{"report_id":"c07be1ec-988a-423e-8b1e-fbc5a3ddcd9b","version":0,"status":"done","tags":[],"date":"2026-07-12T20:59:24Z","url":{"schema":"http","addr":"raacfi.club","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"128d4c8a9cec5bc57d3d352b96098532","sha1":"ad6e1cced5ded97a659a9f69ebd346ee1ce54ddc","sha256":"30c122b0c831f84615f8dde620d1f26ec26de5a098b5830c9cb5d7bac7f088fb","sha512":"e0df3bc2f5463da27b81b25f48a5077a7761efa1ff2388dd612634eeef95dfa9f9565f6fe5b2f87ebdccc88bd6e4aeef25edbd2c209f883831e57c26fc40191e","ssdeep":"96:DJFs1Bx13gb61j1l0q7gx10UFZV4jl22D+i8kDNLeOl:H61rpCmULV4jM2D+z0sI","tlshash":"489163a544f1663b18a386a9e9d17f47af817607ce8d29407baf40e31f87d55c86f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"raacfi.club","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:59:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"lustrous-strategy.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"raac.io","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-05-20","domain_rank":0,"first_seen":"2026-07-12T20:59:30.952616Z","last_seen":"2026-07-12T20:59:30.952617Z","alert_count":0,"request_count":5,"received_data":52652,"sent_data":2640,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-07-11T14:34:58.869274Z","alert_count":0,"request_count":2,"received_data":1256,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":2,"received_data":59098,"sent_data":1102,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lustrous-strategy.icu","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-29","domain_rank":0,"first_seen":"2026-06-13T04:41:16.53403Z","last_seen":"2026-06-22T23:17:34.00076Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"raacfi.club","ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-10T08:45:53.21061Z","last_seen":"2026-07-10T08:45:53.21061Z","alert_count":141,"request_count":47,"received_data":3783902,"sent_data":23447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-07-08T11:25:25.332982Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"noteworthy-lox.xyz","ip":{"addr":"104.21.11.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-08T14:54:56.894128Z","last_seen":"2026-07-10T10:04:50.555374Z","alert_count":2,"request_count":1,"received_data":4837806,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-07-10T10:04:51.929841Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":23379,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-07-10T10:04:50.682618Z","alert_count":0,"request_count":2,"received_data":1163,"sent_data":1067,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"arbitrum.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2819481,"first_seen":"2025-08-16T04:05:13.25434Z","last_seen":"2026-07-10T10:04:51.873949Z","alert_count":0,"request_count":2,"received_data":1553,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-07-10T10:04:50.826431Z","alert_count":0,"request_count":2,"received_data":1169,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-07-07T14:16:14.753648Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":542,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"raacfi.club/assets/flex-layoutdock.js","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"890f92986327c4a617a493085ee9bdc6","sha1":"652e58f7aabe537940a47e3a797249ea64e9bac0","sha256":"40d2226998abcb66869a16d1bfc734538a67a04c17410e9c6ce282e127f8c77f","sha512":"29c2c34bf5190f9c87f05a42ca8c9c569fb552c8c2f66dfd22b8a9b40ff54591ab599e6606dbd8f387f636fb0a7d35ce1edd7900d092c9d150bdc86619194cf7","ssdeep":"6144:MtIN+bq9CMJI+bq9C/ZE15RvkbYRE5V+XXZHlgRZHqvne9tjlN05HysxOI4SSnmT:2GYdlsdqvQjASsxOIGZLm","tlshash":"2735edf713948d2f84ebe9c5cdb54c0c18b587d56e2a658aad339d8bc24c7f50ac8788","size":1118438,"data":"","first_seen":"2026-07-07T07:20:36.260532Z","last_seen":"2026-07-12T20:59:35.26289Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ce001469a2d7c993a7bdc5c1887881b7","sha1":"1167c7bc83cd379ee1c2c3701d13a9b53c6487fd","sha256":"e91ba36e3d8ba005e2c45144be428bee388240a65fa9a56058fb3dddaa6bb7ca","sha512":"35b08023966f01e3dec59acdc1162df5db21d21b4eabf6ac4a0d7e6f9457a7288c7c6d57a42bacdf24bd4b9e00954ed5693131c8c60bc829a92a70c7e8d33d30","ssdeep":"","tlshash":"c2700033a08000a2c0b800282c280020a020ac000033b82800a02ee20a28e888000ae2","size":25,"data":"","first_seen":"2026-07-12T20:59:35.334418Z","last_seen":"2026-07-12T20:59:35.334418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fd4a1a05befbc63d30a24866cef572d1","sha1":"87e04ec700e30640a2fb514551be5a04eab3ee03","sha256":"79757d41d9b0b51f88f33e822341b6d6dec884db3b1356768317690005f8f42d","sha512":"40120301cf8e11e8de290153ea45b75a89068a7b9ab3d3ba3a81ca1999562eb5be33a65631d01d9e699ff8e357824ca2c6b3eb0451f0e67cf87de24f07d21eec","ssdeep":"6144:atIN+bq9CMJI+bq9C/ZE15Rvk0WHliDfxz9o9xzY7tOJXRxhadhAUxOICSSnmjVy:ZIJ9KJYRyRWeUxOIOVn","tlshash":"2925c3f6a3695d3f98a3a65acdb55d0c0cb51ee56a1ee49ebd233946c03c1f20bd0318","size":1045704,"data":"","first_seen":"2026-07-07T07:20:36.290872Z","last_seen":"2026-07-12T20:59:35.342351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/JSA11C8PXT1poMfjdt7yy.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eaccb1b87a4c06681bfe99733c754c6d","sha1":"35cec522b74a4467dd9bf743e4f65a79306ff677","sha256":"a9403f1064ae3fbb08d9aaa0bbe9a420a2f8d5d4bb688a65f70595375d608d56","sha512":"4bd47807438a15a8425291b66a7a0f614c541b396353d3edb1b277c3db7db541208f9bb874fbdec218f83c971330bdda899ff2065a3734ed9a0c749cee301ee3","ssdeep":"49152:XraKUFZSxp6qmxa/n4IzEnnSz52N8JWxtjMk:XWKUFm/n2nDGk","tlshash":"ec269b87aa14d1eb9e302c4f6e791bd1d80025e38a4fa0057bb8769167d0ed5edc73a3","size":4837027,"data":"","first_seen":"2026-07-12T20:59:35.359162Z","last_seen":"2026-07-12T20:59:35.359162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c50cd2af92c698792d0f1e32e372c734","sha1":"062da0cc138ea25d210b5043763fa47256a6cd28","sha256":"868ae09256d4cd32ec1ecf47e7d657cf5d3c6c07c9df824b55632da13dae14a2","sha512":"b9de5e4f1a831fe63a1fc36d831640dd8e150ce0d7e244a1d67f87f5952a418ade7dd706fcefc47fe28ab83bbb3af2b2678052252ec5b821b09b4036f3d6debd","ssdeep":"24576:VlJmzYmF8+Ud0YuKAsuXvHMnjD+Ed3hafmUBznezBGVNrGTdoxxPj8F:VlJmsmFenja2haDnezBwNipoxxPwF","tlshash":"8b062487aa15d2eb9e306c4f6e791bd1c80029e3864fa4053eb8765127d0ed5edcb393","size":3993650,"data":"","first_seen":"2026-07-12T20:59:35.371743Z","last_seen":"2026-07-12T20:59:35.371743Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-07-13T18:33:19.390582Z","times_seen":695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-12T20:59:35.385677Z","times_seen":1362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj294 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.37935639066394544] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj295 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78388993853e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj296 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj358 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj359 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj360 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj361 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj362 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj363 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj364 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj365 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj366 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj367 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj368 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj370 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.37935639066394544] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj371 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78388993853e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj372 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj434 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj435 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj436 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj437 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj438 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj439 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj440 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj441 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj442 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj443 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj444 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj506 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj507 