{"report_id":"ba656379-4906-4488-9059-680b9f2ff5e7","version":6,"status":"done","tags":["suspicious"],"date":"2026-01-18T23:46:01Z","url":{"schema":"https","addr":"registration-spsc.fun/","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"registration-spsc.fun/","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"title":"SPSC Partners.","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"registration-spsc.fun/","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T23:46:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":2,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-18T23:45:37Z","timestamp":1768779937,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46848,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-01-18T23:45:37.039011+0000\",\"flow_id\":999526678756287,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":46848,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"y9be76.solauth.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3463,\"start\":\"2026-01-18T23:45:37.031679+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-18T23:45:38Z","timestamp":1768779938,"ip_dst":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":51016,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-18T23:45:38.434891+0000\",\"flow_id\":810204520405212,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":51016,\"dest_ip\":\"173.231.16.77\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":917,\"bytes_toclient\":4662,\"start\":\"2026-01-18T23:45:38.153820+0000\"}}"}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":2,"received_data":26774,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"via.placeholder.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2002-05-05","domain_rank":229550,"first_seen":"2017-06-01T15:41:00Z","last_seen":"2026-01-14T14:31:34.056259Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":2712,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":6,"received_data":232382,"sent_data":3352,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-01-14T21:28:46.256349Z","alert_count":0,"request_count":1,"received_data":2276,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"registration-spsc.fun","ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-01-18T23:46:03.147882Z","last_seen":"2026-01-18T23:46:03.147882Z","alert_count":1,"request_count":3,"received_data":1243508,"sent_data":1363,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api64.ipify.org","ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2014-01-05","domain_rank":26688,"first_seen":"2020-08-17T05:58:17Z","last_seen":"2026-01-14T11:40:50.075214Z","alert_count":0,"request_count":2,"received_data":386,"sent_data":818,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"connect.sol.ms","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-01-18T23:46:03.161332Z","last_seen":"2026-01-18T23:46:03.161332Z","alert_count":0,"request_count":5,"received_data":784875,"sent_data":3323,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"y9be76.solauth.workers.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-01-18T23:46:03.152838Z","last_seen":"2026-01-18T23:46:03.152838Z","alert_count":0,"request_count":1,"received_data":781056,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"registration-spsc.fun/noir.js","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba7a3134f9dcbfefe9b1b56b352729d2","sha1":"c8e3a2011c88707aa7b87daf0a25395750a52ba9","sha256":"8cce70ae69ddc787828442ca9832de3df6bac3cefef13d9f998dac5570a18016","sha512":"b6caeb8e26216b4ca85f5ff36e3a988391340c192451664dc28d7da407442cad667965297a27de2066c871ad8870209a1ba588649127dd2c023d527e25780168","ssdeep":"96:CLIb5b6cWV3dYtV27/78emgO1JvSHffGG+LGXwKkvMoBNK4+0nwxXwXG7SBA:yocdYtm8hU/focFoBNK4BiwXkSBA","tlshash":"ebe10a6bcf4b3646cab45b4426ee1edd091c1f8b64e2448dde0a6ad4874fa2604dc4ec","size":7243,"data":"","first_seen":"2026-01-18T23:46:09.212349Z","last_seen":"2026-01-18T23:46:09.212349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