-4d03-b4fb-967e11fbeed1","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","size":528504,"data":"","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-13T11:29:42.479418Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/chunk.43.e0ykluku.js","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8a016af718a07aee6197e9a70064430","sha1":"61528febd3ef96fdeb48980d6e58a70ed2de9975","sha256":"6dccac5674c471018b74914483ab9378d7022e1d5040fcfee70f5c0f9d89b467","sha512":"0f9d8566b3df48810ef19cbec72529e5daba37c72ed89ba049841289f107737c8439b78f535b307bbb6e27e0ece009a988c87fda16989e7eab40bef339c37c38","ssdeep":"384:DTgrrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:AvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"22721af87365206a03633532607f9102d177eb118d5b9050a2e28a957decf6be677fc8","size":17079,"data":"","first_seen":"2026-09-27T02:44:53.599511Z","last_seen":"2026-10-13T10:45:26.202609Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/de3bf773-de4e-4163-93d7-bedfe2b4b126","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666378733d35367175bd3b01fb902371","sha1":"5a1cff402a3af4db83407f183397d556098454c2","sha256":"724408ef05311dbe5b819f5d368857c6c2cae26c98fc2ab68e2f127a599014a8","sha512":"a709acda2c50e7ef39d18cbb4672e95cd2ad06855cb0b0f7173c1a8bbdee52c6cce4b11065da9988988580fddbb106f34f33446aa35ab3c6709dcb3a5287bd57","ssdeep":"3072:8WH6HIuLo0G1i1qS+jhB35xHD7pLRtg1xumIakppo:rHi14jhBzd9tg1cLakpi","tlshash":"4164a194184791d0ce4711bde4afd448f0783b638b9da1f6a43feeb0b16cb6045e71aa","size":310676,"data":"","first_seen":"2026-10-07T13:55:50.245019Z","last_seen":"2026-10-08T04:17:33.258243Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/3f3514af-bff2-4ae8-b249-eeec2d719ab7","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","size":3269,"data":"","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-10T14:22:55.099119Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/0848fac0-93ce-4ecc-b4cf-6176bda8d981","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","size":30003,"data":"","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-10T14:22:55.095779Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-019.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.702Z","timestamp":1791383846702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-019.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo7789zwz31q-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:51 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vaUVLSxg5atf8%2B393j7kawkYCgdtN7GvRPCS8c1X44DhKOgS%2Fo3vU1%2BkMVVYtA8YemKeTBGRwFHQw17HbuGz33qVBZ65l4dN0GMiqkKkWEVAcw3GRSD6enIJHsoqD19Wgk%3D\"}]}\r\ncf-ray: a46da4d1ef3fb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1755\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3950,"size_decoded":2511,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2587f0567b1dd916dc7c9da766bef76b","sha1":"ca64f590a084b3c41232cc697733ced6faba19f1","sha256":"de64e77c015ea09bfff3b00d764a6dce264e4ccd981e0d21a1546896592d1bf4","sha512":"68d0de36eab0649056ad502b78636bd51d39b7fb2f38b16d1bed90a40325a0fbecf6478cf6d3da536108545e7b127b444a2f49afa5a434f80f29c828c15e5127","ssdeep":"","tlshash":"3281c4de7be902d8e809c3e2921d96b83a1b70f12c10c1648fe16d80bc698ad0c89dc7","first_seen":"2026-09-27T02:44:53.57853Z","last_seen":"2026-10-07T14:38:07.771406Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-026.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.711Z","timestamp":1791383846711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-026.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo9l14mx03z4-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYG9vfSgjliiAnvVvysI3XONO6kqNB0DOs5Bpk21hL8tpQRf%2BwZELaquuF8DMq%2BBza3aJiZ8KwoKcO1OkXXYDd%2BMA%2FKzAX0WwIHTirKvNWw9U1g4kYA5KEE5bC7HuYUGPOo%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ff49b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5152,"size_decoded":2821,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58f8155ba4150b7cea96b62fb4d56f62","sha1":"868241ae7a0e05e42322383d3333ef80a3d8822f","sha256":"54d6aed084e344ab92cf14f0ad8c33acac787596f4f1b7db9c8492bc861ae2ce","sha512":"d2e9123bad5187aaddc6d17f2cbdae0a940215e971d25ab00b654191f319fd9896e18482d4c09e2bac0f665ae5f33de3fdac4b1819d30868c8183b5f5e758567","ssdeep":"96:fKK3Anokn4OCyBjTdQpgqslrwFVabOu8o:fGHBjTdQJslr1Cu8o","tlshash":"5ab1a5ea23d2a2e0d487dfe1f51068867fdb21ba2b8687c2c245ed55ba010d9dc9ccc5","first_seen":"2026-09-27T02:44:53.607933Z","last_seen":"2026-10-07T14:38:07.772383Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.429Z","timestamp":1791383847429,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T17:43:08.814711Z","times_seen":19103443,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"rpc.ankr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.567Z","timestamp":1791383847567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 127\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"5v1HGzi6cPNdgbXPz3gUkJ8YUEyMcCsyvCakQyZG6fwd12sIugY5pTKdor3W1wJFb1HQS_X8aeGyTyR-jUmYXd59Tz3K3yFRNVAVx3IgLjzXLWZBAfcWq2Gef4cbFXs"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFpqeC139SLRsi5JGrYcY%2B5WLOzaOmowZALp6Hs9fZXPtox2DtzzAZ%2F%2FW4hrfMuu5j0En%2Ft7t%2BwYkO2wmfaJ1vdCqJRrpXltqieWCI00v4rI4%2BGGv6FDkbAHdxh4NXO%2FHEU%2BvHQHnRt6fgBoD7%2F37RHp7IukvaUZxY6D\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d768090daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313343,"size_decoded":74716,"mime_type":"application/json","magic":"JSON text data","md5":"027f40316f53b15540a5603981903335","sha1":"e347818c990e3793252043719ee3af592bb90054","sha256":"adc3ef9840d21ea9fd12677d4179750123eea2a3519118c7007b9101f42ce44f","sha512":"52470831d46cadf77920281df7920c56d50bf776530d7a85346c6ea36ec78593cafe564e741bb9beab29430220e0490b6026a5ba8a8fc763ec94d7f95ffcf68d","ssdeep":"3072:Rw6Pks7Wi01mbkS2fhBJJjDRli4/5hgPTW+0aSfdV:KHmbGfhBpk4BhgPS/aSfz","tlshash":"f264a1d4184691d0ce4711bde4af9448f0783b638b9d61f6a83feab0b16cf6045e71ba","first_seen":"2026-10-07T14:02:57.280039Z","last_seen":"2026-10-07T14:38:07.778009Z","times_seen":3,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":154,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.894Z","timestamp":1791383847894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"X8W2BrKWaKl90UPcCrNhYMPhshpNvPX8kNvmw5H9a4blU-vI6KEUGPPdFj9JL3GgH3nKJyVGI2VgDC8Q5phD7YskBeHJudO-C5DpcK0"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AzBm9qdcapk6qquYE%2FLpXqbCiHyRmHnqEvcqQNu%2F0JRVGQ5SV85ExE%2BWZi0PG7CuWsodZ8ohh9bx8P%2BQCMM%2Fg5N4CuqAmp5kWeve80Yk0P%2B9vI08WoaRj6ro1CTUJ4XtBRTzJoA5MyIPmvlqEXA25ZQh1AWqwTY6ter0\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d9591e0daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70200,"size_decoded":21672,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-10T14:22:55.094653Z","times_seen":209,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.903Z","timestamp":1791383847903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"7xdHI9G1bDYDNAqnS3zno5loW4iNL5YfitzEUN1txjoIsrADWOAoIeXniUSaig3BqD7-7LJxTNkekFoZGMxT1lynqrPGqTCthod8jNIZ"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=615u7bMn9VjSBhx6pqhxTJ4CJbeFVUos9B0JEychI7kguHJHRl7%2Be3jyFzCfSsI8x45TjtUEMzsSvp66jva3WdmU2wJ6XsRIxil%2BEtxdXtOyTYGNUXcacNNwby3ey%2BYdn3qwTQWKVcOP6wFlmtRPgjveQWIvYIddb%2B44\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d969250daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3269,"size_decoded":2154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3269), with no line terminators","md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-10T14:22:55.099119Z","times_seen":230,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=3d0fac3b9763c70ebeb4192b0d49dad2\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:28.047Z","timestamp":1791383848047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /getWallets?projectId=3d0fac3b9763c70ebeb4192b0d49dad2\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 14:37:28 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a46da4da6f7f5693-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 8733\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 08 Oct 2026 02:37:28 GMT\r\nlast-modified: Wed, 07 Oct 2026 12:11:54 