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj508 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj509 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj510 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj511 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj512 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj513 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj514 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj515 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj516 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj578 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj579 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj580 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj581 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj582 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj583 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj584 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj585 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj586 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj587 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj588 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj589 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.37935639066394544] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj590 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78388993853e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj591 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj653 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj654 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj655 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj656 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj657 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj658 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj659 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj660 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj661 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj662 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj663 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140}]},"http":[{"url":{"schema":"https","addr":"raacfi.club/pashov-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.164Z","timestamp":1783889933164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /pashov-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-2725\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvNZUqgKlIrxDEbLLYd5BZv8vylPG3hKTxqJhFXV3NhzXnILuLgNBeEVuql%2FDLUOAq0%2FlieU2wl75e0Ru2nGBs9wGi8nqmazkN9N13%2F6jvmumWTc2o2ACG%2FLQhDLpg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24dffb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10021,"size_decoded":8228,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c6724ba7bbda223aa495d9e0e2d4b6f","sha1":"be69b86d72c3743c3dae4f201f5ca01c049de82e","sha256":"cec57df4ecc6af1871293d53ffcd5a3cf61cf3ff6f2df7a0fa000e0284d80116","sha512":"a8681ba2d9d5371493185ede27c69ec8f6cfcbc69488337d5fe17f3435b24778cbf1ac5e0d3622fe0af3ea960699b96b188744398c51a86651d45a4f4c89e9d6","ssdeep":"192:vg+EnzqkVnW5NuTcuFa94qjkY1TX0juDhLThmfGMA2hI:Vk2AoIAjkY18uD5EFhI","tlshash":"3e22bf31949f2d4b70fb72eb42bdccb480425ad8a3c4d587d965369e11eb903386de31","first_seen":"2026-02-10T13:22:13.569722Z","last_seen":"2026-07-12T20:59:35.189307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/Commodity.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.144Z","timestamp":1783889933144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /Commodity.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-538\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m02L2WCvBowu5sP5K0mCBF5cYVEBGgyALC3q1yBrSWd1bXEvN8DnRUZ6hO0OIuUIWANd6qOtGxHYvEpl2205CixwGkhF84%2BrKWKfBQbTTMtvvJg84MdfSmKrhBBTOg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f22deab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336,"size_decoded":1146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c52978bfcb11bd8527b419cc25e26ad","sha1":"b89dd35bba605be406c5ab1fd334318d7b1c25b8","sha256":"da2ec498713264fb051a1219770e325310ec046b3914e6708037da3a644afcd2","sha512":"94c0ed5fb3d098b57c7f37814e1cac59c7ea6dcb595e0a1a5a71d3f174dbf9ada81aac975875f9bcef44245d40279b5d71e667af59b680d8fde2c63eb6cb5e5d","ssdeep":"","tlshash":"672146c5a54d51c3b844c312bb0ef0baa4ab24e43a5146c55f012e27284aebf1c7bac4","first_seen":"2026-02-10T13:22:13.576982Z","last_seen":"2026-07-12T20:59:35.191288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.567Z","timestamp":1783889935567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\ncontent-length: 0\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":378,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":39,"connect":12,"send":0,"wait":43,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/instruxi-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.158Z","timestamp":1783889933158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /instruxi-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-259e\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NseCu8mSjzeE%2FbogQW0PKk7NBdsiRgIFklRn3zdY2FOlD0GIp18kjjUZ5Qjz8WL4we5C%2Bdo2eiM3n7isSbS925%2BNB5qaxer6qBdibVyCAzZktOVdZIjc4AfDJksHlA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f23df9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9630,"size_decoded":7932,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d5cfe90bf12eb4316a6770601e58d13","sha1":"35937377b18f2f8c57e8036954fd466ccb12b22c","sha256":"9e4a350f6141273c49cff25e1a0fd2e7aad461d32db549fc759da44be3c41e28","sha512":"2ad9a0200b98ec1796890a7b57a06b2ee1adcdd7f55b51cb658d6469ffd607df994cfe00fc4d644a43018100508935cc9d69cdf635c804af1e5721ddfde81ec8","ssdeep":"192:7La90QfB30R5DNhH13zPosHHtQwOYYuNBU56G2G27kUMbNOqa:690QCRBNZ13rost3A5n2lIhM","tlshash":"6112bff433cde9459f923d0d9fa59e073c2a281394361685ced8f065fbab0088da1498","first_seen":"2026-02-10T13:22:13.579129Z","last_seen":"2026-07-12T20:59:35.194125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/hr-RAAClendv2.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.134Z","timestamp":1783889933134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /hr-RAAClendv2.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-2c271\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Girt%2FRMF%2FW8zU78YcL0DCV5kYXNuuv4xTz2%2Bt093lTzi7V956QWK8PSCxJ2vYZZrAGcZbrokOFpNjl57p4pBjVifMz5Y9zsBM721CcapDILdX2jRU9i9c8wnBh5w5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f21de2b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180849,"size_decoded":180886,"mime_type":"image/png","magic":"PNG image data, 367 x 800, 8-bit/color RGBA, non-interlaced","md5":"30ad31c1680336ad2ce51725ebaf811a","sha1":"54abf87fb9f54909af886ac2fbe57239b5b2cefe","sha256":"bc8462ead5eaa5dfedbbd879340b46244c3d047271d129a6dcce780c31fca561","sha512":"bc11db87df7ca51774f672f3a88a10da10e0e21326b041e068f9f84ee3b22f6b2099dfeec9344d6fcc53386081cefc4676a6b4683a89fc1a4abac9fd2208e3b5","ssdeep":"3072:0h+k7jJVVzvPGbY+XtNGSeKAvfjN5foHKVvxMVrItoF8N2AByQWivt3Oex8NuQ:0h+47mASeRHB5fMKrM6L2AByQ5la","tlshash":"f004232af655b9b6be641fd782ed18657bd0942cfd4786402b8323a208e1fd04d38ce6","first_seen":"2026-02-10T13:22:13.575905Z","last_seen":"2026-07-12T20:59:35.196575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.568Z","timestamp":1783889935568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FRSy3GMSzsyg4QwEXvjqWLWVwiBAIgFsJdLXfj6hjRZvj8n6MAmxZK1NmsapVwtlKe%2F6KYAjZ7gyE0%2FL67JI%2BlDk3llWlQ91gCtNm2Cm%2FhQYBnzSc%2BabyvfJmKJ4gTPORndkYKC\"}]}\r\nserver: cloudflare\r\ncf-ray: a1a2f8016ae90b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":817,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":2,"dns":0,"connect":1,"send":0,"wait":28,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/DeFi.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.147Z","timestamp":1783889933147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /DeFi.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-900\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXSVB%2BziIblZi05U%2Bmi58wClW%2F3ZALObBh7ekIX1su1hpfTdygabfnirnLoO5JO8p1nCFtpe1fZ77aS7GZLMH5k7YGVTEkPMjdHoIPzMMqNjdG2QYZnR7ASel6Nb%2Bw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f22dedb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2304,"size_decoded":1349,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e589b13b4c8f87b224f790f599e4ed17","sha1":"216c7ac5e8ef54b11789d422afb699f56368b1e9","sha256":"7781db0a6f914b9a99ad303b2f50848287f5a62150ae445fa09f388c3d4410b1","sha512":"d3a0d058146184de4be81e64d513c63bbe53c6110b8f96110e5e282be0eb31f9b9f67ccee5d32b83974d3e9f20a909873649cfd31e5a5694258e81c858980221","ssdeep":"","tlshash":"7d4178d4f18ca44dcf841bdcc70d74a91203f09a2a694118ff807baed8726ce9c655cd","first_seen":"2026-02-10T13:22:13.565101Z","last_seen":"2026-07-12T20:59:35.198789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/arrow_forward.