{"report_id":"b5d03b14-2dc7-4e32-a11e-e6d71629332d","version":6,"status":"done","tags":[],"date":"2026-04-15T05:05:01Z","url":{"schema":"https","addr":"multichainconnect.site/","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"multichainconnect.site/","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"title":"DApp Ecosystem Hub","dom":{"size":67258,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (51554)","md5":"6b325f207c486f4ea9e00272b23599bd","sha1":"7345beb59d9a8c03a5fefa9e4010fd03c52dfc83","sha256":"e005e090498b074f1807e3af78e8bea7a0fd58d038632a09219be069f10b08b5","sha512":"089d703ac9cb1c7341691bceac4fccad0e182c280077f6043a9080015c05b163cfef14240e5169934642d9537782d8795a282d0bb978dc550e365d6ed6a2ea6e","ssdeep":"1536:Fx/c64Jysq7viwaB8SHXJpEntise7V/5xqTkhGJ:ou","tlshash":"9f63a1282344233d541b86d4fae4f32cd23dd789fa66885ef29c01935bc3e55deab294","dom_hash":"domhash7ba93d1bb679427397ac30a49c39978c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"multichainconnect.site/","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:05:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"multichainconnect.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-04-15T00:50:53.989981Z","alert_count":0,"request_count":1,"received_data":759,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"multichainconnect.site","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-05-23","domain_rank":0,"first_seen":"2026-04-15T05:05:02.376485Z","last_seen":"2026-04-15T05:05:02.376485Z","alert_count":4,"request_count":4,"received_data":484172,"sent_data":1837,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"multichainconnect.site/assets/index-Bn3t2tUE.js","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84bcf7fd1964ca554b78224f6763ead5","sha1":"655facff04090e905ea89725ae8bb356b2d24590","sha256":"f58a6761283a07aec9bea2b282d89d671f21e86326406b428185b7ddbed784c4","sha512":"aecea89b1514c1b5b1967ce67a9bdb82881f0a5e619b357c03b6850d1de4ffb9196e8ba662495fb1c105718f25c614b55d6fc1ba5c0edd354c7159c8f0a60587","ssdeep":"6144:RYx1sRTpUgMDLD5pufL3hUAR6RtvO9LswngMzYM8Wu44LncSgt7M:3Y3tpKL3hc29sw90M8bh","tlshash":"cc947dc8719ab1796fb706a1503f410a723d2a02780d8450f13ceda976b5a45e2bbffd","size":408458,"data":"","first_seen":"2026-04-15T05:05:06.272397Z","last_seen":"2026-04-15T05:05:47.102072Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"multichainconnect.site/","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:04:40.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multichainconnect.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 15:15:16 GMT","end":"Thu, 18 Jun 2026 15:15:15 GMT"},"fingerprint":{"sha1":"25:13:48:A5:55:46:5C:04:58:31:45:AE:26:48:51:BA:7A:37:DF:14","sha256":"B4:14:F4:63:0E:06:ED:94:25:D2:7B:E9:2D:16:3D:7C:70:AB:5E:C4:16:C2:D3:4D:C3:1A:B7:63:D2:6E:FC:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: multichainconnect.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 38720\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 15 Apr 2026 05:04:41 GMT\r\netag: \"ac46cc02c445decedb4f78946a16b1af-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP7RDZ33MDQ6DTVP22ZFEPDR\r\ncontent-length: 416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"f8f50d1f237e49d4adbee998403f4f85","sha1":"71ad55279f8edfb6487be6a18baadb28648a5949","sha256":"450e22a4bb816a1c3469b20cd8810d27b7c6828b245a7c902c80f0e3e8017a9b","sha512":"69c9558ddd0725a6e8cca90be8f2d81b1dc734f7fcd2a6960feb859e603b0ff87eb5ee076fc35257a6220824731bad018190a21def60727ecbc85242469154a7","ssdeep":"","tlshash":"ee219a9755a0cc0553a0c51828daf4844db2e28b8705dc1ab5dd60ae9fc1fd0c7f76b0","first_seen":"2026-04-15T05:05:06.271503Z","last_seen":"2026-04-15T05:05:47.100942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2255,"timings":{"blocked":1113,"dns":1060,"connect":22,"send":0,"wait":24,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"multichainconnect.