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20376,"size_decoded":5473,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c01db5dfee3f863f4d14cd8a6067bbc","sha1":"f3b2050d63b872da1cf778078d91e98f06265858","sha256":"30a77bb0f6c954a8edc69bb8dea580debee574b39d3dfd09656361075f0e1afc","sha512":"c79d82ce5672d44426d9aadc7a16337a35aa3f2937fd971f48c9c782478351715d25456e52bd5706f528ec2392bfd345621a1346f7751f6aea15b7931e6ecc4b","ssdeep":"384:qJu9vMUwOkd77rzdoVWIMCtm9jGdU95wiDCDtl7:ucvVuNo9i2R5","tlshash":"d792229e47d09d96de70c788e7adf9ef947ee003c2cd189aa5b1497440fd8a3320169e","first_seen":"2026-09-21T14:26:22.574Z","last_seen":"2026-10-13T11:29:42.450052Z","times_seen":366,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":43,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:30.071Z","timestamp":1791383850071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 2982\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2982,"data":"a9kVuE5kur4Oe2mqM1dOAb_y81aJjQJLglTi7Wq3w9nvrzNqnUebSmFESdfiuMtmPh83TQMrxojEAZQi6erykbd7ZXMbEvlfEFkYCMEW1cD6pmcf05Qrpq-X9TOIk8yXlGL4A5ddR9zh6Ts8BcQ8A32rvqlrNxd0tszsNwf_RdhlDU2Z3kWM5KcOB3X5_9qx71EP-spGkr6u3jI5RR-S66oPTtP4mINLx_Sj79lpwI8GUhT7gfW7alC0QG24MaJutt52g1tVdYhd049VzTIj_mORY3B-1qoetxUVEO4tM4THvF-dmqz3XkzieoYthS7FJBLXZgy54hyGy04g05fzBbpKYJLevjmn5P5NoaDD0NxAVmLlfiigSDR-28eisdcszDV2bFwWkHYbwzLDB2pU5ftfeIiU6-Q0pi9mhc6uD7djU19RgOKQkhTtxuYllrMDrSJm3FA-AJQTWLjJcObZCCESqeE2rSThZj7i8N6C9cos6QjLTXc16PUDFQ_uGS0X5LLLFO50D0SkvjxRMOoWOy3dnAbk0tzKn4KtrmqDKOxqLN6LG2IvtnGhzNX0o94x-pNUeGNZ1DapiJ99StbZHMiSqDbylmiFv_yxRyW3uM-xnr-LHj_qCG221HCsvznyRJ-uzoo9w8S14vP9dfJFjsdBktqq_Czu8nadC8skLD11N68yGJek3nTpxuUs2f_f8ocYdiZy0N6lB5RCBKoElClbIHInwHzfczuW4gaX5jxFZ4e8ZWLD0gyWiviV7ipfYdYEX4thSDrkTGOQXb4TCmuM2zHM3yAWT8YPsglGCEeb7OlU-QGWnSoCpw8gA7ssLcYaVZODj9NQnca-vgJA0K3pMrQTZN15siWxa1o6Nz6nohANDf5r6IBRByhoLtW7dDojjjpem5R--2DeIHmBmHoSZk8oz8bSaQIYSEZNc94FMLhymedfIxcoPHe1qZ2lykgboO_kjFailcZCWGDbUkuxYXP89YMY2SL7BKiqcRX_QZnNXj9ZBoNT2gPfQatXRhK7eUj_3EUYAH7gLaQywHzOjwGFbotbxcG5aezfHVS3A-HWjCXrFVv0k_5a691pPDblgQBvGRorIrQgZjwKGTzPgZ8UN4veyHGveUUZsbc1mcW6AZnYPit4l-z-dMRTNqKtQt0RzQRg-dovc7lGnpKcooZ8KYdWkQg1vl832aUwpw5m06T4Z7UWolGTZ_ELw7-sNx5OTf8i0x241XWIAEa_QboEP7mqNhvWAAgVSk9ONiLKMetJoNyfsPj8iZEBjK5rz5FU0PVfCoF_utd7ZY-bCcVchvcRGnxZRzux76NgKT41dGouf-CJ7mCGQaV2k-JSHaW9gLgf3v0bWEvibi_pE2y4nF4mYuAO3u1d6w0vsuWk2NKxTELvQeg9HD-Iub7xPiH8TPQY6QDNI6pfmOlCbWEjwrPQm5d4isPJH2tjh0T0c6D6Vhau_33xp6a4hjrcTduR0vmlFqPA-SI_TBNiz1Rk9RKBve4vSnfvYZn-IG7vwfFMY5l7Eym6YFzA5K-C97xgC-1UEK_SjPVu6wpLfOXCUMZ9S4vhSTE3V73Pb_5-JGdEKd_rulC5NRbaSrAkN_G9cvsDuigOv_YxDdIDtR4dca8qFyke2wcx-LXBYwMWgRZoJ7PMxbLOsEnGdYRWQS6vqjj5pnMOGkCwz9VBJDVYEvWA4p4yY-KiTNNgSUYEkDPYVi6DMB0DuBNOkn-J3vNDMXlr_i1K1aJ8uGfwNUEWNpnNdT7Hshf3AWAVfpeI54s5zl1mN9r8-DPUe73o2ficzrZduIuwLhHH8eaa_viZF6E7Ae17VC7zQwR76qm6PaIy0SgS5oaEnJrUwUwaLoo0fbVSg1vpKrNuJ5XRR0rEpMf2n6ntWREwP5v0J33e3-bNW_I5_0eredA9ELmRpWeSVAXkHk7EdIb-l8aer518KOEYHPZOeQvCZ3uvRnNAJLgmdkF7qPbwCA_3HjULhVDeO-h90qhFxy49gfkJ3BcUOeYKWby3kgTDQCs5if7YedIA4yV0eLMtBy8wgPviLEyfguQEM-gnnNGS_0D5BGFVrIubet0CQ9xxrOQdUPP254KotGQtk4Ta39cfInnizU23UOYrbeee72ZejIe8uu8ownZI0lxMEezm_Tvuj5kH9i2FTDK6YfiNmQ5In-MIFwjgd_wuDQ8FTjFKIFhJ7XEvUtbXKG6zWioHyUT3TYmrdnNgSm36QkJkd-hsGcdzG3ivYvHtRBxx7ETCx4ikiHSjjwJCHaPBjYodPuoE5Etg1sLoRmbo5ThkroCJ9D_jMVhtoMxwCfj9kXF1M-2qZl8rqRGfuAulORF4S6DQznwNM7b7VDMp8Rt0QlHgK2Tc1bGZwFeOqFPFidBxKnghWJind_pl8vAoAcZogEaCJ79Q3gxSVlrE0wnur1QWFSI9W0L42yDWfPtvH1Ae9D05QVhkBMpOhjgUlY10IAdNS7t_SOKlJqV6GI3UbmuP4qRf2WUtFmXNCFkF0em4uqX1QZB8Pjk49OCIokf2xnSywv-iN6F9zodshF3640N1aPS1YZglzLddsWj_ePOFMP-NcCeIvDeoCNQR6sb81CxJmH1SNUTAEqofyO1UliG0S55-olWbUH2NbjnwOszmYUh8iS87FvGj5CWku3EZzdXKCJ-MPkZEbP_mIpW-OVFNCv3DqdKDMFCIerQP_cLpCTsblemVvwCifT6_4zdHSknLzy1gnRrAsIXsnJSLmDARSKMGI760k3PIolcPwMloQyOYd5pzG65liRSTMdH1zvBxJY2_WlxwU5gkoS6l2XW7BrbhlwNnoxBXIwX6quzK-gXiWzzlmzmvlH7RJSDvQ828_jIdxdmvqOzIHOthOqV1LsfIbnkRXoHs7UKsjgLlTtFSNEIaYKxBpjBC_iep7F6NdnPSMzhNOsd8NbhlE4bhezKP-oHF5q-WUWE4jJXyRIwWxbUc-Q1ZB10ZVA"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GES0kqj%2BrK%2F93%2Bho31qWGoh9jzWdPyv76W2lPkQjNOKUDrxeS07WGycxVJ8YeqYFFBX%2Brhc8YiFSwlZXS9%2BW%2BhANRF4lT8NTnxV1XQtW4kXtayps%2FNye6hXd8mdwEYVms4SU0c7SezeVf7ve3UKFVn6Ig5j7sjgwQsCJ\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:30 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a46da4e6f8440daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":792,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-14T17:35:10.482398Z","times_seen":25229,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-018.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.701Z","timestamp":1791383846701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-018.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo6uz3jfm4z8-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87%2FQ26N8I30vKv6eBQmajQ6ad4cqu%2BQX8ZdwbGwWimGyDkX4%2BxJ7D%2FXWPN5mmveEx505mLGmK0PLREVklLb6O92TJKRL93tcSknLwgsSYM%2BEDrbpkEPEHL2knzD44ChI%2FfA%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ef3eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6452,"size_decoded":3207,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2e28bd76587bdff77339bc010a9cd91","sha1":"f5707ddf316809122a0bfbc48cf20aff4eb94155","sha256":"017dc3a7828feded8bd06d50750e874912a06daf2ad92324737d07cf4636a60a","sha512":"12c7d0c3431004982b1b074945ea0f09ce10e66c214288d20012fedf4399d593a1b3c10d9cffc236233c6c409cade2543711383dce53b7bbdfcb50643b6bf66b","ssdeep":"96:4VpNazueIHrtVpsddtqJFD6GK1ar2vxABMRy3gQocBkFAOuq8ZRnZk6Y:IkzhIHrtVKdeD6GDCxX3pAOuq8ZpZk6Y","tlshash":"fad177de15855ad04841c7c2fb1621b8fa2fc4b9e19347a0c2ceeb393d9946d8a26cc5","first_seen":"2026-09-27T02:44:53.629876Z","last_seen":"2026-10-07T14:38:07.795258Z","times_seen":9,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-022.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.706Z","timestamp":1791383846706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-022.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo880eszf5mw-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:53 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RvAvBJ0%2FqBFaOIZ02TCU8jvmL2A0xEONxEk%2FpDL5Ptez8%2FRJOGeVhE8iuglKtAFVLFTF9D30TeeEQvG7wXkKIuxfTIeS8VS948UFhBAcOtVqXR8%2F39Q%2FMXprB39QVNWUQ8%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ef43b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7304,"size_decoded":3772,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3afe85df60606cad611f547f5b07d91e","sha1":"22e8ea199d429b2bdea802f92c73499228de6483","sha256":"287667bfefde0c483c023b2e2ce98ff853fb9deb56f2f559671df763dc9e44ad","sha512":"0e364e2a02c232223f4db0ea5c87126f6f8497f4c83f842ba3ca1e31fe21248278e652a7159fa7e4966c7aec19ea9a430f80048ce0d20f49dc30b74bc07861b4","ssdeep":"96:gNinWNN7ZxBvuKWmlKJRS98BtrYCyOYSP7k4PPbnP4y3PS9vg40IAEUxHW45IYkD:gNLNpZC3RSGBtyq1Pbw460zbseQ","tlshash":"19e1b6deb3d8b1f9e486f7e5d32664613a2f24fb2a62cf2883e46f54a85104c9c84c51","first_seen":"2026-09-27T02:44:53.590002Z","last_seen":"2026-10-07T14:38:07.799951Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-027.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.712Z","timestamp":1791383846712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-027.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo9x9485ybc\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:57 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oe9jnlqsHLXFKwCnHmdbBh1FUYAD9Zd52rMccRYY22ZnP5grZ0Lq8LYd1UZP3p%2Btw9S%2FG8dxiuE78zMbC%2FBbGyc4L5pIMWHJQM7I1fo26EP1ZsPsGgCHgSy5Sn%2F8krCE%2BU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1ff4cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":987,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b60f40ae9236e2149091ece0de21418c","sha1":"ce4c804e7f68cf3d3b0c85f9a35ba469de6becc2","sha256":"0969ec7fa8a6baf31bd12de50c7bcbe73b7cba63c478b6b2978d7d1d748b3b82","sha512":"f42ce091373264a2d92e90f6f938d5e11a6d91af3b86175f663ffa3849d955e40dd74de835d2c7003174cee02ec7ce56c9a303319f8c2ca6a5ec23b850c2cdbe","ssdeep":"","tlshash":"f8e02bf63189dc4ca68687f4916532775da794b61b0c1144c4521876e04a246556bde1","first_seen":"2026-09-27T02:44:53.631012Z","last_seen":"2026-10-07T14:38:07.80318Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.409Z","timestamp":1791383847409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 10cfd3f9780831cd943425e0ff0d531b\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a46da4d6efce568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486,"size_decoded":812,"mime_type":"application/json","magic":"JSON text data","md5":"314a87c42fd71f9f35d6858df85044f7","sha1":"3f3a02536ac42fbed88efaf6ae7cdba457fcd751","sha256":"abd8b3fcfc379260d9379c7cff8e06ed2448d42a3b50d0b1effdc69358500eee","sha512":"240d85ec0e69559859e6be69379e52ebc5b0e94148192198211b8d364292e9b36e2053c61fc2e9e0b3a3009db230e734c37e8a8fb881dca3649234f653b48c9d","ssdeep":"","tlshash":"edf08cf42c10cb94f8c47991e8e1b84600013d6d38cb9f02084ca62e2aa3600cf88acf","first_seen":"2026-10-07T13:55:50.209253Z","last_seen":"2026-10-08T04:17:33.255556Z","times_seen":23,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"104.21.77.