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.143Z","timestamp":1783889933143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /arrow_forward.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-100\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLRMkY0pUwd5ISSDgevsw6yOEjv9YUO%2FzL2q2%2FEkUEnxKfqMApLknaaLGQyMDSammHIcrB1b9%2BkxpwBg4Lk7OdZjgjEaDiydtx%2B7fw65eHp8g1ZUKXXGkzY3kvT7ww%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f22de9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":863,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5a74d3327cff9f37e3252de5a05f6cb","sha1":"43b5d3eb951128e6cb987e38f0e4cdaa45773b8e","sha256":"90a26859e28c4abd11bd01faafb68796e95047e8b7ea8eb035a1eabc637f6e81","sha512":"1989f413a17a66fae601baebeecf1a222a1e3a092d72b8c4b11d4e54672ce27f1ad86440beb230d6d4d3b19193c4d8621757dce1b48abf0efe37f168815da0a5","ssdeep":"","tlshash":"ccd02eb4e3f80889404deb20b7ac3a59504e72e019ac0cd8e6c21211b7289bfbca8817","first_seen":"2026-02-10T13:22:13.581937Z","last_seen":"2026-07-12T20:59:35.200229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/chainlink-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.155Z","timestamp":1783889933155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /chainlink-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-1524\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4X9SRBfKc%2BO%2F7Rqs409LT5EfyscJ4WFexjpd5Rs6Xvk4tH2IbdUE9m8i014eLRUgCJ7ks0oUa8CeFCpuvW40SMwpu1SA2%2FlIPsWy4P4lF8Eu3MslZvYz0QlrI46CdA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f23df4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5412,"size_decoded":4740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04e119d8d2833fc594e47b867e882b7b","sha1":"e4f5fa8b8b6d969f334d1214f47f1aeed8463967","sha256":"12f73d98ea3adc583e4ecccecb149f46dbf9d933a79c07f62c0106acf0249868","sha512":"22a20c6402cb1b661abe793caf8d6263f38fc882d8a3f0a53531fea7bc5cf89ef490b5a374a59e69549acb387c52f6b9da2e71e349d42aeccbea8fa98b6c4009","ssdeep":"96:yLexLUKdfXMM4Qux+fR+TIUpR6fxzgkN4UPeIO+sDFS5DwcG0i8ornY4S:ug4kRWIUpRSxzge4UP2RU5OHS","tlshash":"bcb18d289124380d96439f7866cc4f5bed5122e7e72fe3079889b7c49a8df0315f21da","first_seen":"2026-02-10T13:22:13.598469Z","last_seen":"2026-07-12T20:59:35.20189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/zkme-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.165Z","timestamp":1783889933165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /zkme-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-1546\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdVVsw6gKgpbx%2BDEBrVzCx%2FbHnJbeXy7UaKByHeCEEId%2FuO4y96Sy%2FbByJAYGlGYqfjsIKHFcndnO5pBRhsD7%2FvF1CBpwgLsCTc6jmMRmf3%2B59e1vx%2FsKiEk1rrzOw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24e00b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5446,"size_decoded":4789,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e491a50979e07bae3dc1495e143871d8","sha1":"8ecc4e3a244ea0bb4584c5d264a6093d303ae91d","sha256":"c561c0ef3e95486dc1b2ae62d81044870a2f956e1e4641edd33485481f404747","sha512":"49762c3962431b8d98f1e0b7a2725fadd2dabae903728b8749d5169d4982bb66e3434d7343d8101cc7a1a78a380981be8adb509f0282bc5941b5ba24364e76c3","ssdeep":"96:yAxHytZ6cNdwcsLfMZ7ANCWazk3CoSki1KrCYSELWG+okuMI2oR:XyVdsLfMBANCW+SWki1KmaLt+olMI2oR","tlshash":"46b18e20c9805cce4156a71d52db6c1b693133b3eb7b84c7cd44e61381b0eca1d12a45","first_seen":"2026-02-10T13:22:13.534543Z","last_seen":"2026-07-12T20:59:35.203516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/Faq.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.171Z","timestamp":1783889933171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /Faq.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\netag: \"6a21d598-36a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdnIFOW92b346lcVouFXxRvxBE7pQFqaSbWld7j2ETFhs%2BZ1a08vTi%2B3yzHeuuzfINtNlTgMEtQKb8DrSSKMBpqn8Sq1NTApl6DVC6Bz8oL%2BLKInb%2Bejyrjh51f2qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f25e06b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 874\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":1560,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"170566e6a1ce34d58532aefb01d342b6","sha1":"8e3df64181bc0f2c35ebb06fbe7415e079a7c7c0","sha256":"b312906f386d984a0547dab5657a0f20bbabb393df806b018ab40de17e3b0dd0","sha512":"e97020221d75fe95559d94169c137122d57f961f3239cde71db88cc298318570334da1630e973c03f5e53b0e3c98694b81481a6d10df693fec69ea35997fd2bb","ssdeep":"","tlshash":"371196db9070046dd4ce9e7080af7ad79ca2681830b6a1000b6cb916d22fc4cc57134b","first_seen":"2026-02-10T13:22:13.571551Z","last_seen":"2026-07-12T20:59:35.205253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/yield-bg.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.152Z","timestamp":1783889933152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /yield-bg.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-10876\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cjfv0JPr%2FvfrXPnzlJLxpZQbZmh33FJEb2foyW9rwH3K4rRnYYTJtOcmgX7bbDZFDyKaeHafSqwuSHVxcCT9AfA%2B6XyndwsymVkLXmlx1CdYD9%2FOM%2BOmpQHKXcwCbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f23df1b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67702,"size_decoded":68261,"mime_type":"image/png","magic":"PNG image data, 303 x 582, 8-bit/color RGBA, non-interlaced","md5":"c47dae971bc4961f553ebfe623442aac","sha1":"f450789cd4e377b2455ec50a3789391973c492e4","sha256":"5be0c2c746ae7051ad52448a996c3a45435defb3c28957c156134edcf3fceae7","sha512":"62380d1aa122c29a80206e0734c9f90f05d498dd593d8cca0775e5b993ebbc24a9476397036d5c81f994d4b8e33bc352e522e107a70c1454272b6e91845fa866","ssdeep":"1536:Blf0URYC4edGYcwgQHYvdG+j/H6ih+Jczc24DuJ4kz:Bm6YFeoEufjfzOcI237z","tlshash":"766302a90e29d521fd53dbf88bc04e1d34736e5352dd223eb3d42660ce05ca32a6ce98","first_seen":"2026-02-10T13:22:13.554002Z","last_seen":"2026-07-12T20:59:35.206576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.544Z","timestamp":1783889935544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:26:33 GMT","end":"Thu, 01 Oct 2026 14:26:32 GMT"},"fingerprint":{"sha1":"31:E8:75:B2:BA:5F:FF:59:1E:07:30:ED:B1:9E:07:18:13:BC:81:0B","sha256":"3D:DA:48:00:A7:09:38:1D:2F:0C:31:F5:F9:2F:41:5A:DA:53:B2:FB:16:8F:F2:81:E1:A4:DF:67:48:94:B9:D9"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 206\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a2f8024d8f0afa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":528,"mime_type":"application/json","magic":"JSON text data","md5":"6b59890e86d91d519fe3814527c513e2","sha1":"e07729c3305bb79e1d07b6197d3860dfc587c712","sha256":"91968884db03d40ccbdce685a0d19e11b60147401e00da7c5dea00e8fd73d650","sha512":"273cd03ec53b20c72a45c4dc559b618686e602d461544eeeb1491890a17d168379498f500cdc270e10e045470b66cac6d873dba03923aef717adecdf608175a7","ssdeep":"","tlshash":"9ae02bd13d87c7a0c04d583641a0bd28d210b501dbc10c4e035c40c8eaf077698112c9","first_seen":"2026-07-12T20:59:35.207967Z","last_seen":"2026-07-12T20:59:35.207967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.560Z","timestamp":1783889935560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1783889936713\r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 5\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":422,"size_decoded":785,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e9f439e914c7ada686faa57549d32ac","sha1":"748a64d7b91d9ca3512dc403bb6b43d9e49ef841","sha256":"4cbd5519f34de55dda5d948130e55e6b50dff5df01c8ca8b6a23dde80489d32b","sha512":"15e43d0e83190e364445c4f192a3e92121b5a8f75ab7d72bfcdddea8a66d2fc1ab264e5bcbb182acb87b7ee317f47d7f9ef3d1e82ff58c98e00cfc13552a633b","ssdeep":"","tlshash":"e1e02ee13e83c7e0c18d583641a0be28d220b602dbc20c4e435c80c8eaf0bb698222ca","first_seen":"2026-07-12T20:59:35.21727Z","last_seen":"2026-07-12T20:59:35.21727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.564Z","timestamp":1783889935564,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/clever-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.163Z","timestamp":1783889933163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /clever-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-1765\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVDpXQ4IqxMb5RY3s54tciNv9tcTj7wyn2%2B23sMcgbaPNemRbgTuvI6Aagh3PnNxqenkVTdWQma%2BQjxgwgba6aFJhHQQ5Lr1o2vQTvjm2gJko5LBgL72UcLxhoi1oA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24dfeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5989,"size_decoded":5177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71bab8fe0862d66f5bc89374fe676b52","sha1":"3184b764078da3e710d5915ccb0e36949f9e7f6a","sha256":"943293245e023a12c3b382ab77a6855731924b34f3640bacba1bd10bf5be4226","sha512":"e5c839215dfb0e96da9314f6b6dc313182be191baf7963d2c8ebfaaca8e528be69e90374aab3651dee323b63ce35bf32309bb5ba50d29c793ce228f2446a5025","ssdeep":"96:yLle2sPx3uPPwAiwPAAKfCTWhZ0+WitCaY97qSKdCVRH5bcWc3jtW9IV8P/PAgu9:SYUAAaBhZKstydmCVLwWSqIV8P/PTW","tlshash":"43c17d250a4cec879102d35892ef08eb9a93fcd3f205a07dc8156fa9b053dd7e937058","first_seen":"2026-02-10T13:22:13.580036Z","last_seen":"2026-07-12T20:59:35.21924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/hero-bg-lines.