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multichainconnect.site/assets/index-Bn3t2tUE.js","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://multichainconnect.site/","date":"2026-04-15T05:04:41.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multichainconnect.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 15:15:16 GMT","end":"Thu, 18 Jun 2026 15:15:15 GMT"},"fingerprint":{"sha1":"25:13:48:A5:55:46:5C:04:58:31:45:AE:26:48:51:BA:7A:37:DF:14","sha256":"B4:14:F4:63:0E:06:ED:94:25:D2:7B:E9:2D:16:3D:7C:70:AB:5E:C4:16:C2:D3:4D:C3:1A:B7:63:D2:6E:FC:99"}}},"request":{"raw":"GET /assets/index-Bn3t2tUE.js HTTP/1.1\r\nHost: multichainconnect.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multichainconnect.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 38719\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 15 Apr 2026 05:04:41 GMT\r\netag: \"5f41a22a4512192ab68653141ce60739-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP7RDZ8X29KW3Z40SCQP39FW\r\ncontent-length: 124805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408458,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"84bcf7fd1964ca554b78224f6763ead5","sha1":"655facff04090e905ea89725ae8bb356b2d24590","sha256":"f58a6761283a07aec9bea2b282d89d671f21e86326406b428185b7ddbed784c4","sha512":"aecea89b1514c1b5b1967ce67a9bdb82881f0a5e619b357c03b6850d1de4ffb9196e8ba662495fb1c105718f25c614b55d6fc1ba5c0edd354c7159c8f0a60587","ssdeep":"6144:RYx1sRTpUgMDLD5pufL3hUAR6RtvO9LswngMzYM8Wu44LncSgt7M:3Y3tpKL3hc29sw90M8bh","tlshash":"cc947dc8719ab1796fb706a1503f410a723d2a02780d8450f13ceda976b5a45e2bbffd","first_seen":"2026-04-15T05:05:06.272397Z","last_seen":"2026-04-15T05:05:47.102072Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"multichainconnect.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multichainconnect.site/assets/index-BrjJIqin.css","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://multichainconnect.site/","date":"2026-04-15T05:04:41.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multichainconnect.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 15:15:16 GMT","end":"Thu, 18 Jun 2026 15:15:15 GMT"},"fingerprint":{"sha1":"25:13:48:A5:55:46:5C:04:58:31:45:AE:26:48:51:BA:7A:37:DF:14","sha256":"B4:14:F4:63:0E:06:ED:94:25:D2:7B:E9:2D:16:3D:7C:70:AB:5E:C4:16:C2:D3:4D:C3:1A:B7:63:D2:6E:FC:99"}}},"request":{"raw":"GET /assets/index-BrjJIqin.css HTTP/1.1\r\nHost: multichainconnect.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multichainconnect.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 38719\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 15 Apr 2026 05:04:41 GMT\r\netag: \"5f50d8efb4b90fef3ed4b7955cd2eba4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP7RDZ8YJ56CRMP853F53J7N\r\ncontent-length: 11210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71499,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b7088f2fbcb54d34823c1aee8266eb52","sha1":"cdb90368f4670581aa919d14762de8bf67331987","sha256":"94c24bcca569248b58c8063a3f7e4e293ed8179cdcb470d1d8215b0be0543b02","sha512":"706fe7da174421240daf74d7b11e3d039174c5f8898ffddad47ad21489e5032ad6636947a6a514c34b2655581b704a97d648e9df3216ce94e21ee2c1111eb371","ssdeep":"1536:ZFhm9CbYHkIgPqQkOU/yBbcaGYCr378VQZkt5FNCoN/:bhm9CQkIgTURaGYCr378VQZkt5FfN/","tlshash":"ca637519b919613e3c2791e8c3ccb6eca11ef0c0de3b06b9be9a412127d27f6197b514","first_seen":"2025-10-31T07:04:31.232638Z","last_seen":"2026-04-22T13:11:38.160499Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"multichainconnect.