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.411Z","timestamp":1791383847411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"POST /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\nvia: 1.1 Caddy\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2F4nHLISiN2JwRd5igMdHL6yqMCRZy%2BnXG5314TKv11Kg0RENHKiOvsvLCyj%2Fg8muPbfNjbUGxJ2G6dq2fypSxJ02%2BV4M%2B1sJWefVi3Nod2wq%2FKmwEPLZPKA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46da4d76f2b32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224,"size_decoded":802,"mime_type":"application/json","magic":"JSON text data","md5":"f853779d4a00ed627b9ae48b47ca53f2","sha1":"ae55e48eb886eddd709833fe791e7672b3b64da8","sha256":"3804a3d7ceea6d75bac31122d207b9b1ead985794c5c53320edc19efa46053f2","sha512":"b8825f42dfd3a0a8e4e66f6210aa11e606425aa0b9d31cdceda7e20f4e71b0dde7c37d92770a152b29b9e5005088fa65f4f4896a8b279538092acf0e635c4be8","ssdeep":"","tlshash":"81d0a7639b4e0eb887550941b409b52c7d6759905240af80ac4c454862d8579e24b177","first_seen":"2026-10-07T14:38:07.816983Z","last_seen":"2026-10-07T18:56:43.510382Z","times_seen":13,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.412Z","timestamp":1791383847412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfyfeZiA0xpls%2FDPHk235Mu7UbQjTkBI9klWr%2F%2FkmZy066XcuH34ChbRx2N9TiNQgB95nt8DdY2Q7u4b7R6%2Buey26z4zjtOIIOAIybubiTZC3G0QtYXP5%2BXas%2F4qYPbhYgU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a46da4d70e41b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":720,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-10-13T11:29:42.465186Z","times_seen":897,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.430Z","timestamp":1791383847430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://holder-zama.xyz\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a46da4d6afc8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":444,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T17:43:08.814711Z","times_seen":19103443,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.902Z","timestamp":1791383847902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"OdUoyRziru5wQxtwH8g9M79z1rSiAUBcfqQG_yag8ifXsR3ujSAnX4SCgS9aCgvux5LyDIlDbMm1yzD75JfmUsowkM69ZaJ-J-UGf7I"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0nZZyFi%2BZ7La2nIM9DNMgwEIIHINXyv1ddSpSx2%2F%2BKZjSQz1s86fljIBHV%2F8UOmc3bbhbMPmPrLGupoTGgRlj9%2BlLyw9jIy6bViom2YDCAYlomDKjIsPA4YFoMFwO5S6SLXJeF%2BB6Ll2C9nW6CsDEv1oTME8Bhc64r8\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d969240daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16644,"size_decoded":6096,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16644), with no line terminators","md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-10T14:22:55.091737Z","times_seen":206,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T14:37:26.044Z","timestamp":1791383846044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5LUsJUeQcd4HdQc%2FBru%2F5mUNSzSFq26ysPjwADNo%2FVCx1JoSPXHzR2W81xOh9hTwSVjBX%2BZsZQBm51xrLG2hraVtPKc6ytDPfUzYcdYtRhr%2BCzt0NikoNBgqjFhBZv31sg%3D\"}]}\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46da4ce5ebcb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72844,"size_decoded":8913,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (560), with CRLF line terminators","md5":"3486983015336ed678548c8f661a0d02","sha1":"df4ee7c5c37111046d0d59c75d22a32a1f01c074","sha256":"248705de7786c432d919019b382cb37cbc9ba91cc88d27bb2a10aa67675d4a59","sha512":"bf536a884a300f0fd0d7a26fc5e0b0b2b267168feb7db93c78cd7bb447e05ec5eb629357f98481ee5d0790b41767447e75f99da4ec8746a1760bee715726b856","ssdeep":"1536:uICHl3pz3EKEkRm8Gv2oEgE4E+EtET2oE0EZzt/S2:uICHl3pz3XJRm8SZxfesnA","tlshash":"a0631e12a9c0246b22b388a9e5226bc4ff914943eb074008f1ed67db7ff6d14ad47f65","first_seen":"2026-09-27T02:44:53.617538Z","last_seen":"2026-10-07T14:38:07.826959Z","times_seen":9,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":53,"connect":32,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/icon-payments.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.693Z","timestamp":1791383846693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/icon-payments.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo0p1n5q696\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:37 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeIjQO%2F%2BkcIe%2BTu5hXhqJD7gPzWUBA160yuWc8aWOSQS0X%2FHxuxiHvI%2B92n8d87l%2BaZcVNy2nMqKCi0MjXxJlcyX03PCmTetKk2K8WVa4ug5UX2vJVGo56AQ%2FwYb1IBB9aE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1df32b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":330,"size_decoded":934,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9558609cf2057c7e9855a4cad67d2d8","sha1":"b98770343aa47a2444a99ecbcdd4f05565af6fc0","sha256":"6af153fa2377960117ea497cd3fb782204975f0024e68f37a63d346f6f38a7ee","sha512":"0b25b1ff42a851fc27f0f27f20314af37a45ffbdc616c9e6fc1ee57ff94c65375bfa1e33247fc8a212b1ac6bdf3b0f1ddb721fe1854885b0094a07bc5d25a50d","ssdeep":"","tlshash":"a4e0262e820c4d3cfb128022db287776165a52835b4c1118f861223a821d9cbf87f2fc","first_seen":"2026-09-27T02:44:53.618995Z","last_seen":"2026-10-07T14:38:07.828245Z","times_seen":9,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-017.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.700Z","timestamp":1791383846700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-017.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo6ioq7pr9py-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RcLN4b54ifq8h9VCwF3%2BYHstFAGlFPUFKBzd56YH%2FlUfXj61N6j%2FH1SOCNsN1VU%2Bgu0BkLiCLb2wTEhruOTlSVlofancFXXp9HjGWHhuOVTr3IM4NBlhnojKVfExinotywg%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ef3db518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12598,"size_decoded":6427,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1702e5afb1c6bfb4c398d840fd46a4b0","sha1":"c14f02411bfeaa2dc766345a3660dce5481703c7","sha256":"3a1a781448a7be86b335149f57241a88155995cc601bdcdeeb1a835f038b2263","sha512":"e5e78f1d38429d2dc1b391482dae684f7ed6cb9e4167172ad497a2dfeb386c62ae1ae63cdf65e5d19b3a2dcd4493191d0abb2f3f5e9b787746aed218e668fc32","ssdeep":"192:4kwHh8LLdb5rXkBXwIqqd+MiuFlBpBvFE+W0ZRcEuOWRz:1ddXkaqjiuFlzJFtBaLz","tlshash":"e342f8cc2b27aae59885a7daff2330dcf61f90d9a6844da4c24d2d6658c787cdc14cd2","first_seen":"2026-09-27T02:44:53.605764Z","last_seen":"2026-10-07T14:38:07.829184Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.406Z","timestamp":1791383847406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 6\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a46da4d729b2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":719,"mime_type":"application/json","magic":"JSON text data","md5":"426df7eb799ee9ed936dba0c85f440b5","sha1":"0af1b78605c6641afc13a2bd99488955bcd4b7a8","sha256":"38284f568b4aa4d5805bdc78ee99e34c5713b56fdfea520f20fb7ca318ad2555","sha512":"e4b6f87ec1d51f7d6256b5402d401f049bc8bc988b3a375996ae7c6f367b6fdbd24e88081a3528c609994ab8ea7d800933ff4addaca82b3350d3672c2b62edca","ssdeep":"","tlshash":"25f08cf42c10cb94f4c47991e8e1b84601017dad38cb9f02088ca62e2aa3600cf88adf","first_seen":"2026-10-07T13:55:50.215637Z","last_seen":"2026-10-08T04:17:33.243769Z","times_seen":20,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.898Z","timestamp":1791383847898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"4wpJARs5VTzkxHpXGnNQ_jpex8JPqVHmK2Sa52GnOEITvw9zwv-YCsXzJjKncoxlfgOAaPejwsQiaGXGAlyyIQbHQwHC6_BqropQu1aM9A"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtPmTzZiTKXuyzThbTYvDbLnKyD98qvXYmFDV38Ayv19VzFLe35jZKbgzX9s7sVpkqy1o6FlQikZvwA6vLhPvEWe1C%2Ftz0Kvoh9ktP5QuBzE%2FSAle3eXnLI9B%2BKmvOxBrgpuqcWmUyufWDDEXj%2BgawaaCAB1vbEDHEPK\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d959210daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528504,"size_decoded":157059,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-13T11:29:42.479418Z","times_seen":451,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:28.350Z","timestamp":1791383848350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 746\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":746,"data":"U97EUYgHgfkurFQVQ2a^w4c50\u0026#YpXVm07vr#DY2$@McezvLQbXNpD^ZmPpMM3YS$vf9Y8w#w2%QxThup4TTmF0BjKeQLYNnCLAz8v$Z$^6QbBra6UdWVpTgUsFPb!rM\u0026zgsmCTyNQAPrnDwP5SkujCy3sjA@g$fp$J3W61\u0026vE@2NY\u0026NsGvLtMk29E6#9bfWGgG9ksqZ8h@L0r!