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.131Z","timestamp":1783889933131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /hero-bg-lines.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-c26c2\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMi%2F8t0IK6ghRcNCBEkfKBIhTBw4Ks38J0aBHhPrwwluonU%2BwyujWC924BkN%2BvkANDAL191jpCMHN3HgtW5TPMePKztPitiTC2H626ZNVcmCcZFcOVh9uF4mfps6lQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f21de1b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796354,"size_decoded":367614,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f76b8e493b56b104eed1abbb18796dd4","sha1":"89150326484106efdb2a472d86c853edc1c0544d","sha256":"aae1c58be9583091abeccc2530436702d7ed03d6c695ec8d6a6039d8340d0d25","sha512":"9ee07628e1e554e8cdc71a8185d065985147c424f3ca7a954fb34896979f36bd30ffde01f995be48ab809d0f87e7647e6197250b51444691346f709194641213","ssdeep":"3072:Q6LdIgJhOqiHfi8I/+nWeN+l6pytAD7pDjUfEO/3z58XoPLq/gC11itKqXhVnp/2:7KF","tlshash":"3d05b9ed9b3089f54fcc42dabb2148d86f17b07a6a5a5a64c01cefec2c81e1c499dd4d","first_seen":"2026-02-10T13:22:13.588119Z","last_seen":"2026-07-12T20:59:35.220991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/Info.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.136Z","timestamp":1783889933136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /Info.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-307\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFNcrOzL8aytTyz1VvFNXa73waqZ9Nls8yHmDDMeB%2BTQl%2B743XsDpTLDbA8%2B1jLunfBcmrYFT2DIdOVTKm0jNKpKT4Nq%2FwXXaa9BgnnSkhlos4Dh5TDkYLPCXBryOg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f21de3b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":775,"size_decoded":1060,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02335e53e5d1989e71ca41bad3830561","sha1":"7c5dc2684495c6ada23cd63cc3de633c848be067","sha256":"f85c64745a4119bade0192eef3f1b6d4b149e84050c4da7312a4228065e76dee","sha512":"3108c23f0d659698566ef4c90371ca8046d820e95872adc6f52daa4d04b66f78ef3dff74b2f0ef5fd298fc7c4eac773e0ddaea46ca7b787f195d7eb19dbef11a","ssdeep":"","tlshash":"9001f1d126448081b1102b557128b85ca4ef38b87febcce8f392fa977e295c15c9054f","first_seen":"2026-02-10T13:22:13.550178Z","last_seen":"2026-07-12T20:59:35.222549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/tau-labs-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.157Z","timestamp":1783889933157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /tau-labs-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-183e\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CN0xNTvemruU2ESfV4BftSwVYiDgLK70PUrfJTfFXPBi%2BQ3BrSqDGu3bJLAWPlcM0lPcU9zD9fVp5U%2BPWlSI%2B%2BdrpAhUGPHHDA51Q81t71nVTafXktU09OtNuAklhA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f23df6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6206,"size_decoded":5350,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9068c84466d2907091f17d7b3e09ba06","sha1":"dde48d36d8b3820ae7884cd0ba3f0019ce46a272","sha256":"c8f1934109818d29c607890945d8081b9b72aca1b43fb7a4e7dbc6977a00d6fd","sha512":"03dcef2bb39257ba7790e745a5713467d6f698f59d9bb9998fcc75e673083fbecd908c1693d639392213dd29546bd32ba5347e9706d72233d369fadbbe96244b","ssdeep":"96:ybcxbIBrq7sTfwfsSFsgVPzk0B9r4OLVM9fO9keWJwPjjtVb8DEBd1G9zrefsi1R:utX4Rkme9fcke1PvbtP1SfeUi1MeI6TD","tlshash":"c2d18dbe90deecad490b1063d5fe10298e86dc3d81f8875ad01f3086daa49c5ac2352a","first_seen":"2026-02-10T13:22:13.552071Z","last_seen":"2026-07-12T20:59:35.223885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/curve-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.160Z","timestamp":1783889933160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /curve-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-5ed5\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIDKNBYJFeuFvvJY1VJ0oT3snshNgjilogWgR0P3ZmC5OCP%2BHgM2Mu5k6%2BDyBUrCGj1nsx7rUCoeWzxdh3Bom%2BiiqzM%2FK2TAvmo0Wki030XLZpLmelVciYgpLIQ7DA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24dfbb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24277,"size_decoded":18982,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4da2a4593552c55b0807f1f5cb0b5ea8","sha1":"07454ab3a3e2fc7881980c8928ad560a0ab346cf","sha256":"422e7a0fbeb6e5bfbed737c6fd1746785ad22d0dc39adc699a0ef20e06a58c72","sha512":"02bb643d7480a0fa79939e342c5de6eb771ec0305a77e18658070887d7358d2a4935866c282ef15d6ba79c816122ce77182067d4d9ea1565733ea3efd3edae6d","ssdeep":"384:vR8H572fZzYXLAIYXfoTxBYejQgcf/O7zfytPW5dkHuuycWnNGl8cVHgNmOMAREf:ZA52h52rUuJ5Y5yccNGl8cVHgYZTb","tlshash":"9ab2e0e199368cd05c858318757bc4bd9b1e24e3b18cf23ec3d105bdf638ba29591a6b","first_seen":"2026-02-10T13:22:13.567668Z","last_seen":"2026-07-12T20:59:35.225209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/collateral-bg.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.150Z","timestamp":1783889933150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /collateral-bg.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-e5e0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZfFHI8JbyZPeOaKB%2B9PIyiJhXYDoxzE8JlJ%2B1asm9svLmTQkwZnfveRG8lDBlI2B2k7htmyR%2FebTUHAt2lVFtyZ5wrxFgDkVa6qxL653oLN6Wz%2BkUaqrDjJ062bbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f23defb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58848,"size_decoded":59579,"mime_type":"image/png","magic":"PNG image data, 303 x 428, 8-bit/color RGBA, non-interlaced","md5":"d0b831041d1baa90700ff405fd162624","sha1":"2004b92cb256e0443bf58b41a5cb1f527a06af9b","sha256":"00740202d272f438fa271fe93a94af945ed930dcb9cb4e710f81e4f9fb570182","sha512":"a8e59f3fe58a7dc317ce592e748210d1f2348258e064cf33451b2619a66fc63e1e204ac7241f8c51e2d8e4217495bb8ce319056f29a5fb9869b45ab49c19813e","ssdeep":"1536:9bGF8XgIq1bMLJLc9ZbaxdoUQ7ShiChMvFe:NnXgIKYqX2doUQehi/0","tlshash":"2443019f02d421d3157f6b2faec7a57fe21f1dc3b0260bd3ae0f451e105ca156a92a0a","first_seen":"2026-02-10T13:22:13.531262Z","last_seen":"2026-07-12T20:59:35.22651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/circle.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.158Z","timestamp":1783889933158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /circle.