"registration-spsc.fun/","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"ce35d1112d93d1dd47ce67a7f813d578","sha1":"8e28fb51ce8e6cf0c9dd7a7fc6f10b46e56b5a5c","sha256":"5ea415846be7bde5583c056ab3bac11e7105d81b4e0675ca4cadaf1b6f910633","sha512":"96a223de6d579ddffd8db62a74b06554e05a3c925d7ca2fe0dfcaf951971ab83e817a0ab689d21026fda63d34b428d37621b590af57fc18f5551affa8d1b3c39","ssdeep":"96:x1GTFGKLAbwozEiWsMdx+i2IctcqyFfDFfEdZooK:x1GhXu1oxxQcuE","tlshash":"20b18555bef712b1a1bbb12b269f930c32b610036105cd2575ec9640af5dea502bbec5","size":5351,"data":"","first_seen":"2026-01-18T23:46:09.248835Z","last_seen":"2026-01-18T23:46:09.248835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"registration-spsc.fun/","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2dbe8abc734f64cbc3dc3d4714c039e","sha1":"c43d041d786e7ddac86141cfb45c395b7ef94fd3","sha256":"7c7688e14879232455d37f8351d30693440947674c5b9d61d6f88eb42ce1fc55","sha512":"1b03bf7e71e86050e07eecd73510d607685bcf36163a1c2df22b0d3354323fccbc08cfa9da2cd10bd3b89d0f08371931fde5f2f8f1363a1e5009fb442882e529","ssdeep":"24576:p/157Mh+g1NqYNcho21MR4XHmisSBZ6Vb/zMm0+4A2Xr:p/rwxqheR2BZ+HMmeB7","tlshash":"d1452333277738248f7670198b1f7b417e34488b2806c9af7a5c57e42fa9720495beb9","size":1176507,"data":"","first_seen":"2026-01-18T23:46:09.25504Z","last_seen":"2026-01-23T08:44:01.704962Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","fqdn":"y9be76.solauth.workers.dev","domain":"solauth.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e43ebdf81b180a86b72c00e44ddff836","sha1":"9841725ace7ff02023eeb2fcc38dabde7d31b48c","sha256":"7b3a530864870084f0473954ab2ef34d8d1fef224b409a661b0308a0e831882e","sha512":"1dbf86fe13578ffa71e2043763674f02052e492bcbf8153147edeea64d4018bdfaffb4591e42b8894e6b19dabc9e598f3cce82b87c13a0b64d0c32fa5702b84a","ssdeep":"","tlshash":"a4c01257054746a351b461559b3562547913196f5950d024eb38c2962f300c7e5f798f","size":183,"data":"","first_seen":"2026-01-18T23:46:09.260211Z","last_seen":"2026-01-18T23:46:09.260211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","fqdn":"y9be76.solauth.workers.dev","domain":"solauth.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b69ac34187abb95ef1189bca3ae2cf8","sha1":"1600452aadc93cc04de40df57d3b92469802d9df","sha256":"3afad83eb955006d9810d25e28ed246a61e2780b559bfe2cf376034b852f6ed1","sha512":"7bf6af86e1bfdec4898c8b0b7bab63c5869e78d55223b824688cb7a49bdcb00d814caea23472f27f8730400f6acdf6bbcfeee6f881a1cca2ef4471ee159eb924","ssdeep":"12288:pG7jX8LRfMHBU+qVo/Pkams0oLxR2RV0TM:pGYuB/qVo08WF","tlshash":"96f42a8473a17071839765e1003b540bf339b82c780d457cb65cd8fa7eba989a63af79","size":777851,"data":"","first_seen":"2026-01-18T23:46:09.264063Z","last_seen":"2026-01-18T23:46:09.264063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"registration-spsc.fun/","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T23:45:35.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"registration-spsc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 16:28:22 GMT","end":"Sat, 18 Apr 2026 16:28:21 GMT"},"fingerprint":{"sha1":"D7:11:3D:40:E5:A2:0D:4F:4A:FD:3B:A8:95:81:C1:C5:5C:B6:9D:E1","sha256":"DB:67:82:50:50:AF:6D:7C:BC:34:44:00:6B:C9:B1:5D:A9:B6:FB:E7:43:5D:91:88:B6:D4:41:48:D9:5E:D6:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: registration-spsc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 18 Jan 2026 23:45:35 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sun, 18 Jan 2026 18:49:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"696d2b42-12d9b9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1235385,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6515)","md5":"60aa20067398facbadfb4ad882bcdc86","sha1":"f0677bb9a76749cedb1d6fdca407357cfb8023d9","sha256":"fdf9be40278ee597afdbb8d00016408ef8897976f2275382ead2e5386980fc72","sha512":"f6b4f44c6722f51b6729ac70df5a5bc68ea9fdf43f871bab405c0210b01aa9916e45298c302d0a0ac6c68a695a92a4dab0d1ff0fa6a2a86ba85778db6ef92319","ssdeep":"24576:N/157Mh+g1NqYNcho21MR4XHmisSBZ6Vb/zMr:N/rwxqheR2BZ+HMr","tlshash":"e52523361bb334251f7b60a997ab2f552e708847dd0ec9aa3bdc12d44fdeb604d03a49","first_seen":"2026-01-18T23:46:09.204157Z","last_seen":"2026-01-23T08:44:01.691513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":275,"dns":231,"connect":20,"send":0,"wait":39,"receive":129,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Mono:wght@400;700\u0026family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:14 