$#h2yPcZwWp0d2Y$j\u0026%STwY\u0026MWRKmTn2V2X2mgkZ8NZ%Wt5nJTJ#2Er#2Q1FFqrUD4K9yMtkDH$rKN\u0026@py1tFRk3K^$F@RMSt$Gdsr$#RnuaFfL501w\u00266\u0026e#S7C@EZC\u0026xUQU9u4mQDPz39Ew61h0MeW6v0@Ap!N\u0026F#S6wX!QF1QBzDCsY$sfJ2A@pg#YcN28bf^gw1KfYNY8yyj^KB4kGQFeGvkx5yG%abNQ7YwQQh$e7EEMhn31EH561pT^\u0026TD50FRgH3y1AfP8Wwug!02xXbE1RQ@rCv34@x9zEW0$B%xUxCd$SH$G$!h!0rEs45#JnD4@14VXzDs@gRe4Gf$cK%@Zs#54P78yS@b$ERzZgpw7CtBCDmBcA9DK8Tf^p2pp\u0026seQx9Qcjpcxy5YY7wE24ZJ6QM#8wv2yJKTY1DQbBKr3e$x7tL8JJVz9rBHUAVRj%pX#heMDbMK50D9qLC1V1#cHE8TvC2z6N6WKJp77YWQxnj80Fdz1NZ%Lr!zhRXBq@x6fP9HUVS0EEeWPT86ZRrdzNvA"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVIzuPdvWIW%2B9TnOpfLIj4npuL4EtvGL%2BA748Z5LIa3ZtEIO9T7Tng75TvX6FEPamir0e9lhna8YoMW8m2J3IPP2V9%2F0hFbhyIIEjItq3MYhmIzmIhudWIvoFFThfqds8%2B3peX1fSyhi3iZeiMHbAYcc9oy%2Bl3yzgd0O\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:28 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a46da4dc3a6e0daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":879,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8a6c830e6fc9e57d15cdffca297c3437","sha1":"84eec50b71e0ef4bc4572d5ea951a8654bf01911","sha256":"db5e1079f6a76432d58a53f48e6c87075c8b89aeaf6176186c6cbafb1b57d616","sha512":"4e413edf839b79ac02dbc2630b44796809117d8804b34184d56f19bde9bbc6a1ee546ba496d201dd5b66deecff36cdc8dad0346cff5744212b1664f77736d406","ssdeep":"","tlshash":"7bb012c682091805c384c01f13385281451ce1900a1930580a40dd3603c95e526c1763","first_seen":"2026-10-07T14:38:07.832994Z","last_seen":"2026-10-07T14:38:07.832994Z","times_seen":1,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-016.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.699Z","timestamp":1791383846699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-016.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo66eybm440y-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUs%2BiYNE%2B7ohmbILI9c3vO2WkbBmX2mL1FJPKsVdZsS9fZE9SX88VtJQ0E8KhiPP9lwi184jYhZ2DdpEm7Gv7dpzqWy3vrcKs%2FfAZDHU3KZ5L8OMIZnw5wSQ2SnMjXYBQ2Y%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ef3cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5218,"size_decoded":2850,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bb5ad206848d1ac0516dc4500de670d","sha1":"bdb9400fa7f9632bd716462a363ed91d3e11302c","sha256":"7d5198edc2e5bc0ac1bbb989f7c2cd8eb88449b48d760426150ac875fecc60e2","sha512":"994c0187f7ad5873cbc8a9963fa26bc4a7d2744af5ea1f2944853a7b0a5aad6b9ce07d20148ef1c4df9cc0a29ad51916b81674008ae641e0297190e4038af994","ssdeep":"96:ksId+wgGCl6xClv93OgQvZ8NJJIulCdlt+RK/8/x:ARalDgR8PMdl/8/x","tlshash":"6ab141ec1ba19cd49cc98fc77f1911ede12fc4b5d1514688c16e7b6a38a9d1ea808ec3","first_seen":"2026-09-27T02:44:53.577123Z","last_seen":"2026-10-07T14:38:07.834851Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-028.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.713Z","timestamp":1791383846713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-028.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzoa9k2zi1wp-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3zYRYMbBrkAUpSCC2PZeWjLVV2Dv4puN%2By9We42DLHyXB5jXq4NafUutUwjQEospr7yddtPrCpcEKBbtSuQ8aPuOLLtvJk5nmNPezOb%2FSdZEvEL7pmLarjcXf9Nx2cwcWo%3D\"}]}\r\ncf-ray: a46da4d1ff4ab518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 451\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1177,"size_decoded":1203,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11e9b1fec82eb19bf67576fb9777fa47","sha1":"21bf519f4ebe1f9bb22137e5d4063d6168954ac9","sha256":"ab98cee1eb5504bfecd1474a5911bc1e1d8621e9eef28d4569243292dd1701bd","sha512":"fca427b9640f3c0672e3570985d2dece64ac983331dc0fa125a1741c59d7df98e1a916fe1520ba6d613ab3a2ece361d445a00fdbc826d42cdfc9029f2dfc951c","ssdeep":"","tlshash":"032104e0308851a1981593fa5f1f607f207f64dac8a443d49f653a7368469af1cbeec8","first_seen":"2026-09-27T02:44:53.581399Z","last_seen":"2026-10-07T14:38:07.835661Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-013.png","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.792Z","timestamp":1791383846792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-013.png HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\netag: \"dlnzo5gmr03y17o\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ku6HKOpR81hsKCv2nzkf0yH3cD%2BNAZMH1W7LVbCZwXSNYhDHcYtKR4BSCk6oIz9NfsdO2%2B9uc9%2BRHBnKBEh1CrAnHtfOkQV9beJuQsHvPBzCsg3eHJdud%2BCSzUpUuzUkwk%3D\"}]}\r\ncf-ray: a46da4d27f5eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":2297,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"884e987666b76320058f303b900ee51d","sha1":"51d4953c87f1877720b332c4f3900bac33f85eba","sha256":"8617e027d9070bad2f37098c59e09dd1818d6af11bcef176ac1ec1cd5e3fc0a2","sha512":"0f4252894ff4132a10886d6e211234c867603d6d7912382e77c721934c874672ecf8e32363828d9ca10438e21063edded3230f557f7fe9b4f571957fd3ea87c1","ssdeep":"","tlshash":"2131e7e640fa952aee7121422d1848b6ec7a8618ba31fc0819b5583b2a8cd1e8c23861","first_seen":"2026-04-01T00:13:53.79491Z","last_seen":"2026-10-07T14:38:07.838068Z","times_seen":12,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/fonts/font-001.woff2","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.798Z","timestamp":1791383846798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/fonts/font-001.woff2 HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\netag: \"dlnznphh369mks4\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zpGOLNGm4%2Bp0mqF0nqRlAHCTqx%2BwG6Igle%2BJ4%2B%2FWuvnNKEUduTEe2SYAumYcJZpzaAbXrH23lTazegzgm2nWyKn%2F2DgGIU0Nj612cneUNOPb5AldQcLrEqyTC9NzsxeExI%3D\"}]}\r\ncf-ray: a46da4d27f65b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26932,"size_decoded":27666,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 26932, version 1.0","md5":"30ed321199a470fb94cd7971559dd091","sha1":"f521290cee7bf0d1b4c87cff67ff711cd9e622f5","sha256":"abd1355b956aa617f051c81a94e34e51b775d6ab974472deda3ea4bc76964f02","sha512":"d2105ab4db58094248a50efc1c1dc5a57c4be60ea58c0781608adccab05003b0784185aaeedb40e0ed649ec4c050ea45859f378f3f4a7f59799c1eca9bf284d7","ssdeep":"768:SreRAjdozix/0+7GfOeIDddzaOq3o4i5Jmma:Sr3o2/GkdzImJmma","tlshash":"e1c2d1808da753e2ca75d639face1b19b1f13d5abe308154c09c5e6efb4802441afab0","first_seen":"2025-07-12T23:22:57.268171Z","last_seen":"2026-10-07T14:38:07.838803Z","times_seen":506,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-007.png","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.995Z","timestamp":1791383846995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-007.png HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\netag: \"dlnzo3f32tlcwy\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\nage: 2145\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPyayK3f1oCQWSuQwWwxnO5JYkQ7YimzIxIorKS%2FntknvRD8xy0elb%2FbKNq8lZvXR2vfrQby7kDwcwi8buveMw81ESrM3ibq%2BYTO%2Fi1IuTBXqEak9N5%2FUdGqEKk7OgFi8SU%3D\"}]}\r\ncf-ray: a46da4d3bfa1b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1186\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186,"size_decoded":1915,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"daf86b7c0767a7eae1d542d78f43ee24","sha1":"f9548c4d65085af31ff16fca941aa226d2e44c8a","sha256":"d4765e2871081c0410b0f57cdfe3cc92138e86d2bbbc8aff92801ceab67c8168","sha512":"700479c5d72b4a53da67668958de2827bed9681e6696e285aae5d9a7b4ff4b5fbc71662f62bb8805280896a71803650dd8f3fc1947bf5269ecd84748599f4000","ssdeep":"","tlshash":"9a21d7e063c49acc03d42c72a90e50545c0995f6a5d9d8bbc0079eb163c9524f4aaf07","first_seen":"2025-07-12T23:22:57.260478Z","last_seen":"2026-10-07T14:38:07.839564Z","times_seen":346,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.404Z","timestamp":1791383847404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeUOy5xu2leBGR5lMCU7SJevz209nGvEBioR8OiHsJCk8FCmJv%2F9jjR%2BC9u9QepP1UpfKuRzyxPrhCUfgJPXYQYbReQKNvz%2BwGB5uVqo4RphwiJAKRXERdLLtd81X6Fs89w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=o00Is3AKiUjMCvON8adFxGyq622RSO3j2670MPXgRhc-1791383847.6050575-1.0.1.1-G3m23bEkLP26hjEKOcA_WNqtnMav18w5Mee0lJgj6R2avKUBqS0qOyo_CcLLB2RRq.fwmLx1U_ZLuxLMTsn3JlRpMwkv6pkIcRa1gQjJrLJ.kdBCBH27ZA2HjlsgQ6k2; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 15:07:27 