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-15d5\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VK4Pj8KSRB9Wy65FRZ6Rs%2BMFa%2BAwG4Fy06LAMkoGLr47Fn4apSquLfeH%2F7MyVaYB6esW%2F52UKUHiUcewISlqHh%2BGoP5efQsz2b7ZLLhaMKprq%2FXR4tO1L%2FexxMpgVQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f23df7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5589,"size_decoded":4898,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97981ef78f9370737e353a5b3caac6d3","sha1":"486417105764ec7f714e1c3b4ae73825e12bd890","sha256":"9c05b802f5ebca43074c74811049574ba854852b5815d6888cf2b7b5dd23aa0b","sha512":"496047314eed795accd1b21f1d6eec335f7d0c94b84510934c65cff18b553df0bebc06950e430c8361b864964912f3b875d0f14625d76d3214036e532bb7e915","ssdeep":"96:ycbQKxuXzwqLwet2hT3Wy57SaBHmyNMWIRlSvBrPDiSzVHRDXX7/efwO3z:LbQlXzwgwNhCsecmyN/I8rPDZzVHF7eV","tlshash":"d0b1ae22f40d9c0f4607c69bc6ade6410d134baaa0f76259ce41b7ca6dcd0ce2e30be5","first_seen":"2026-02-10T13:22:13.583048Z","last_seen":"2026-07-12T20:59:35.227813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/fx-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.161Z","timestamp":1783889933161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /fx-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-12f2\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FJZk4EwSAu%2BpxQpYojCY%2Ffzs8hT8gYVy%2F1qZcGh1L9fb2vDgIze0caljHRboaAJEoLk3nL6hE%2F83rhpm863GskLtIVOZdDRsGl40Lw2XO5AO9FddNwFnXcpF3jKVw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24dfcb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4850,"size_decoded":4332,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f4dd330f42d7ac0f94e78abb9b88950","sha1":"9ee9712836a4011b79ddef47d8ce59af2a26488a","sha256":"44466db5ce210d35a08f1f18edcd4e01965ef6d28d5b65264fb3284ef21bdf45","sha512":"3d640f26ca678b4feb98da31fd30534ebcd2d63851fe89775846e07b3fd53496af1f987fe5e29ef1887821ee0f3aa8071163e1ca4f77fab1a58221320f7af284","ssdeep":"96:y9xNcBxBOOtFBPE8b6TprnqBe1coYrHyimXTPrcVJwiIXpSu:giHPPbS5njCZ7uTQwiIp","tlshash":"19a16c2663a27c8fa0979740756fc012ec1ec9a6f070e848b44ab5395c1bec78d5337b","first_seen":"2026-02-10T13:22:13.595Z","last_seen":"2026-07-12T20:59:35.229353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/frax-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.162Z","timestamp":1783889933162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /frax-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-f32\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVH5L5q2nDdQRXRBu5aO1925oE8MhsiJDfm3ZVDeheXXWD1EUTWOaqBplaaLZwYuSpun2%2BVJC9kROazPz6MbS0DpJyti5tWWsakULfl0RYaKXpUZ8Gzk0KxVKCAzeA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24dfdb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3890,"size_decoded":3604,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b3f92c3019d85fd5654c76940440c7a","sha1":"517f76f7e1da1fa8e2caacc9cf0525d4f2d49218","sha256":"4b8297c52d6f9d9cc94bb8a422bc81c26c544a8f9b366077f5233d00bb12f453","sha512":"d2be63f3312093d2555fdaa0890366faa8bebcdabc6fe199ca9471df88a98d8c245f7abe732d37f48ca9d7f4c894dc4a331bfc2fb583ad37d5fd63003974778b","ssdeep":"","tlshash":"61814b74b68c5c07e48b8d39523ec94cc9e085e2e9a146c7e9e57388e03dd291d237ed","first_seen":"2026-02-10T13:22:13.538182Z","last_seen":"2026-07-12T20:59:35.230918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raac.io/_next/static/media/374a88ea0960b3d4-s.p.eb0a589c.woff2","fqdn":"raac.io","domain":"raac.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.657Z","timestamp":1783889933657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raac.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 04:03:55 GMT","end":"Fri, 02 Oct 2026 04:03:54 GMT"},"fingerprint":{"sha1":"42:62:6A:61:33:E7:F6:8D:4E:3C:56:47:3A:6B:EA:A6:3F:30:76:84","sha256":"65:DC:14:42:CA:1C:F9:AE:62:C7:8A:EE:A4:3B:40:1F:D6:BC:F2:E7:F2:57:FE:A8:26:89:4F:87:B6:F7:DB:60"}}},"request":{"raw":"GET /_next/static/media/374a88ea0960b3d4-s.p.eb0a589c.woff2 HTTP/1.1\r\nHost: raac.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 919864\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"374a88ea0960b3d4-s.p.eb0a589c.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\netag: \"a99260bc4f27d5df960bc72dd11b9c09\"\r\nlast-modified: Thu, 02 Jul 2026 05:27:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/374a88ea0960b3d4-s.p.eb0a589c.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n4g86-1783889933785-186e1ab4553d\r\ncontent-length: 9868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9868,"size_decoded":10478,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9868, version 1.0","md5":"a99260bc4f27d5df960bc72dd11b9c09","sha1":"9864eef306349676bd93f2a77c704b6238ff18dd","sha256":"3c2433eb167176cddcdb3eb2ea306d68c2a4ed4c6e78a0dc07b3853d8f6ae8e3","sha512":"9417acd07a9a46f0e245063927c88e742ce7a1c2bf9de73b4c3c83ffe3119e00220bd7b51e7d3688713807e713f84f95a086ad21996732113263f569f3fbee18","ssdeep":"192:1Cr6QSt9lXfxuOhn6BijSriO7UPcPuU0KS1+m/oeJlL69RwfV3j:1XPNJuOhUiO2sLr0KYtoeJlL4o3j","tlshash":"7312c0c486441377d4f88d38af0b50531b32cbd566b1cc54bdb8bc3a0a18d9a9b20b1f","first_seen":"2025-05-31T18:48:33.98081Z","last_seen":"2026-07-13T11:38:16.257636Z","times_seen":149,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":89,"connect":1,"send":0,"wait":23,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/raac-logo.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.126Z","timestamp":1783889933126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /raac-logo.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-19bd\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yhm2UtVu8CuuRqq%2Bkuq1fIyfeCBqwgQFoj1nuaZYIVKV0Sy7YGkTtpj0rtQg6CaM3Au9O3h82%2FJ7dNVER%2FaNg5uzvbKFJdpBavyn6Qvcy%2FYifllG9PWly3Uz2nQ1nQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f20dddb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6589,"size_decoded":2692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a0e4fe2b34d2353aa12d342ecd8c814","sha1":"86be24f157c5fe544a20c316e78e86f9bc69c0bc","sha256":"c20ec1a40d3a5fa918a4a72d4b56d378b9bf813d9a0e4907d73a1fa68a91df47","sha512":"d5164c25905873049835dd52abb651a3e4de964a1dcb44152c9b8ec57de9d2eb6ab3e128683acb30990c33db6ffeca917f3a5a16e4bc98e895b670dbd6412c46","ssdeep":"96:cVvGB3h9x2GTXCE3gu2C2m2xz+3AJsMX5tjxdHeJSjUwbEz0w:Mv8sGmSgsclxt7VUH0w","tlshash":"4fd120d07b0589acd400137e960de5af5696bcecb354824ace813a637cd46ea0d5dfe3","first_seen":"2026-02-10T13:22:13.548209Z","last_seen":"2026-07-12T20:59:35.233198Z","times_seen":7,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/cycle-bl.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.139Z","timestamp":1783889933139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /cycle-bl.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-b0ad\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0onQyMx1DIBUgiPARVa0Yurhmm8d192507gumHsyUD49Y%2BCytFr6jspjHLkbqYU13WOyeeiLV6PYucI9gZsiAOno4YT9nDspCZPuc4OEAX1fTdsmuM%2B5o0A0NEJwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f21de5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45229,"size_decoded":45951,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"e7b164fc18306c98085c782cd65a421c","sha1":"15a42157c447bef24b6ca943bacf41f35f049e69","sha256":"c218c053a2dd69c2dc9dd243c28813725e2700722ef119c0b13db3fdcd652cd2","sha512":"c498fd6e47c6d3d3ecdbc113cbf62c2ce5518112c5ac355e27bc7488c2f9f240e9fefa5b6397398004cd80c55de06fd62e6275845e38caa866a85aa2ebb1e755","ssdeep":"768:fG8Bi0KqVHKQW0Rbln8+fp6mKJaKRACvNUNnAjg1pJ+wcAyglDmd06uqD:O8cqL1RblZfp6mKJJRFXjwCpgUS1qD","tlshash":"e913025af3935629cdc2f7b4a871bb9b1c12e4253e1143f43525cd412fbfa0c994aa88","first_seen":"2026-02-10T13:22:13.589924Z","last_seen":"2026-07-12T20:59:35.235283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/ipor-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.166Z","timestamp":1783889933166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /ipor-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-1579\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYbipEq%2Bb8xcu%2FbdcjeLe%2BvnVOv847uY15j9vCxgXeTIMWAXZN9T6olrkhafIu%2B8aLBBJuxy1pftrqNEnkZcajPPL9wWYKZbRdWnz%2B1Dlv%2FVULBCwm8T4N7jGyzq6A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24e01b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5497,"size_decoded":4825,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f059998116a1fca0e0f02a1d1d25448d","sha1":"8c5806f4b31981a6a41df984b48577fc2d38b464","sha256":"1b3a26c6ac087c17ab848b77b517b4814790b703bbe4571464b4db802d642549","sha512":"0681d7ff83632b253cd0a41324cdf98cecde5bc0cab7f641b9fa14dcf13615940063bad3afa9733aa210bc12cfc5bdaa071b655225f84862e9b0cbe6090641ed","ssdeep":"96:yoxurYe8Yu4GIZZKK+KmuqQH5yZfPvU4uRNHw/opx0WYTU:Qb+NruqMyNEFNHwyJeU","tlshash":"e1b16cb8871a0dc2c841352d23adb8cbd60b494410b383c393a7f58ab5b27c32a356d8","first_seen":"2026-02-10T13:22:13.556201Z","last_seen":"2026-07-12T20:59:35.237804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.565Z","timestamp":1783889935565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://raacfi.club\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a2f8016bbbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":481,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/favicon.ico","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:54.621Z","timestamp":1783889934621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:54 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a21d598-5a21\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1gTx7%2FpUcg3VotmjNEzGlpjNKCGsM%2BbYLV%2B7GjudqvWZ4RPjDVhXLM64FG2uQU9oYZyJsuIPpNo7YJDGwvFhhnfHTBnx5%2Bfxt37RunK%2BrOpdyxWnUt7eO6xKTGWbQ%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7fb6e8fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23073,"size_decoded":1888,"mime_type":"image/x-icon","magic":"PNG image data, 2366 x 1924, 8-bit/color RGBA, non-interlaced","md5":"eec578c848106fce1f28fc48272d8192","sha1":"5b48c921cc9185cfb69f40251b391cff2e94a5e9","sha256":"7ea1f0cc58e969df06d33457831f7e0f5443b55083e04839e2b0311ce85063e1","sha512":"c8036ce7f741897d96715d31fcc2ef47b1216d1592f63c56f7333ec71e76d00b394ff55528b025d85dfe1d214d9a6c9fd37b6a069a4ed8f6921d584244c23d2e","ssdeep":"384:HuuuuuuuuuuuuucuupuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuXuuuuuuuuuuA:QN","tlshash":"4aa254b84c1dd6aff6d9b036a8121ff8a27528056ce31b304fb8bf293dc94588956c49","first_seen":"2026-02-10T13:22:13.561386Z","last_seen":"2026-07-12T20:59:35.239708Z","times_seen":6,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raac.io/_next/static/media/638f182e7ded7477-s.p.5461cf5a.woff2","fqdn":"raac.io","domain":"raac.