GMT","end":"Tue, 03 Mar 2026 17:10:13 GMT"},"fingerprint":{"sha1":"EC:AE:DB:3F:30:AD:2E:C9:C6:A5:F6:31:5D:CB:EF:06:6D:B3:2B:E0","sha256":"37:8C:B2:95:4D:4C:79:2C:79:EA:6C:AD:61:E9:E6:30:41:EA:A4:C6:D4:10:5F:FE:3B:CA:18:F3:AA:FE:CF:F0"}}},"request":{"raw":"GET /css2?family=Space+Mono:wght@400;700\u0026family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 23:45:36 GMT\r\ndate: Sun, 18 Jan 2026 23:45:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17690,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"343dd8421c41190bb18852ecb19af6b1","sha1":"3e289a976a307453c47f040192e05ca85f272483","sha256":"7eb44e7a4a68ea3abe7ed65621265d458690607ab589d8700de866e8f4eab6a7","sha512":"e92a6054376680a41c014e1840b9f3d8a13ebf0f596b8b67dfd12803fb69e96081906ec54185c997ce675bf123e7d0a80f286cba95c4823e7c4bb1142819f075","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3Ls:vXuM0p2+g7GQVbe","tlshash":"5f829b92002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66536876d","first_seen":"2026-01-02T23:39:59.563248Z","last_seen":"2026-04-28T13:43:15.210878Z","times_seen":45,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":223,"dns":1,"connect":30,"send":0,"wait":49,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:39.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Mon, 09 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:74:6A:25:D6:31:FF:C3:36:8D:D7:54:7C:C2:B6:CC:A3:CD:17:03","sha256":"FD:FB:ED:F7:BB:34:34:80:84:89:30:C9:CD:7E:D5:3D:1C:26:7F:A1:2F:28:2A:ED:F5:7F:C8:CD:8D:7E:5E:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 23:45:39 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/1920x1080/111111/111111","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.112Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /1920x1080/111111/111111 HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/1080x1920/111111/111111","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.114Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /1080x1920/111111/111111 HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/450x320/1a1a1a/333","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.119Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /450x320/1a1a1a/333 HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"registration-spsc.fun/noir.js","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"registration-spsc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 16:28:22 GMT","end":"Sat, 18 Apr 2026 16:28:21 GMT"},"fingerprint":{"sha1":"D7:11:3D:40:E5:A2:0D:4F:4A:FD:3B:A8:95:81:C1:C5:5C:B6:9D:E1","sha256":"DB:67:82:50:50:AF:6D:7C:BC:34:44:00:6B:C9:B1:5D:A9:B6:FB:E7:43:5D:91:88:B6:D4:41:48:D9:5E:D6:92"}}},"request":{"raw":"GET /noir.js HTTP/1.1\r\nHost: registration-spsc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 18 Jan 2026 23:45:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 7243\r\nLast-Modified: Sun, 18 Jan 2026 19:36:15 GMT\r\nConnection: keep-alive\r\nETag: \"696d362f-1c4b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7243,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7243), with no line terminators","md5":"ba7a3134f9dcbfefe9b1b56b352729d2","sha1":"c8e3a2011c88707aa7b87daf0a25395750a52ba9","sha256":"8cce70ae69ddc787828442ca9832de3df6bac3cefef13d9f998dac5570a18016","sha512":"b6caeb8e26216b4ca85f5ff36e3a988391340c192451664dc28d7da407442cad667965297a27de2066c871ad8870209a1ba588649127dd2c023d527e25780168","ssdeep":"96:CLIb5b6cWV3dYtV27/78emgO1JvSHffGG+LGXwKkvMoBNK4+0nwxXwXG7SBA:yocdYtm8hU/focFoBNK4BiwXkSBA","tlshash":"ebe10a6bcf4b3646cab45b4426ee1edd091c1f8b64e2448dde0a6ad4874fa2604dc4ec","first_seen":"2026-01-18T23:46:09.212349Z","last_seen":"2026-01-18T23:46:09.212349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/modal?id=696d1950e224edc9cbdd220a","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"GET /modal?id=696d1950e224edc9cbdd220a HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 18 Jan 2026 23:45:36 GMT\r\ncontent-length: 0\r\nlocation: https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nx-ratelimit-reset: 600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWKrhJkhz%2F0W61TtK%2FgmtgatDssCo9%2FuYjfyp7M8LfKzTg7CYDzu%2BboYmdQpEuZxwgWr52S0IGmMVtwQ3Hpam2uSFAeD9lTq2mkM2tj2\"}]}\r\nserver: cloudflare\r\ncf-ray: 9c01f78cdaafb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":53,"dns":35,"connect":1,"send":0,"wait":200,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/config?source=https://registration-spsc.fun/","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:38.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"OPTIONS /config?source=https://registration-spsc.fun/ HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id,x-data-check,x-fingerprint-id,x-unique-client-id\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 18 Jan 2026 23:45:38 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLupKoki988oa79u%2FdRBpvO8rRa%2BLrHCERz9uzMluPFdRQ0D56LBzDC2B3cpEsaCGF3VYqmFQKcdn0OCj9jHi3uUXQ7Es2R7yK3%2F7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c01f798ccaa568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/config?source=https://registration-spsc.fun/","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:38.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"GET /config?source=https://registration-spsc.fun/ HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Config-Id: 696d1950e224edc9cbdd220a\r\nX-Client-Source: Perpetual-Client\r\nX-Fingerprint-Id: 2970cca0175ce506c2661e771626736b\r\nX-Unique-Client-Id: c118a9e9101fe830eb7ce895984ca2a21240f02258e134f4a434c4d8f2617e96\r\nX-Data-Check: 95533c0e7ce053b85978c9795194f96632e126bd955b432f9cf2cdbeedd49bc8\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 23:45:39 GMT\r\ncontent-type: perpetual/encrypted\r\ncontent-length: 928\r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 48\r\nx-ratelimit-reset: 598\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8OuP4y37QJ1zXaGfFLvThZyDKAKIwQIZU5ONaZswuUCHcosLD%2FYii13L7UB5HrtMpfO3hEISPEpChYd5EHA4X%2FLMW9iKHssAICVIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c01f799fd30568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"perpetual/encrypted","magic":"ASCII text, with very long lines (928), with no line terminators","md5":"f9b4ee27fbcc487003c607c1448421d2","sha1":"28e358fbea3b8706efcea2f1b2509391e9c10d69","sha256":"5db4bbf6fb101f9a1f63e9c90a164c91a73d6cde3b8ad67ea0487c5c82f8870e","sha512":"1507dca2f37ce48fc67b56c0cbf13d146b8982bd6d0452434300d8c3312ae2e3f3377bf2ab28fec394a42c4a26ecd3bb642931b696aa23dcf8e2106434a374aa","ssdeep":"","tlshash":"7e11f738b86426a025319831a664751c52cf180904fc54ad81c8eff90c002f3bf2bb02","first_seen":"2026-01-18T23:46:09.215789Z","last_seen":"2026-01-18T23:46:09.215789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/visit?source=https://registration-spsc.fun/\u0026wallets=","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:39.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"GET /visit?source=https://registration-spsc.fun/\u0026wallets= HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Config-Id: 696d1950e224edc9cbdd220a\r\nX-Client-Source: Perpetual-Client\r\nX-Fingerprint-Id: 2970cca0175ce506c2661e771626736b\r\nX-Unique-Client-Id: c118a9e9101fe830eb7ce895984ca2a21240f02258e134f4a434c4d8f2617e96\r\nX-Data-Check: 95533c0e7ce053b85978c9795194f96632e126bd955b432f9cf2cdbeedd49bc8\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 23:45:39 GMT\r\ncontent-type: perpetual/encrypted\r\ncontent-length: 