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46da4d78b7c56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"o00Is3AKiUjMCvON8adFxGyq622RSO3j2670MPXgRhc-1791383847.6050575-1.0.1.1-G3m23bEkLP26hjEKOcA_WNqtnMav18w5Mee0lJgj6R2avKUBqS0qOyo_CcLLB2RRq.fwmLx1U_ZLuxLMTsn3JlRpMwkv6pkIcRa1gQjJrLJ.kdBCBH27ZA2HjlsgQ6k2","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-07T15:07:27Z","raw_expires":"Wed, 07 Oct 2026 15:07:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=o00Is3AKiUjMCvON8adFxGyq622RSO3j2670MPXgRhc-1791383847.6050575-1.0.1.1-G3m23bEkLP26hjEKOcA_WNqtnMav18w5Mee0lJgj6R2avKUBqS0qOyo_CcLLB2RRq.fwmLx1U_ZLuxLMTsn3JlRpMwkv6pkIcRa1gQjJrLJ.kdBCBH27ZA2HjlsgQ6k2; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 15:07:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":1209,"mime_type":"application/json","magic":"JSON text data","md5":"95f7fc6d4ea23b7b18d72ce8155a4e5c","sha1":"b61fb8648be229bacb7690ebba8ab3391368ee26","sha256":"fd11d1f6cbc44d20095fd4d31665648d06641dfd5cf2ff6f5d7b68b760acaf32","sha512":"9bf013ff4f927dd330e73723a72c9a3e26d0c2ace530d5dd3e7defbbfa9d9ca5ee7732dd59b2e5ecfb418a9dff06087d819c5d272274cfa9ac00fd72f1a78e00","ssdeep":"","tlshash":"20f08cf42c10cb94f4d47992e9e1b84501013d6d34cb9f02088ca62e2aa3600cf88adf","first_seen":"2026-10-07T14:07:15.871075Z","last_seen":"2026-10-07T17:51:44.83632Z","times_seen":14,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"104.21.77.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.434Z","timestamp":1791383847434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxbPiD3eWcUGeyVq1wIgGjSE6P0LyhmJ%2BCv9luG66EmuvhrChPCFq5EdmxAKZpu4WaeDOufIJiW%2BnCg5%2B7I5GHg66OIuooioZXNKpZJXwWxUBWP5YwNqecW6\"}]}\r\ncf-ray: a46da4d6aec532fa-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":753,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T17:43:08.814711Z","times_seen":19103443,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":6,"dns":1,"connect":17,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-006.avif","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.698Z","timestamp":1791383846698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-006.avif HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/avif\r\netag: \"dlnzo32uhsq6112x\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:42 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2s3zZfCOxfZLr4PpSk7lXt5o0tqnKzA6XgwVoUxFkzbSGmZoahEshSDfhEGvFdwRDt%2BldX%2F5ZkBFpye%2BKXzNT9VZfaYJEXm6RDq1p6M4%2BiLOdI8v1kAFxJ5yJ8mHuraZG8%3D\"}]}\r\ncf-ray: a46da4d1df3ab518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48057\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48057,"size_decoded":48785,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c10d2c5717b5573d7ef1237dafc361cd","sha1":"788a6aa67977ef316be1439742e137083bbe345d","sha256":"0bf1251b9b952ce12072f8ef8e9f62e6aa29acb2986c83b63c5eb89175a96657","sha512":"dd6e14010d659b62d142faf4b5359aa0b93c6677a156a48c7b846ad38966f5e896bad7a338263ca3e44a7976a9819c86cb0f670af44108a136d4196fef4987cd","ssdeep":"768:/9wenLYGizV2ku4lj1+NlVUnM5CLZQyVKDJUu572FlxqwDbX7Oc/AMSYmjzwpZ/b:lMGiz1R+Nl2nM5CLZ3VKDauU3xvDj7OI","tlshash":"b82302ad7adf0e53d5f216e422f8c7510e1eb891e539060e3b6160d12dd0f3d68acae5","first_seen":"2026-09-27T02:44:53.622125Z","last_seen":"2026-10-07T14:38:07.841308Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-020.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.703Z","timestamp":1791383846703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-020.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo7jinbmu8r2-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yU8FYrr8mxeDR20W0vLP2sJyPPaHnvd22J15dycJZGHDpTrBYMJuu2WYv0yolwWwIEFkJevB3ZXuS8PegJa1sBjtfDN5nROVbM%2FeCPMkyVqrEe0m%2BdS5yOQwJjrMvvWwzF4%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ef41b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11342,"size_decoded":6068,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c452d0d130fca45d43a13657227ddfe6","sha1":"9b7a30e3978929aaa700129640909e7198853403","sha256":"a38a2801b9ec63a4d5bc86d1cdb834b45f3a3d58322bddb793fd6dbe55d100d1","sha512":"3111a4c80882fea8753008e2b06bd4e02b9fea8ebde8190d7a099338255463a634df00f464968e7a46e431ef031ace539500b0213f60725174c154b2ef93b777","ssdeep":"192:FTejhpVwgQDMxVqTWIeIy8uNdSdJ6xHzdcHzxGjLPbxKW6ICMgKeWTRHCs8YG:FQDfQYK9y/HO+HzWHiDIICudC5","tlshash":"d932a7fba3d8b2e0e147e7e0d9225435ba6f38fa3b21cb9802d4dd54b61119d888dc55","first_seen":"2026-09-27T02:44:53.624039Z","last_seen":"2026-10-07T14:38:07.842018Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-025.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.709Z","timestamp":1791383846709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-025.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo98ry6fl1me-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GC3ewhUAR9GMHsaGRyftYyKl3Be9ttp8867Gyfr6d1IoBAB%2FcoaUAuh2JfB%2F0Yu8XghfjDJZjO%2FY8UgVpPd6g7RjfWQjUtOFhfT4LTT%2BXS8ncbZT8U6gutM%2FglVr251r3ss%3D\"}]}\r\ncf-ray: a46da4d1ff48b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 988\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2102,"size_decoded":1747,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe1cbf144308a1fcfa2c9653da0d0d07","sha1":"fb930fef4dc0bdfe5bf6967f4f129c4cc3a6ecc8","sha256":"18a05024e79df24e6f22deaf856404990d6f6b6f4bca5b4e46fc7c8289f6cc00","sha512":"867c2a4bda2e077f51654fedd75a2c6c03b18b5cf55e201c2176c1dda729e17d6a8d606ce9b73e0eba782d3d4da214d701a2d0830115cf237994ce95266b08c1","ssdeep":"","tlshash":"8d41a5dea788b6e8e40ee76acb13797c158f3cbe54198410c3ca3a2af51e54d0d109d3","first_seen":"2026-09-27T02:44:53.591278Z","last_seen":"2026-10-07T14:38:07.844678Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/fonts/font-007.ttf","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.796Z","timestamp":1791383846796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/fonts/font-007.ttf HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: font/ttf\r\netag: \"dlnznrk8tggy1qt0-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bm4GUqk7eM7U0DRj%2FNd29IlmQqSRgWjfviUWPIg4Pfe5Uc07hTxi5xTBLsc4Ni4kuCnj22sqR04YEDrtnUqDYNEYoSnI6USrVxFXvABuXIJPfiRheo3uapV%2FS2TUfdu9yfE%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46da4d27f63b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81396,"size_decoded":45732,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 17 tables, 1st \"DSIG\", 32 names, Macintosh, Copyright � 2019 by Nick Losacco. All rights reserved.TelegrafRegular1.000;PP  ;TelegrafVersion ","md5":"3fc9a9b5987f2de2e51df638e1bda27e","sha1":"d1a4d5a7cffa2e298711e9be5b5e2146fd403cc1","sha256":"48e39a228940c3eed940beb85a49a332f1959547accb78c3cc2247bff5cb72db","sha512":"db94cbd3dc21a0e6d1d5d908210d9e9fb3be86dbea6067f09391bbeec7b1bd6fe6ac720241c790a64611d97306777849feaaca53306e8fe778b560a04701d7f2","ssdeep":"1536:sXRFis5rKBszDUt1vkCyaLTFd5GzqlN5NwcZEuh8payT4:UXJzgtmCyaPFd5GGlN5+cZjh8payT4","tlshash":"86830887a3539dc6cb11273479e34bd06b38fa7a4a3587c71e5369362ca67c16c032da","first_seen":"2026-09-27T02:44:53.593715Z","last_seen":"2026-10-07T14:38:07.84738Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.428Z","timestamp":1791383847428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a46da4d6996f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T17:43:08.814711Z","times_seen":19103443,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.435Z","timestamp":1791383847435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohwHd6oFr3JTaHfzJkIaHfcwudgSI8AZxLHvnLWzLNhL2ZCVvbp7YFh%2FSliioWYtfJHd54pJpkFTLKHU4C5Gt7BakdXaCI3ICvKk43cfIpnKTmZv%2FhnudJrkfsJWlYfNnXA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a46da4d6adb6b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":807,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T17:43:08.814711Z","times_seen":19103443,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":33,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-012.png","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.791Z","timestamp":1791383846791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-012.png HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\netag: \"dlnzo54dkjmji12\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPzP3YOLj2%2Bmkkj64QN3xZY7WHgFRtF980YcfsXcstAr2NaIV5J6mnz%2B%2FquNLnhSOW1aLphw4Rzn2VDHVWLnaiHuXfmy54lv7NbRGO2Vi4hdiZLl7%2B67PJDQ1aPuWq7TK9s%3D\"}]}\r\ncf-ray: a46da4d27f5db518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23366,"size_decoded":24092,"mime_type":"image/png","magic":"PNG