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.659Z","timestamp":1783889933659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raac.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 04:03:55 GMT","end":"Fri, 02 Oct 2026 04:03:54 GMT"},"fingerprint":{"sha1":"42:62:6A:61:33:E7:F6:8D:4E:3C:56:47:3A:6B:EA:A6:3F:30:76:84","sha256":"65:DC:14:42:CA:1C:F9:AE:62:C7:8A:EE:A4:3B:40:1F:D6:BC:F2:E7:F2:57:FE:A8:26:89:4F:87:B6:F7:DB:60"}}},"request":{"raw":"GET /_next/static/media/638f182e7ded7477-s.p.5461cf5a.woff2 HTTP/1.1\r\nHost: raac.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 919864\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"638f182e7ded7477-s.p.5461cf5a.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\netag: \"585eb8507d4459cc7c441f708cf4b9e3\"\r\nlast-modified: Thu, 02 Jul 2026 05:27:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/638f182e7ded7477-s.p.5461cf5a.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wjgkw-1783889933982-36e53407792c\r\ncontent-length: 9728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9728,"size_decoded":10338,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9728, version 1.0","md5":"585eb8507d4459cc7c441f708cf4b9e3","sha1":"9a7331f6d79aae0fe131dd1de8f5e7a6ea6241db","sha256":"e592818029a919d578974df32686d415d6acd8401bc5420695de41a46eeae426","sha512":"be92a83923c20dc3f8d209d4b3d6f08cd1420da4c795b132b503d8bb5b2d5fe6b3232f87f5a5450227b5608ff3273fed6c2bdae9f2d454164be2988b96f58866","ssdeep":"192:aAMlQMYmUcA8BeqJsGVQA7WOrajx5sr8xLTqqXwGEFTSs6A2tfoNOF:PMmHmU+cGsKQA7Wt2r8xLXwXk7/tfoN+","tlshash":"7c12bfddf027d47dab3578f9057ecbadf09fb8886049896e9493d03c73026c95aa8508","first_seen":"2025-06-10T18:20:15.659037Z","last_seen":"2026-07-13T11:38:16.343379Z","times_seen":137,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":87,"connect":3,"send":0,"wait":28,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raac.io/_next/static/media/dc0c65e819e3bb6c-s.p.c8bc5246.woff2","fqdn":"raac.io","domain":"raac.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.664Z","timestamp":1783889933664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raac.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 04:03:55 GMT","end":"Fri, 02 Oct 2026 04:03:54 GMT"},"fingerprint":{"sha1":"42:62:6A:61:33:E7:F6:8D:4E:3C:56:47:3A:6B:EA:A6:3F:30:76:84","sha256":"65:DC:14:42:CA:1C:F9:AE:62:C7:8A:EE:A4:3B:40:1F:D6:BC:F2:E7:F2:57:FE:A8:26:89:4F:87:B6:F7:DB:60"}}},"request":{"raw":"GET /_next/static/media/dc0c65e819e3bb6c-s.p.c8bc5246.woff2 HTTP/1.1\r\nHost: raac.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 919864\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"dc0c65e819e3bb6c-s.p.c8bc5246.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 20:58:54 GMT\r\netag: \"91ed2001bdf1ef1574746c3946359793\"\r\nlast-modified: Thu, 02 Jul 2026 05:27:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/dc0c65e819e3bb6c-s.p.c8bc5246.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j56pz-1783889933990-8b816d478281\r\ncontent-length: 10040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10040,"size_decoded":10651,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10040, version 1.0","md5":"91ed2001bdf1ef1574746c3946359793","sha1":"5d46de65ab6e75e5d2b826b683d2771e149e43a9","sha256":"4d6d5f0b31b3a471a843779c4ecada040e5bc291f96bca9805a94293fe8003fa","sha512":"ee242687edb160b19359666666227fe5048461c4bf830fc53fea89be5a35f4a57f48e05cc0e741b5e09b6e36c9032c72a9c90486b5171eddd01fa361f601812a","ssdeep":"192:moDFK5EVpmEYtp0s3iSNQDgTV/u5uJQebZNAXnbUO4NuXMJLTUrCQSgb/Gx9MW:mqE5Ntis7QDQVZJQebzAXr4NumLpXgr4","tlshash":"c622d18e6326067fce1aedbd3305f752c3141434db661ce0fdbae4b81aad1c1a550175","first_seen":"2025-05-31T18:48:33.983657Z","last_seen":"2026-07-13T11:38:16.258605Z","times_seen":140,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":82,"connect":2,"send":0,"wait":22,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/hero-cycle.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.142Z","timestamp":1783889933142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /hero-cycle.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-f20\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlKCZy9cxFj2bnfyFQLLjQO0Ta780kOhd8qG7Bgbos5uE8aXmKdNVOVcxhPkIYZx2b4Cg58HA0EQnyqugQsMRa%2FRFeKu6ge5XGFnaf%2FP9wg5OFy1a19NU5FKwe5PwA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f22de8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3872,"size_decoded":2052,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"877e47ec2ec4cbdbc0792c57590c810a","sha1":"875508853e0b46f5c6dc9e8cf731c3e11e4e5b10","sha256":"c9cb7193107c11edeabba03aa9848e8ae92fb0c99fe93a16f2ed61ef8193c425","sha512":"c1f2b87461fd807a52eb4bfef443c3c125efa0a35df30e4c18f2bda5aa86f4d1b3d3c2b2ea96acc20e100b2f8b738e5cadd310693119604b4a5ef828cfe1834e","ssdeep":"","tlshash":"2381dbc1730853089f04239d891e707af2d75eda6a5eeac4ca99990778c067e4ce9fc7","first_seen":"2026-02-10T13:22:13.522927Z","last_seen":"2026-07-12T20:59:35.243582Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/css2.css","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.223Z","timestamp":1783889933223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/ab02ddb6d448636a.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a21d598-1f5d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0Mjx5uXwzAJsCaRgpDRf9vyApuiQch8b0gBS%2BJm3QBjirCcXbkihHVn7SwnA4wq%2F6DGuXmI%2BJ%2BSl4f0jKxp%2Brf%2FbeaknmO2EI0yJCVEJZIZ02v9bjkpNa%2FH7TorCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f2ae11b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8029,"size_decoded":1404,"mime_type":"text/css","magic":"ASCII text","md5":"b7ee2d2590dcd674f75274066688cacf","sha1":"948587fad70be8825136090f8c9f2f6109861846","sha256":"426cf793d071f0ef4b9cb17d6a3997082bf2c1ae1b3871a2238c392e710a32f5","sha512":"5e4742572a8aca4d4793433c5164d0b52059ec88b4ec2bf47d0fe91d1dcfbb92f0fcc89d2908b70ab0f010ca43c4c847fe155efa32378e41a7b2ac1a1875e1e4","ssdeep":"192:1pvX4mYpK2p9pXfpChVVAYqXsLu+xXmzuTCq:j1ZKT+","tlshash":"09f1f9b124a7d504ea431cc167ef7f37ad4e7261a050c879affe1889eddac222215b1c","first_seen":"2026-07-12T20:59:35.245805Z","last_seen":"2026-07-12T20:59:35.245805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raac.io/_next/static/media/28739a739c7e40d4-s.p.d9bdbceb.woff2","fqdn":"raac.io","domain":"raac.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.665Z","timestamp":1783889933665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raac.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 04:03:55 GMT","end":"Fri, 02 Oct 2026 04:03:54 GMT"},"fingerprint":{"sha1":"42:62:6A:61:33:E7:F6:8D:4E:3C:56:47:3A:6B:EA:A6:3F:30:76:84","sha256":"65:DC:14:42:CA:1C:F9:AE:62:C7:8A:EE:A4:3B:40:1F:D6:BC:F2:E7:F2:57:FE:A8:26:89:4F:87:B6:F7:DB:60"}}},"request":{"raw":"GET /_next/static/media/28739a739c7e40d4-s.p.d9bdbceb.woff2 HTTP/1.1\r\nHost: raac.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 919864\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"28739a739c7e40d4-s.p.d9bdbceb.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 20:58:54 GMT\r\netag: \"543e4f363054330ffe4ae8925f14aab5\"\r\nlast-modified: Thu, 02 Jul 2026 05:27:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/28739a739c7e40d4-s.p.d9bdbceb.