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/gptengineer.js","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://multichainconnect.site/","date":"2026-04-15T05:04:41.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 20:25:47 GMT","end":"Sun, 12 Jul 2026 21:25:38 GMT"},"fingerprint":{"sha1":"B5:C2:5D:87:D7:51:E0:73:8D:83:C4:92:3B:A5:57:F0:18:C3:10:15","sha256":"B7:2A:6D:36:CB:2E:C6:82:0E:25:CC:93:EE:AC:6C:04:54:D4:F1:4C:15:85:D1:44:FB:0F:51:54:CB:A0:39:00"}}},"request":{"raw":"GET /gptengineer.js HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://multichainconnect.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multichainconnect.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:04:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nexpires: Wed, 15 Apr 2026 09:04:41 GMT\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nlast-modified: Tue, 14 Apr 2026 07:58:39 GMT\r\nvary: Origin, Accept-Encoding\r\nset-cookie: __cf_bm=1EeJNZ3YmghpY7GOJ41zKmCQ5TB8H5Ko_sEx.a2VPNA-1776229481.7933078-1.0.1.1-T_s0s5hhR36P9r2hx35qo953jl.qx9KZOJD1WyT6MtUpZbZ9yKW6DpiKQLy8cRYyhZUvXFnSFJI4ckh9str5rDIda6XEx5lR7mFDvIQctJ8hTY1rQfq69MnxF52Ft2WO; HttpOnly; Secure; Path=/; Domain=gpteng.co; Expires=Wed, 15 Apr 2026 05:34:41 GMT\r\nserver: cloudflare\r\ncf-ray: 9ec869353cf556a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T16:09:26.709379Z","times_seen":14066297,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":80,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multichainconnect.site/favicon.ico","fqdn":"multichainconnect.site","domain":"multichainconnect.site","tld":"site"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://multichainconnect.site/","date":"2026-04-15T05:04:42.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multichainconnect.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 15:15:16 GMT","end":"Thu, 18 Jun 2026 15:15:15 GMT"},"fingerprint":{"sha1":"25:13:48:A5:55:46:5C:04:58:31:45:AE:26:48:51:BA:7A:37:DF:14","sha256":"B4:14:F4:63:0E:06:ED:94:25:D2:7B:E9:2D:16:3D:7C:70:AB:5E:C4:16:C2:D3:4D:C3:1A:B7:63:D2:6E:FC:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: multichainconnect.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multichainconnect.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 38709\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Wed, 15 Apr 2026 05:04:42 GMT\r\netag: \"f5cc965ce37314af5d862105518f9c58-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP7RDZKKSEJVC3WV3DGTXGBZ\r\ncontent-length: 240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"ad1a6f4c5183484aea75bd061d11fc25","sha1":"094e96e2516afe3e3bc38ed14c60ed400e9cc2e0","sha256":"9f081d20c7c14cd4d08271b728d7c62b997d894150915760c222f01285f923ba","sha512":"d618cef1fc573100beced5a37975e1771a12c2f31fb1e577e2a292d506acf7419c990fe54133f50b42b4ba9266ee8d81a16ac6200ec815e1be2176e922267851","ssdeep":"","tlshash":"e8214662e1413236d4527136c317eab2b6b40eaa30244d4fa6f03f4735b13c30c28e23","first_seen":"2025-03-04T19:56:52.81369Z","last_seen":"2026-04-22T13:18:05.060602Z","times_seen":202,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"multichainconnect.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