image data, 1364 x 767, 8-bit/color RGBA, non-interlaced","md5":"e42d9f05165daea5efa5c7afd9c390f1","sha1":"186e72c7b3c01b49483b6eb8355be9b4f06ceb01","sha256":"5dd703e5e855cd7871b5b8a8bcc40a6877a1e141b910951eedc9b3da5d2266df","sha512":"6b60884137dd250cc9cf78e05e38e7470a99a218c7b686900b67f2627155910ccb876ae0217ef8134203aa4b68a15a12b2de66e32bd9a9917bbbaeb4e3d569aa","ssdeep":"192:YGpqgUoIBCsxcPw1sKKek2FDYznUR0iNudS/hjgYpfvQfRJF0KfPntzcJEuBtp6c:lk+Yp33QXFlfKD77qdOwZTuL1","tlshash":"fca24e89c31a0437f6141928f8aa29170aa46eb37674ed1460eb742fb787fb15cb5ed0","first_seen":"2026-09-27T02:44:53.625127Z","last_seen":"2026-10-07T14:38:07.848663Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/css/styles.css","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.670Z","timestamp":1791383846670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\netag: \"dlnzobbnuhyj9y0u-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 01:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OEByjnCLbC2TSJUINq%2FOYkuF%2BsJNoHYy7iOIe%2BqmZT7LtfZp4E2brqRtc2wFhVrIYCFnnGU72rdOA5yBniXztMkr%2FkAHbRox3BKHsLGwqLUD2tbCZnZ%2BYH347tDA5TDX1s%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a46da4d1bf27b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463998,"size_decoded":70721,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (329), with CRLF line terminators","md5":"3dd612c5e45938ebdd6727fad1c4c532","sha1":"d61ec0a0d5de6e520810b939fec9e13687424393","sha256":"58555a1f47c385860b9c6e9dc4d49d8d21ecb85a7bca0b250eb9d534052d22a9","sha512":"d6368c36d7e700289681dcb000777633a5e4e4c8ecb82d5ea1d211d0f8e536dba7af73a5387852aac7532be73fc62683430ce6f1e47107a94ef8bb918cf15070","ssdeep":"3072:xW0dYCSM6c8oah3WEaY9XuXHnpfMoRwAblEc52hJw6klIzDE8xWA8o/TZb3yi60M:Kqcz5FVS","tlshash":"c2a4b648da015005b23b9bb5dfa56728fb611053cb0252edfae0604dd7cc6ad2a7afdc","first_seen":"2026-09-27T02:44:53.596434Z","last_seen":"2026-10-07T14:38:07.850432Z","times_seen":9,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/js/page.js","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.680Z","timestamp":1791383846680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /js/page.js HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"dlnzoblhi6oq1ur-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 01:00:01 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYlF96SYUHeJWFt5ixXhNNc8fg6yvwqtaGUARtntLS36j97%2BJ0J%2BPyBGjmJPwgkaEMh5aA3OBarkRTgNn6RJOOrU95CzxiS8auvAGxW4lvYMIP6rheSUf00I2OqitB%2Bte04%3D\"}]}\r\ncf-ray: a46da4d1cf29b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2403,"size_decoded":1536,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c24786859f1412c412d4fd78a85d1da5","sha1":"36305a4f471a3d9e8d2b6391f18e51ce1e778792","sha256":"5d22ed17f72c330b5267612f44c1db059e830c269d20a82c8795812935dd58a9","sha512":"57dfdb8f79eeae411f81d0805c3ebf055ac020d8784ba31c9f6e827573a712fa2062605ded66916b4d042ef75caa89c046a59a3f31ec77f74c06a28984fc8ee8","ssdeep":"","tlshash":"3d41982eb5a23172043b63ee879f9ae836e510974142ce013d9cc8c98fe447516adef8","first_seen":"2026-09-27T02:44:53.597859Z","last_seen":"2026-10-07T14:38:07.852692Z","times_seen":9,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-010.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.688Z","timestamp":1791383846688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-010.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo4fum71ja7\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUrBIa4odxx8ugrj4botgv9o9GrQdHcI2x6sPujq%2B%2BUj15p0aVLckHWa46jayu%2F2wmsJoihJxLxGoHW2GQrUljBgoUkPTT3Vh9G2A99ai2oRj5xJbSYjMWSAuvBtB9RkctI%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1cf2fb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":959,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7e5514871e9137bd292c62db4a601df","sha1":"7a1d7192f8d85906a7d82ce133ce34f6d1d46d85","sha256":"b36a72faa4fbd91bfd6fa66fec34cec42b7835183a236ccf2bd02c241d9f1bcc","sha512":"d6e50bb608c8a3b383f9108bdb6459ebffdced2eee5caf9e5a65fda15125e3f4fa3ed8bb942ec2a798d8b804588b982eab056965b83e46e436cbc20b0147a29c","ssdeep":"","tlshash":"86e0d858c30c4c3de5168674976ab67911abb18167482518aca11a36420baae74776ec","first_seen":"2026-09-27T02:44:53.585515Z","last_seen":"2026-10-07T14:38:07.853955Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-014.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.697Z","timestamp":1791383846697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-014.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo5vdtytg3s7l-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDZOEhKXiPlPnvCb0%2F3b7Xu0a8bfugbvPwLJg4gI3vrVZvWzCqC0%2BXBJSk3LLCfPw4UiWGaNic06YFGZU6W1SEOn%2BR4VzzsXQhziDmWXRu2m%2FUzfmWXxUU5QtPS2KJnYejE%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1df39b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176529,"size_decoded":63897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d727224525d271216d4fac2dc8b4a7e9","sha1":"e15c8fdc9d41cd82872201f606bff6a29c08a49f","sha256":"e16b83ab17aa40635a0d56be805344ef948b4237676a34b4fc4b70b2416b1da5","sha512":"57e9b33c56ea8c59d0f9caeeeb28119243992413d45dd75530b7f1fccd353c76ca5c9d9bdca0ddc7eb38b54aace49643327e2c025e8890cc19890b55451066fe","ssdeep":"1536:OG+4ChZleirMyHJ/GwAymyJhX5ZOHsbCBYOGu+FG8LLxPkDgVeKFejFPwbc9XNSp:0slK","tlshash":"2004c6cc3bb01ad8cddccbebbf11959c7926d0f758494e24c97c8f5d219181cae96a82","first_seen":"2026-09-27T02:44:53.575758Z","last_seen":"2026-10-07T14:38:07.855137Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-023.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.707Z","timestamp":1791383846707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-023.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo8ka6p3157b-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CIi5hHKb8yW%2B2bYJsYj3J48UKTqta0xLhDg2ApaxNbT7sWtvjQekgJoM6FEMXp2iYskIcXnq8KG6DuwYQnv4ugl23qGGvVOt8psv2WYLGdNyoULE%2FJUGNURPPWINSOkPDY%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46da4d1ef44b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6743,"size_decoded":3397,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa8d679da665e84b16c75715320425a8","sha1":"7c2575496000c86af1e9ca0c931410a10825c438","sha256":"488f7d947751ce10fc9ec8dd24f3cc4fe8ecc99cd6722a6035ddd5d8ebe607ae","sha512":"e27e8ce6ecf489cdc5a272bdd6dbf269a488f8326480dc02efdac86fa5fd580058c8ca3dddd95eacb66f046531272f634966087ef113ff0eb6ed532cfbbfc920","ssdeep":"192:qu8K+qOJQ4HlFODtj96y+a8QXXuN5esvCub:2KaPFOhpVNu75b","tlshash":"13d184ecaba462a1b8c1e7d1d666743df22f28f97b45ce84c6449ed878490dddc54cc0","first_seen":"2026-09-27T02:44:53.579647Z","last_seen":"2026-10-07T14:38:07.857621Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/fonts/font-005.woff2","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.795Z","timestamp":1791383846795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/fonts/font-005.woff2 HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\netag: \"dlnznquizvfnk74\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:15 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKZPfGgTt1i%2BkO1iNvzTDERla7y%2F%2BWDTut3Go1MuYzCJQO6XCERAqabBbPodPmUY3xjcXOhB00OZaZD9Qd%2FMzfh%2FRsIjeWPVuikx4nU%2F%2BYn146HztdZ4E3dkSwNwSUtQPaA%3D\"}]}\r\ncf-ray: a46da4d27f62b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26176,"size_decoded":26912,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 26176, version 1.0","md5":"f4c74eb7f80ab4cf238b61a021ea7fe9","sha1":"cbdf9d6617c9b249e742e6bab5904c5135bfb5b7","sha256":"c01d8b381d17060934cc12bb687ff45bb94ed0611918fbb5acba3563dbd4429b","sha512":"b11f5dc0d446442915d2adaf92f6f5de613a43ad1a4de89ba8db81b748c280d1408e383b6a65595906374c0d63b8aa8d2d1729703cfea90a1a388c4a3fc7a10b","ssdeep":"768:IFo67C1f8mfTcEzUlxIDHJXj7Ho063pa8mhJU:kJ7C15fFdbhj7Ho1pAhJU","tlshash":"d7c2d0c378bf270573443d34fc82a2a469074a05e9a57bc55efed7402ed2877da82b1a","first_seen":"2025-01-31T21:48:31.434695Z","last_seen":"2026-10-07T14:38:07.862771Z","times_seen":519,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/chunk.43.e0ykluku.js","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.681Z","timestamp":1791383846681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /chunk.43.e0ykluku.js HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"dlnznnpo3ie3d6f-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UpFnOU%2BJVe0drJcudomCR%2BwFMAb0jvDo0zx5jvY4iX1o4tD9MNpr7GJhqGhGoQ4rekpmppYDqVKzt%2FSV96qtZeznzbsVBa1jUrAPUGW%2BIp61GjwupiT1L9ycXmyu%2F%2FkboI%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46da4d1cf2bb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17079,"size_decoded":7432,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8594)","md5":"c8a016af718a07aee6197e9a70064430","sha1":"61528febd3ef96fdeb48980d6e58a70ed2de9975","sha256":"6dccac5674c471018b74914483ab9378d7022e1d5040fcfee70f5c0f9d89b467","sha512":"0f9d8566b3df48810ef19cbec72529e5daba37c72ed89ba049841289f107737c8439b78f535b307bbb6e27e0ece009a988c87fda16989e7eab40bef339c37c38","ssdeep":"384:DTgrrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:AvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"22721af87365206a03633532607f9102d177eb118d5b9050a2e28a957decf6be677fc8","first_seen":"2026-09-27T02:44:53.599511Z","last_seen":"2026-10-13T10:45:26.202609Z","times_seen":21,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-009.