160\r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 47\r\nx-ratelimit-reset: 598\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CtfoxnxyXFkwq8kiUkWlAd3zpkg1JTa8C2iI91PGZwATa255EtvI3j6SpEFz%2BOvwAXNsBnLVqOpyT2LytLmVaNhQMovXqVt0zKCLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c01f79cbec6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160,"size_decoded":0,"mime_type":"perpetual/encrypted","magic":"ASCII text, with no line terminators","md5":"7d58338ad2ec8174c5f7c29426488b2f","sha1":"23852185c10a8530d59adc3cdc90d5b745faec29","sha256":"fc001d0ed0b8b7273ea73d1aae3156ab58f08490e64572347a385a02d78640cc","sha512":"fcfca7fb823c8e7bcbaac325a9239d79e966ea47cc36e64ecf1b3de486647147343f7428295146e3a41244ee536309bab601c6d44f6f83f21fa8f792306c3990","ssdeep":"","tlshash":"52c08cac01290e4435467594860fa88098b4958086096bbf84f2ea536282e91ffb2898","first_seen":"2026-01-18T23:46:09.218146Z","last_seen":"2026-01-18T23:46:09.218146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/500x350/1a1a1a/333","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.115Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /500x350/1a1a1a/333 HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://registration-spsc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:23:04 GMT\r\nexpires: Sun, 17 Jan 2027 18:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 105752\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T12:37:03.13537Z","times_seen":206113,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":153,"dns":4,"connect":8,"send":0,"wait":11,"receive":7,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://registration-spsc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 15 Jan 2026 01:04:42 GMT\r\nexpires: Fri, 15 Jan 2027 01:04:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 340854\r\nlast-modified: Wed, 25 Jun 2025 16:58:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16724, version 1.0","md5":"e5e908997a453e21f2fe41cb72e186d2","sha1":"d0c504bd8f896d39883e0ddfc81c511af526656b","sha256":"2d46bd159b53f55c41167a4f1540a074649464194fd1e416f5b4694a6c0f282c","sha512":"dd6bf730a4b16a50b0977b2d8efe865be0805da41c50aa86d39b4892c79db91f354e91b1a2ce4198e4b58e26752d4e9a06e33e9911e63f2df2e004d610685cd8","ssdeep":"384:ZRyfvfqIrJOZA3s5dQsQLR7JIWapcGsukRYRv5fpD:ZUXfNs5IRQ3zkCZ5fpD","tlshash":"8f72d0b8fe064610c2542fbf06209de1831895fe192e4f24f8aa74ac4f1715e3f117ba","first_seen":"2025-02-19T12:54:04.600022Z","last_seen":"2026-06-08T09:03:19.624855Z","times_seen":1433,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":149,"dns":0,"connect":8,"send":0,"wait":9,"receive":2,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://registration-spsc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:23:04 GMT\r\nexpires: Sun, 17 Jan 2027 18:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 105752\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T12:37:03.13537Z","times_seen":206113,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":155,"dns":1,"connect":21,"send":0,"wait":8,"receive":3,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/tokens/v1/solana/4nswj3o1Lo9iWYvvRJxUD8vbCy9ay7QQoXYcncHNbonk","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 02:26:52 GMT","end":"Thu, 26 Feb 2026 03:26:42 GMT"},"fingerprint":{"sha1":"B0:7B:5C:C9:CC:C1:4C:3E:31:04:4E:3C:69:1B:85:94:05:E6:85:60","sha256":"56:B3:0C:D0:68:9A:0B:E4:55:B2:57:AC:E0:F3:C9:7E:B2:5C:83:EA:71:4C:C4:A3:B2:78:2D:23:49:06:B6:12"}}},"request":{"raw":"GET /tokens/v1/solana/4nswj3o1Lo9iWYvvRJxUD8vbCy9ay7QQoXYcncHNbonk HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://registration-spsc.fun/\r\nOrigin: https://registration-spsc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 23:45:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9c01f78bd99056a9-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"5dc-G/aTQT1LsvDtgQCmvG8mmN4lc1s\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nexpires: Sun, 18 Jan 2026 23:46:06 GMT\r\ncache-control: public, max-age=30\r\nset-cookie: __cf_bm=OfDntxh6eugA1GCI11ljbD1bvASXYganB9hYCr6N4DE-1768779936-1.0.1.1-GV1F2tmbRI0STMRM_P_JX7yxERL5.qgTH.B_FALSZfgZV9lbOMhijeO6DsehpymO.KSiT_sPoLrGtSYcJ_2_6szih5HxmX6CljdVpOBziqWEa1wMq.KI90khhdPESmbr; path=/; expires=Mon, 19-Jan-26 00:15:36 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3d50d42500fb2748e4b6c25bd87ce0c8","sha1":"1bf693413d4bb2f0ed8100a6bc6f2698de25735b","sha256":"e1febd8055eb6a7de14c30c7101ac466ed95dff07d283799eb7bb6bd39e043a8","sha512":"9a5a567bf04a19f57a00cc78963c6323c6fd2c181b29233f2b65bbaed3790dbb7f7cca7e686bb49d2ee4ed3090b1442bba929f03a7e875a18cdf52f51e72242e","ssdeep":"","tlshash":"c13185bb43fc15ef938022c069ea347554e532474bbd185ac294ee9942dcb9ad40f1ed","first_seen":"2026-01-18T23:46:09.221926Z","last_seen":"2026-01-18T23:46:09.221926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":55,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"registration-spsc.fun/favicon.ico","fqdn":"registration-spsc.fun","domain":"registration-spsc.fun","tld":"fun"},"ip":{"addr":"80.253.249.44","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"registration-spsc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 16:28:22 GMT","end":"Sat, 18 Apr 2026 16:28:21 GMT"},"fingerprint":{"sha1":"D7:11:3D:40:E5:A2:0D:4F:4A:FD:3B:A8:95:81:C1:C5:5C:B6:9D:E1","sha256":"DB:67:82:50:50:AF:6D:7C:BC:34:44:00:6B:C9:B1:5D:A9:B6:FB:E7:43:5D:91:88:B6:D4:41:48:D9:5E:D6:92"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: registration-spsc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 18 Jan 2026 23:45:36 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-08T13:21:14.511929Z","times_seen":45106,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.sol.ms/visit?source=https://registration-spsc.fun/\u0026wallets=","fqdn":"connect.sol.ms","domain":"sol.ms","tld":"ms"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:39.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 13:14:54 GMT","end":"Fri, 10 Apr 2026 14:13:18 GMT"},"fingerprint":{"sha1":"23:13:25:E8:BB:B1:A7:64:03:A6:FA:74:FE:64:83:16:36:18:78:2F","sha256":"09:BC:C7:26:D6:B6:3E:5F:F6:A0:08:0F:2E:59:DE:F1:93:17:47:57:05:FE:C4:42:22:CD:D7:A4:86:1B:45:B7"}}},"request":{"raw":"OPTIONS /visit?source=https://registration-spsc.fun/\u0026wallets= HTTP/1.1\r\nHost: connect.sol.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id,x-data-check,x-fingerprint-id,x-unique-client-id\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 18 Jan 2026 23:45:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJhQ0H5rrnX%2BmtRiLWLzR3BIwrJM%2BZqOoH6dKph%2FEOp7NoaYFvYvd8gwsrzZykm4er%2FoV5h5fqGwaVwmKg5JEKtd46PpQygsdN4LWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c01f79c3e74568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:39.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:23:04 GMT\r\nexpires: Sun, 17 Jan 2027 18:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 105755\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T12:37:03.13537Z","times_seen":206113,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/400x300/1a1a1a/333","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.117Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /400x300/1a1a1a/333 HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/32","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.120Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /32 HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://registration-spsc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://registration-spsc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 11:02:37 GMT\r\nexpires: Sun, 17 Jan 2027 11:02:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 132179\r\nlast-modified: Wed, 25 Jun 2025 16:58:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16520, version 