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.687Z","timestamp":1791383846687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-009.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo43lfqk4b8\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pxp5GbfI2a9mhUWAw22QfaMx2ZrGJ1Ur9JEv7Bbovt71kmTmmhnx252e4ckvPQbQqAFcpSaMH0s%2FDUrg7AqShQkzq1MQH2fnoHQYg0aWe1hSv7qz5TdgLkqHY5zicZUZN24%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1cf2eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":979,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d1d54cabf6d24e69daef77641233155","sha1":"420356b3bc9d93e8af5d0ad733d7a4b340122b8c","sha256":"5e4d6b64934bb8a992898a8902e93acdf1d9ed35bc3c8ba0ba15ba84864320e5","sha512":"17415f2bfdf552e6156b024f239fe579db96a7d6f36b4b587ffaf9d5d580439220336534102c11592afdc851a3e2fdf05cd794aa628a333604ad9abd4e70b16c","ssdeep":"","tlshash":"04e06136d30c0dbcb993c690c75772745f5df18263ad5464d4685539411789ee02b4f8","first_seen":"2026-09-27T02:44:53.627899Z","last_seen":"2026-10-07T14:38:07.866445Z","times_seen":9,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-011.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.691Z","timestamp":1791383846691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-011.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo4s3sniwli-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2P4%2FOLVvo028SfVViVSl%2B%2F%2BD%2BpPH0CckUx65TqBxjxW%2BakA%2FkKl3aDT8m67w3thK2t1yf2DI7S8XpwIIy%2FmcDXklxgajXBKUkC7LTfm%2FnO465Gp6S3%2FLGdq%2Bek3Wg1FroW4%3D\"}]}\r\ncf-ray: a46da4d1df30b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":1163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecf67b90fb880690c09802b1a11f2922","sha1":"99b5f067dfcbaf6f1475da718053f09459712a74","sha256":"c4ac6f2af839d560529625e1dfce778f2b02324feb11f6b0b9e33c076730d505","sha512":"823096229fd02f4c817b97e03f1774f21d5482828df8dcca6b5a4d7c9da4b6f6e303f54e421bc2a4cbe157fbeaa84a9fe73edcb8fbdb59866ac46adceaeeed6b","ssdeep":"","tlshash":"500185f2935041b1770e9339d8e1a0f73a93e0f6ff40510c424aed24e0a44069acef4a","first_seen":"2026-09-27T02:44:53.600952Z","last_seen":"2026-10-07T14:38:07.867268Z","times_seen":9,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/icon-defi.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.694Z","timestamp":1791383846694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/icon-defi.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo00iot55cu\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:35 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QexoTG7kpUv4jnYvXEmjGhawwPcUfq1NOYj8w2p06PyiC6maWg2IJgWa%2BOJEgxUxZdU6CvVQ%2F%2BaReag5moWDtBXhOoR02sBPf03PVVcgAba4li%2ByZyK%2F203xQXsY2xOhak%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1df37b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462,"size_decoded":979,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7ff14ec475b6d5c5798f33e1dab68d4","sha1":"bd5916dfcf5079da91e51b5da8dedbd1fc0efd99","sha256":"6cfc1a32192bc16e2273fecdfd828ac10955ca8d97c303bb36383e837a14ce1d","sha512":"9cdfb5e0e1c9d4fcef9dffb3009d897aef87f29e3c17985355a52431090c555b703a54c31df4efac51d3fb82f136f26ccb32c378dcafef7975461b4de4482c63","ssdeep":"","tlshash":"7bf02760c24c9e2cd6024b658bd9b674016650e31b0c119cfc7113344219a5ffcbbffa","first_seen":"2026-09-27T02:44:53.587804Z","last_seen":"2026-10-07T14:38:07.873102Z","times_seen":9,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/icon-distribution.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.696Z","timestamp":1791383846696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/icon-distribution.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo0csgp8sdi\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:36 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8nGol26BcchUo0ZnqXUtH3ZmZfnM7UA32faJHNIhNwwhBpuhIoZIY0i0oa5tFs4j8uD4yknQKZrFmxyFn%2BV2v5%2F6OgEs46wyiM%2Fa1pxz26PQI8LrD1ZPcPurIBFVPo%2Fd3I%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1df38b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":1025,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7be719b66ffa531f199b4c55d88b670","sha1":"a306e1c59df4b2744086b68918c49cb8c4c760fc","sha256":"622b880c9bc1eef1157aa3c646859c5e236ee0f27c9fc1690b70c603dd83c2ed","sha512":"ada22d360e5eed31a361d4e691a8f5d0e6c7183cc3bc8d43c68bd6fd892ce83539bd6456ffd7ad211c19c2dfd7d776c06dbda2ad5ae24ea7f76a89ddb5e5b8c3","ssdeep":"","tlshash":"66f09e24c30ced3ca502c098cb7b7530106bd083135d925c58660e75474595bf43b5e8","first_seen":"2026-09-27T02:44:53.619897Z","last_seen":"2026-10-07T14:38:07.8785Z","times_seen":9,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-005.webp","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.794Z","timestamp":1791383846794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-005.webp HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\netag: \"dlnzo2qk4h0b4kq\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0h%2Bo2qIvoPVs0xN5W2nD25a7M3Ui6%2BINLcHfSpYX7yC%2BVPapCcjokpY8McFWnHjmVFl2UHGmMR7QMuDb3E9j21yfmiEWxrrvkvzay0k91MMT4NP7M91qUguj4di%2B6Ipa28%3D\"}]}\r\ncf-ray: a46da4d27f61b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5930\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5930,"size_decoded":6656,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 678x574, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5fd04af11ace6ce1d5a68b8a23f657b6","sha1":"26eeed19bc31d3db0315db489683bc2660d330b6","sha256":"6820b45fd93edc200d1759ee47d6e3ee271f0e9fe3f0ffb8123b6777360ec1a5","sha512":"5636f6fde386d53a0d81ebe14586f867a7a80cec29056851eb597ffd069665478815f08d29cfcb3f2db2a52e414bbaaba6c3f81708c14a38eeaee4dd757376ff","ssdeep":"96:xBpQWURgUxVodH5iY/ENxZhGvP0LTNgnq5d6a/T3LXr3qfvaF53VJiZWzWNmY:fpQWUOUx4ZF83zGv2gq76s7kaFtVJiZn","tlshash":"f3c17d7fb485b15cb0e86de6b14e2aaa462d304fe2dc96796cc507571f58f893c4e0b0","first_seen":"2026-09-27T02:44:53.601982Z","last_seen":"2026-10-07T14:38:07.880507Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.426Z","timestamp":1791383847426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://holder-zama.xyz/\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=46hMf2DkrOmQ_eYWVkpGwcmspdDCEd6Q5mjCsEmWbKY-1791383847.4623406-1.0.1.1-TcVIx6fN9B5mry6lGMJ9OMbJobfkk8rmXV.ugu.XfpaSNB3XBhr7BlpN9tw7BrnowBsxK7Yk4ZuaPTq0QJLNDzTzUsB5Uy1Qbk_nxJ3jDpUiA0PyY_tU5gXriohjZ1ek; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 15:07:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQf%2F%2FarVTyfY1LBuuKMxwmSbWzlVguutzAxfL70Cr0OPCC7mTP6VuqXizqjdRQwCu8JkPRtgHyoq%2BztzHob20%2FM0M3RgIlSxks0aq3dZ9pwhkQpFtErj7z21Zl6SMI809xE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a46da4d69a6656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"46hMf2DkrOmQ_eYWVkpGwcmspdDCEd6Q5mjCsEmWbKY-1791383847.4623406-1.0.1.1-TcVIx6fN9B5mry6lGMJ9OMbJobfkk8rmXV.ugu.XfpaSNB3XBhr7BlpN9tw7BrnowBsxK7Yk4ZuaPTq0QJLNDzTzUsB5Uy1Qbk_nxJ3jDpUiA0PyY_tU5gXriohjZ1ek","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-07T15:07:27Z","raw_expires":"Wed, 07 Oct 2026 15:07:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=46hMf2DkrOmQ_eYWVkpGwcmspdDCEd6Q5mjCsEmWbKY-1791383847.4623406-1.0.1.1-TcVIx6fN9B5mry6lGMJ9OMbJobfkk8rmXV.ugu.XfpaSNB3XBhr7BlpN9tw7BrnowBsxK7Yk4ZuaPTq0QJLNDzTzUsB5Uy1Qbk_nxJ3jDpUiA0PyY_tU5gXriohjZ1ek; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 15:07:27 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1058,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T17:43:08.814711Z","times_seen":19103443,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":130,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-e46bcc67.brucelee18.workers.dev/","fqdn":"api-e46bcc67.brucelee18.workers.dev","domain":"brucelee18.