1.0","md5":"049dfc5919c21896a13296775d80b8c0","sha1":"e2ee2d370f0d46ca5a113126da3b58e16240fdec","sha256":"fb4a81a2d0a893e5c38c394a7e716a1cef0b24610a0af49c96f6d529bd66bf2b","sha512":"ffe3d5afd5a536cb2e78212c39163f16c254fbddca8c586ad99f0f06d27dad6af5b664d523909a0e3c5ed10d239e7f0fd96f2b2970163b23082f8be15a62cea2","ssdeep":"384:KWnkX//eTuOOsUGC9voO/fHl7exLa4Mp2e0+9NxHg+UM:KSm/GTuPsUG8vnnl7aL2pJHg+UM","tlshash":"0272d148764753bdec6bc86ce1e9ebd2e835b934c83c428fc858d8152161a53e86e34c","first_seen":"2025-02-19T12:54:04.599046Z","last_seen":"2026-06-08T09:10:28.849909Z","times_seen":2300,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":83,"dns":1,"connect":8,"send":0,"wait":8,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","fqdn":"y9be76.solauth.workers.dev","domain":"solauth.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://registration-spsc.fun/","date":"2026-01-18T23:45:36.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solauth.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 07:01:32 GMT","end":"Fri, 17 Apr 2026 08:00:10 GMT"},"fingerprint":{"sha1":"E6:DF:47:8C:43:71:93:20:87:A1:37:AF:C8:B8:C5:7C:58:C8:57:AC","sha256":"A1:2D:3D:69:79:DC:46:5B:9F:0D:37:68:67:E9:44:8E:50:36:FC:84:74:71:91:34:8F:E5:73:81:14:17:90:0E"}}},"request":{"raw":"GET /demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe HTTP/1.1\r\nHost: y9be76.solauth.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://registration-spsc.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 23:45:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 9c01f78ea9111525-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nx-ratelimit-reset: 600\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pfq4McORrSyNW2Hu6HO1n7VIhY696%2BYi%2Bax%2FOC%2FysZ5KtT5r5gEu7owfG7oiZLypt2C5qy581LwfoF%2B1cYz6zgB027B1GSqSkxjoEWGTaZzRRBC5MbD5TAxc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62400)","md5":"ab823ea82c21daed3cb48ebd937054de","sha1":"a71e324e3dd1e1bd18ec363afe9ade7f7ee802ad","sha256":"27fa76369b30e88d72c7881be7416cb35c4aa4de4d6a777336bb66e0758d9eca","sha512":"2a59f8f310e7a2d40602f8f3ceb38bcf9cfcd8e20c2b64aec5328f583ce589061b8895a8e37676ecb220fef200f8fe563d5bdd250857c0be6457ac3c3b19d8f7","ssdeep":"12288:kG7jX8LRfMHBU+qVo/Pkams0oLxR2RV0TF:kGYuB/qVo08WK","tlshash":"c8f42a8473a17071839765e1003b540bf339b82c780d457cb65cd8fa7eba989a63af79","first_seen":"2026-01-18T23:46:09.235721Z","last_seen":"2026-01-18T23:46:09.235721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":79,"dns":45,"connect":1,"send":0,"wait":238,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:38.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Mon, 09 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:74:6A:25:D6:31:FF:C3:36:8D:D7:54:7C:C2:B6:CC:A3:CD:17:03","sha256":"FD:FB:ED:F7:BB:34:34:80:84:89:30:C9:CD:7E:D5:3D:1C:26:7F:A1:2F:28:2A:ED:F5:7F:C8:CD:8D:7E:5E:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 23:45:38 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":351,"dns":20,"connect":135,"send":0,"wait":133,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:39.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:14 GMT","end":"Tue, 03 Mar 2026 17:10:13 GMT"},"fingerprint":{"sha1":"EC:AE:DB:3F:30:AD:2E:C9:C6:A5:F6:31:5D:CB:EF:06:6D:B3:2B:E0","sha256":"37:8C:B2:95:4D:4C:79:2C:79:EA:6C:AD:61:E9:E6:30:41:EA:A4:C6:D4:10:5F:FE:3B:CA:18:F3:AA:FE:CF:F0"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 23:45:39 GMT\r\ndate: Sun, 18 Jan 2026 23:45:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-06-08T10:22:37.24079Z","times_seen":7566,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://y9be76.solauth.workers.dev/demo.php?antibot=false\u0026id=696d1950e224edc9cbdd220a\u0026source=solana-iframe","date":"2026-01-18T23:45:39.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://y9be76.solauth.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:23:04 GMT\r\nexpires: Sun, 17 Jan 2027 18:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 105755\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T12:37:03.13537Z","times_seen":206113,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}