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.182.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:27.900Z","timestamp":1791383847900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brucelee18.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:10 GMT","end":"Tue, 08 Dec 2026 10:11:03 GMT"},"fingerprint":{"sha1":"A8:2A:B5:16:FD:70:DE:7F:B3:09:93:34:4D:57:1B:3E:C4:FD:AB:04","sha256":"FB:42:AF:29:1F:65:07:EA:FF:DC:B0:E8:1C:F5:1C:8B:6D:40:7E:3C:33:B1:0A:32:20:53:59:8E:7C:68:35:1B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api-e46bcc67.brucelee18.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://holder-zama.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://holder-zama.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"M1-_OkK11mISSc5jowjuuOkh-rrL_7wlkKmYD4ImSGd9ueHRlu62fHUGLLu9J_TYbb5zQjBQdKjgEQYg1qO46XxQttPH2EhxDbaqTR9I"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nVbhSEPV3GAViB%2BMtzdOORwdxJJ2hhCvuKHoO8zziw7SvxFNUYdFGefRNxEF0G0uHpUQmg3SNEYxj0%2BtWfwMq6M45fWGrw%2FQxzTvaO5utRqnwEp4Hx%2FfNy3RMd6QS5zLSoS8JSIgV%2FckP%2B4KxmU%2BGeSfiBYUfiXpKz4\"}]}\r\ndate: Wed, 07 Oct 2026 14:37:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d969230daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30003,"size_decoded":10313,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30003), with no line terminators","md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-10T14:22:55.095779Z","times_seen":230,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-008.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.685Z","timestamp":1791383846685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-008.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo3rcupoy3f6-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3lAvu138571lJjz5powHAMxNrN3Gozrk%2Fsl93vUps9upW91EwBgUymC2lm82VInZyinTsUaFDDL45W%2Btuok35WriQzeVnKBAIT7QKJl3Ttfsp1j6LkiZ7k6E2RewR%2BeowA%3D\"}]}\r\ncf-ray: a46da4d1cf2db518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1040\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4434,"size_decoded":1798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82c34073e8413e6d7dc773b416fb8dd1","sha1":"c76d3479e8221e55f0af10e3446ce68f020082b7","sha256":"a3047baf37896d575719db9744f42adc416264df88696f43e22487e0610908c8","sha512":"4d2c35eae1ace50fc88bc7aa75723c605ad941c686c3069e5141f37378ecd989481561d78f5f790da28f81734c5a9510d3eeb3099c238546eb7f363dfd48355b","ssdeep":"96:+hFVGJdVlCQ7GvQNRe54jvBDY/ne7nqqthGfKY1hK74yJ:SURe5mSYR","tlshash":"8e91adc1f14442752aabe7f4e4bc90d754733dcc8b0ac45b328aa674dc2956ba93fe60","first_seen":"2025-07-12T23:22:57.272644Z","last_seen":"2026-10-07T14:38:07.882038Z","times_seen":340,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/icon-rwa.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.692Z","timestamp":1791383846692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/icon-rwa.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo11bf1ttc5\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:38 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cuwWp468oVoQEhPaTjqA0lIxpCx1p6zBCDwAERhEbqJPh%2F2Vbr99fYHvuw5LeYyxQrRA4UIx%2FcXIvdu37JB%2BxNn5Fg%2BaSg2%2BwF8Eo%2BC7Y6W3kyWTT%2FYVjzMkUQG4htb9mE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d1df31b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437,"size_decoded":978,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c98ddd4f7074b20a895e678f04652e0","sha1":"5ac48640999345c673ffc1341d3b6264873b0fa7","sha256":"59ee22816f0c7c2cc0536f5f7b18da947161cda8298f205a5b93e2d48a46f7b7","sha512":"9013362325a330c8762300df42dcce2ffaffc893bf87aa0f63fea3add11f714ad414ee451772da8fdf1521b3ac379c3d8ab351101521678c56166aedefd311db","ssdeep":"","tlshash":"b6e05cadd20c1d2c76134bb0eb98b530093d13e1126d809c98650a31221026ffc77ed4","first_seen":"2026-09-27T02:44:53.586686Z","last_seen":"2026-10-07T14:38:07.883324Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-021.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.704Z","timestamp":1791383846704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-021.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo7vr8ci03np-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6VKzRqsJVYeyBiWGzYTvUF60iPfwVV6BAP4fJEwOYwQOWJbcw4VvELdgX%2FwXhiPe96ZlfISpu%2BFibiZzSU0k5JjrMHvHX2WSPDO5QDTPaWFYNQwn0JQgErDpNq%2BXofn85g%3D\"}]}\r\ncf-ray: a46da4d1ef42b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4741,"size_decoded":2546,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b167bbea5353e0261d8a9de9806b008c","sha1":"f1624fc75d5632b63c75e8e288ccb854f246e564","sha256":"dd32caf6c6074a1db43719909fbe4678e3e849e9ccd264b35511f87a0fb9988e","sha512":"7b84f861f344f97b3fe6f55a93de1d6a78ea24f860cf973cbd27148ac73be7c58a662a6ef83678c6ecd488f7d0f467adfb7affd42a681c14d8511124aac8d760","ssdeep":"96:KSJ+Z9xKXU8F2ipFvkA0KtFc+6PnJvdaSnkSsl5WkBInQsdf9fIX5:KSJ4bKXbF2ipFvL0kFcFJvTnBsrW6qLU","tlshash":"05a165ac7e10b75cf049d3eaa371247c2e4a9ce16491d75cc3ae28196463d0e9e38ec3","first_seen":"2026-09-27T02:44:53.606916Z","last_seen":"2026-10-07T14:38:07.88413Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-024.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.708Z","timestamp":1791383846708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-024.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\netag: \"dlnzo8wirpy72y0-gzip\"\r\nlast-modified: Fri, 25 Sep 2026 00:59:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nserver-timing: cfExtPri\r\nage: 2147\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4%2BovzXLXbu9N8FWgMdSkQnOb%2B%2BxgrL%2Bqu7quYYmlIWFvguApdLTDc2UtJDsTZAT0sM9%2FWzGhuVGO2cvVWIFPYcJDLdCrjG644IcFGuA3IuVY31grYMMXI5MaCmSRiCKdMI%3D\"}]}\r\ncf-ray: a46da4d1ef47b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3816,"size_decoded":2434,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60e3bd12e3046881a6c28f740c50a0ab","sha1":"f33a546cef2cc896feed3f0567589e1de709ebb5","sha256":"0c3b40080b8e70f34ed4ced8d357a501fecc6c5a9623765fe093a8f948e3c881","sha512":"2f38ac6d522c68351d101d9f9a5008923ff6718e46d0a676de213ffe27de15cc09c41c027cc575f8a2a64ffd7ce6f44552c48b41265339057931cc9455b5da86","ssdeep":"","tlshash":"917183aed3e0b3e0a007e7f0de22147a7ba638f91572c49587c16986ba7518c856acc1","first_seen":"2026-09-27T02:44:53.613223Z","last_seen":"2026-10-07T14:38:07.889391Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holder-zama.xyz/assets/img/img-004.svg","fqdn":"holder-zama.xyz","domain":"holder-zama.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://holder-zama.xyz/","date":"2026-10-07T14:37:26.793Z","timestamp":1791383846793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holder-zama.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 21:34:01 GMT","end":"Wed, 23 Dec 2026 21:34:00 GMT"},"fingerprint":{"sha1":"1B:BC:3E:04:28:86:07:02:87:00:48:98:16:BE:5E:D8:87:71:8F:29","sha256":"7D:9C:BB:82:B5:60:FF:83:CC:8C:AB:0A:88:B4:22:F0:D7:01:D3:65:29:1C:CA:3D:DC:61:9F:8A:2B:95:CF:F5"}}},"request":{"raw":"GET /assets/img/img-004.svg HTTP/1.1\r\nHost: holder-zama.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://holder-zama.xyz/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"dlnzo2ebjg556d\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Fri, 25 Sep 2026 00:59:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 14:37:26 GMT\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dkw0Eyd02Vm4BnNb9HUYDk%2BlVxT77UfC8KN7jp%2Bz3RyF2jQZQNwQXO34UOmYUDZUdosj0YZcvSBirisCG6V0QWFfnLE5GcssdK6rP%2BEADaebD%2FeY7JXr28%2BREGJaXyhaKjo%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46da4d27f60b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"446b80267d3eb5d00ec97d9a32e1ab30","sha1":"66d1785882bd07b3e6a5e916df876608a3b0f57d","sha256":"26128ec903e96bfb8978384d8fec846200b78dd9e955852e0a0d9482889b0f0b","sha512":"3a5a9475f445bedb336eb8f30631b31dd7227e0720af62dd33f860a1ce0ca73407ead7ea47a4563c14ef9c078c61f11c46a9f31dfe7814faa63bef258f78502e","ssdeep":"","tlshash":"d7d02355b08e77054c37c394d56837a4005730f3565d9154cdefcd2071444c424adcc0","first_seen":"2026-09-27T02:44:53.58331Z","last_seen":"2026-10-07T14:38:07.890187Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"holder-zama.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}