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ptz25-1783889933990-48be28dadd9b\r\ncontent-length: 10020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10020,"size_decoded":10631,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10020, version 1.0","md5":"543e4f363054330ffe4ae8925f14aab5","sha1":"ffd8aa565363dfc38520a26f10cb6db4971d7b88","sha256":"3ae8233d3ae4c16c46d99e354b1526470b87180fed45b39e9917862a802c9927","sha512":"de056e913c1c101cd9a5dfc4b19d292a1a899b76959e7b03ff364cce8228fe1238c8011f17104f5f9c2f422ddca5bd5f30acd0befbd99ef51a441101708a5402","ssdeep":"192:JfA8o2y6gRBI1W9iE77T42Y4yKrWW2v/qEoZ8BiOidMrJEU:JfAwytBuW0p2lyKCR/y+h","tlshash":"df22cffc5c27192bcad231b662d2c882dbeadd1e85544be14b1951a501bf33a06f9336","first_seen":"2025-07-17T20:50:07.282473Z","last_seen":"2026-07-12T20:59:35.248162Z","times_seen":71,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":81,"connect":2,"send":0,"wait":23,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/footer-bg-v2.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.410Z","timestamp":1783889933410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /footer-bg-v2.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-9b9ae\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ntHxMepg8GCsSUELdVS5eNoBnK8KsidXhbIhnTPKeWZ2D9VIX3aDn34BTHEDGlUyccsaTvYB6tLYRj9byztolP6tRQolwl573SXALvV%2FUW5xyNrePaVcYK26mJ6XQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f3de25b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637358,"size_decoded":294669,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"deb0542fe42afa0e6947201530bccd86","sha1":"95879763024bb8fa417dbef7d9884e8fe5ebe33d","sha256":"0ae98b31dab226ffa5ed234764d28064139571155343a0d4a2425a62a3781e2d","sha512":"f65429732e4cb30287017523ede39cd4f492f1a19b94f731ba0f0ab40fe71675752b465a7e7fed730d18a845c0f0ca1edab94beaa55813dfd8e82881476234e0","ssdeep":"3072:10/sR0dXNevJh3eJny64rUOCz8FflYEyxySp3hslW0KhoAwVe7PTnGgaFe8d3tTZ:VF","tlshash":"e2d4a7edab708af18fcc42db7f2048c86e27a0766a475d64c05d9bdc2c81e6c4da9d4d","first_seen":"2026-02-10T13:22:13.586726Z","last_seen":"2026-07-12T20:59:35.248952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/Liquidity.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.146Z","timestamp":1783889933146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /Liquidity.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-66a\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRaOVeo1Q6rDWMpWyIkSZVQJIxV8oge%2FnJE4vL2NceFDFzPHjZc2kbIM714p61dGRGCGdDWB3hfeT%2FXxjFOEwZAU7bw6h%2FNqbRCH9z8kAaAzgVqVIA1DTO6o5mIbYw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f22debb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642,"size_decoded":1123,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67a1d0b8ac12f5e7ec8376987e4d8391","sha1":"44eaef40d0c6240381689bbb7276456d4c563034","sha256":"61c5ecfc9c23f2bac50e59413ed5af38597f0e55c23a54013134449b106abe97","sha512":"bfb394a4992f0b7198ee000b8a6d07b7529f8fa5bf846f06699dddbc2fbbdb250d2e79f13c84bc0b0732f900878b37e75cef39b5d7ef8b01077a2c2419e57799","ssdeep":"","tlshash":"493139d4724c589de740c76cdb1de4ec211bb08137359244ef402e36986aaeeac3b2ed","first_seen":"2026-02-10T13:22:13.524616Z","last_seen":"2026-07-12T20:59:35.251066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/x-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.173Z","timestamp":1783889933173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /x-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-233\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhVUVvbLwBjSLqP3vmewDHQx%2FczU88pXz02UJdzXUiH4yQUTNhNPSys%2F6CdWpnUwa0ihBe9XYmaMo6QK%2BQVWPYsoL4gz5nvYcCCxPyOgMX%2FBGaHQdPVi34lQrRAy%2FA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f25e08b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":1018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8c3bce6a05edbb6adc9f6ee3b422be1","sha1":"016da687fe9fa784639202e53bacb9bda26b1b81","sha256":"fe9bb8e79829bc26336f8a231117e160095aa4f8bd0713482d6d9005789593c5","sha512":"8c0cdf1226b8ee9e38a06be0b4e8769e885e6fcdbf74bbbbe58045b166eddb5d1cc2f892d69caec601fef9eca27349e7d32ac5809bfbd327638b0f45ea1f17d3","ssdeep":"","tlshash":"b9f020035114095ced45d6ba3e6cb826302b3ee3040086fce1b42a38f424b5e6ef0ea5","first_seen":"2026-02-10T13:22:13.54665Z","last_seen":"2026-07-12T20:59:35.252621Z","times_seen":7,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.558Z","timestamp":1783889935558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 20:58:56 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 8937a0942c66655f18d7603a43a8f624\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a1a2f801ed64b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":731,"mime_type":"application/json","magic":"JSON text data","md5":"296724b7703709fa3ed800984ed612a6","sha1":"d8e72256182191426cf1adec26fa77a9fd746498","sha256":"105948a1421d67b60566263f757eb1d88bf1a2c46c80b3f83f03cd12ae48e926","sha512":"bdcd4456c79a8496b312c5da78817787158961650e423ea72c7ac2d36bbc28723a1542ce1fcc76c8d6eaab3d353fa627a440f7bf6f21ba5485cb4b6de1800b94","ssdeep":"","tlshash":"42d0a7625b8e0ef857050981b449b62d787796d056506b40ec8c404462d856de24b553","first_seen":"2026-06-08T14:53:36.368647Z","last_seen":"2026-07-12T22:58:56.322161Z","times_seen":15,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:58:52.764Z","timestamp":1783889932764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 22:57:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9omLi7zuJg%2Fc8eMeAsGP0zJQho7hiRg0qcFIjS6UAacDwmuFtOHGiMkB1fEkor4MhiH5eZWZDpyEKCjtJ8507hD7sFXgKveKHPVcQmB8luKWoUK7ax%2F9YJWY5Xspg%3D%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7effdacb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180305,"size_decoded":20665,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (360)","md5":"d4ae771821aacd5c2c25a1b6d86e7b50","sha1":"01f1e7e92202e24010a65f0a91228daaf0d09494","sha256":"9a17b962e923cf083d1c96e74139e86bd469a999dfc73faedc34cd171b221304","sha512":"d672435712606f8545b70a4e437b0b65751a244a04d2be429d77aeebd162fab010fd2c31d10d2390c199dbba7cee81793bf8b0ff80af5380f5e477fa3dde1c9e","ssdeep":"1536:lmJ/gslkrA58fVuRyHN4fVsQc6MgTZonF+Qc6MgTZonQtFpBkRCBYvzoC5:CyefQs","tlshash":"64049462b9f91466f163806aba5135b929bac017c30f4f64f69c31719f97ae308673cc","first_seen":"2026-07-12T20:59:35.255132Z","last_seen":"2026-07-12T20:59:35.255132Z","times_seen":1,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":104,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/wittgenstein/v4/WBLirEDOakJCHParhXGwMgvYK-Cs.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.655Z","timestamp":1783889933655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/wittgenstein/v4/WBLirEDOakJCHParhXGwMgvYK-Cs.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28736\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Jul 2026 12:06:38 GMT\r\nexpires: Sun, 11 Jul 2027 12:06:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118335\r\nlast-modified: Mon, 08 Sep 2025 18:10:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28736,"size_decoded":29549,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28736, version 1.0","md5":"88572bdd9c03597bad0b1a0d498d1c58","sha1":"2081974a7b93dce61182a391a7f640a969b75ac0","sha256":"c52b21f0506ea781bf3cd07f8fbde05ea4cf62dc307233454b8b81304ddab1f2","sha512":"3a7cbdb3d95cd423593d715531768f8583096b537e53b283df15003f0000cedf42654a549a616d8785302b6b448aaff44b428255c0650f89100e1a200491bedd","ssdeep":"768:VURTzUGIsFIEmLx5Ul96wjOOe3i8ZakeEc8VbZicEK0oAv:VUpxIBEmtO6cO9AkeEcsFicfPAv","tlshash":"fad2e13bf8c91bd9c5eb81b70b65c9a4b0792f21b011d145a238e13b983e8351f35698","first_seen":"2025-09-12T20:42:11.207478Z","last_seen":"2026-07-12T20:59:35.256767Z","times_seen":31,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":37,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/ab02ddb6d448636a.css","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.106Z","timestamp":1783889933106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /ab02ddb6d448636a.css HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a21d598-834d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HskdsVlYWY1y%2Febxic6G00DZlgSSQVqeYIyZDH%2FrHJBRCAxGHIYd36igKqoKKeJHTE5GYIVu8tBRRzhmRA4lmtplM7XK%2B1SX1N%2Fp%2BdCw6CrJ5ZS05K0uWjkASIdl8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f1edd9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33613,"size_decoded":8814,"mime_type":"text/css","magic":"ASCII text, with very long lines (26901)","md5":"1cc98348cc2ba581a94290e2fbd4ff90","sha1":"f7cf7144d5ef1ad0336fb9ada997ce527a9f9024","sha256":"e9b8c3645f70dfb45dfc2ee543697085e969d1a2dc7dbd39cef2e422df57da3b","sha512":"745b4ded6643d23bdb4c6692954770e912992332b59be078c97212971aec21538876628e853dce2db6ce2a8f7d9fb97440e7775fb6d9c77b331fe033f658ac8f","ssdeep":"768:iExjv0V5tXilndu0znCX0XjjlCrLWkR6EVGPZ:Rxj5TvvZ","tlshash":"98e2d9b4a326dc3edc7398f273ddb91d9024a025de7115c9eb022a12dac76f20756b28","first_seen":"2026-07-12T20:59:35.258439Z","last_seen":"2026-07-12T20:59:35.258439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/rwaf-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.170Z","timestamp":1783889933170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /rwaf-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-241d\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c%2FfT91HVaGH1HgsPoYvNEWzNSVlsiHISDS%2B7eTl8yvsRLruqDcB8MHhFw7JGEfanq%2B%2FT70keEcePiV2wXazFqCZSbTHMQp%2F%2FChTHNaciB2NvNN4n0z70Bk7FYN5Aw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24e05b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9245,"size_decoded":7647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc63bd7a1abbab441f030576212c28fa","sha1":"7885b0ba831ddd9ef65387a6cf99b6e17add9b79","sha256":"d813ecada3de54f0b10455c9b589e342ee4d4d0d6845c73d0d309b0386d8ce03","sha512":"b735ba0732ac2fcd7dc9c19b6de2864a841d2f3b6bf9558c43079e489b4e9c8424426f58df6877b39ee680c959ac766f03ee2e873f9d881a993afb43b0910d1a","ssdeep":"192:Z7Oi5axxGoQgnvnedikvSvHxqrY/fpZrZtSo8W7AXAxg3jlU9Ju:NF5axAoxnmdBcUruBZrDSo9PiRME","tlshash":"a112b0352244ec8d13a15a0f1932fa89c967afd3ec16973b8d5472f7f652943bf41a01","first_seen":"2026-02-10T13:22:13.539557Z","last_seen":"2026-07-12T20:59:35.259916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/discord-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.172Z","timestamp":1783889933172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /discord-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-5f8\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66%2Fv%2FflJp8aJfYSU68E2iNUU002IfmNINPcNz8J7j8bW%2FfHitKu955MOc%2BPpPoUhV8xKO3MhudFcQQDhCz6vccQ3m3AkDZMYDlumVkrz%2BFVWn7fdeJoA7KlrMKRTCg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f25e07b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1381,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66dbc3a79f48713bc61a7790678683fc","sha1":"744b22024b30bc84d18289b7d10bb7b3703af6ac","sha256":"db0f64bec8bfc7361b7f759a90540645b66c2520944e42372bbbf4080373d60e","sha512":"74091acc9b92fcede2c9b88a3e49e178b7714986a5221051aba17a08b6f50d146041edba49bbd7f1f0d8854c5293ef6ddfecfcf04adf4e300fdf4bac9e01430a","ssdeep":"","tlshash":"f631f2c763f852a8658377f09968cc69be933df90a10907c96b52863f12044d1dd5dcf","first_seen":"2026-02-10T13:22:13.581116Z","last_seen":"2026-07-12T20:59:35.261589Z","times_seen":7,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/assets/flex-layoutdock.js","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.108Z","timestamp":1783889933108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /assets/flex-layoutdock.js HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 13:49:08 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a4bb254-11118a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kD%2FjbqQM6FrtcALS3%2FdsGAllXJuQDFcDVrz9tzhVvsdakPFx02RiQ8FgB0E3z%2FxAJiByeaz5XfBVmBXYhf%2BNIQAi6BbOWTlT73Itvnp6wHUZqqI541ImXStLsTCRkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f1eddab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118602,"size_decoded":268686,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42734), with no line terminators","md5":"890f92986327c4a617a493085ee9bdc6","sha1":"652e58f7aabe537940a47e3a797249ea64e9bac0","sha256":"40d2226998abcb66869a16d1bfc734538a67a04c17410e9c6ce282e127f8c77f","sha512":"29c2c34bf5190f9c87f05a42ca8c9c569fb552c8c2f66dfd22b8a9b40ff54591ab599e6606dbd8f387f636fb0a7d35ce1edd7900d092c9d150bdc86619194cf7","ssdeep":"6144:MtIN+bq9CMJI+bq9C/ZE15RvkbYRE5V+XXZHlgRZHqvne9tjlN05HysxOI4SSnmT:2GYdlsdqvQjASsxOIGZLm","tlshash":"2735edf713948d2f84ebe9c5cdb54c0c18b587d56e2a658aad339d8bc24c7f50ac8788","first_seen":"2026-07-07T07:20:36.260532Z","last_seen":"2026-07-12T20:59:35.26289Z","times_seen":4,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/iREET.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.128Z","timestamp":1783889933128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /iREET.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-32b1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsZx0H9T04ctG14vq04uEFCtbSyyyXY%2FEAaKw4CkpQMA27a6tZQH0zyjPBJRDP7LP%2BOKUn4WLdYWt8Yn72FsVnJXggn3kTGLH7qVbg5lFnCmU%2BfDElvCuMfe6CHbYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f20ddeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12977,"size_decoded":13522,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced","md5":"821a747d02134cdefc8b0e7b4f85afe0","sha1":"416cf5de076bf65d77c553fb774665f36afd28a5","sha256":"87da3a6991f062387a1f40fc6b45e520d7cb1b6bd171569973e215ae519d21c5","sha512":"b22424fc6a94917dbf057191530bd0736fd4aa74cc33d3acb7edb65d37503d6a88c05e422bdb8bd85762799aec4c13768feff311a8ff4d42affa6d8224d1886c","ssdeep":"384:avihe3YiL19Jm6SNz0pFA+treZohI110FfKN:aKh2nqNEi+Qoe110Fu","tlshash":"2542b0c5c61ceb9dd79c8b77b0e9b4a10c3df579db08e095b83e8944595bc25e60c1c1","first_seen":"2026-07-12T20:59:35.263569Z","last_seen":"2026-07-12T20:59:35.263569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/Ecosystem.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.154Z","timestamp":1783889933154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /Ecosystem.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\netag: \"6a21d598-2b2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BHvaFCfhmiZpuhUnS6IdPgLxT9jPbruE1v5IwuIw%2BVJAH8pkC8vejwwlHdzQE4mQ%2FMmPFDVOKQghb5Rva210zgbPjEpxOIzeXF7f0FnOU%2BDAJC8gmx1PuPG3MI5rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f23df2b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 690\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690,"size_decoded":1374,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"c3668a37ff28a44e8e9ef4c498ecbc55","sha1":"cb08b1cf270059edcc558a754d22016c6af2ce77","sha256":"e5759154baea49856ab065a9c220f7a2e52d8e681959d491c7baa474a5c28afa","sha512":"47864f1e4113cc6bf9f5854ac700c8c5f77e508bf44e9fa7121c5e13090a175a05a09f07591fa9931899fbacdeedb4f49f064f7328e6e4aad672baca4f0e7d6b","ssdeep":"","tlshash":"c50123f2fd6a2cb0f3858f37418433412435165bf8632d12f8db3a5c4f6b905c14a952","first_seen":"2026-02-10T13:22:13.525612Z","last_seen":"2026-07-12T20:59:35.265051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/llamas-logo.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.156Z","timestamp":1783889933156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /llamas-logo.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-16a0\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75lqyMln33wYLFcGQYGlUR%2BnmMdhgQ0K2N4p8TCa9eHEJg6VqEERAfNJ3ZRwkckyhJ%2BVmIAESE9W3DZsiSEOFDc2UJ2sT2yirht%2Bgdw1UsQrR1eU2ATThQrpkBdYHQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f23df5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5792,"size_decoded":5028,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b58e17461e7022a1da36800efd59d4b","sha1":"1c49698613e3d0ae86885346a251072301e8091e","sha256":"bfd00124a2ddccc5e2dc173648851818b4d66aae940cb7aad7cb46e0196a6855","sha512":"4d116b33afdd5059aaf0d78b3c31b6b41498f9c7aced497b90937b2d1570232d2d22e3fa85e1eb22b30ebe2dc460486ccc7e6737d6f041b2bc8ea0eac06d0513","ssdeep":"96:yWx4FKchq9dEOGgleJ7f0sQy1W4IQ9buGByVM8ZIpARC:+FKZ9BeJ7f0kxI972FAA","tlshash":"e5c18db0d168dc0ff2cade79998897199813057479b2c5c2dc5270acea4fd0be6a01cf","first_seen":"2026-02-10T13:22:13.532703Z","last_seen":"2026-07-12T20:59:35.266402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/leviathan-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.168Z","timestamp":1783889933168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /leviathan-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-158e\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwSFbYnjmLDOO7ZUcjDmRga44aXY2oH6L6nm%2FVe6E%2Fam%2Fd%2BZCRvS6M9Oi9KjXMkVeqyGrjWTwD3VGX29JQcewyiDJuIK7ne3QjtQP1JIpb%2Bkpjdgm8O7dRXkjYlKuQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24e04b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5518,"size_decoded":4843,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56cd01b95dcd09b157003b825dd6c454","sha1":"cce68148dd18a8e724c492b0a47fbaf8b7457dc7","sha256":"96c1bef0c5465fe524b109330ee234f72fca2586a8b3fa83dd35f5bfd93df07a","sha512":"1b60586158ae768b5504d740cd64aa6ecffa713a3c67737abe21b3a2b575cc927a1b317631c0f49117f316f4ff82257064010bd00032ba52088e25f58875950d","ssdeep":"96:yaxMhczRXVb6lPUDEyEThFNz3g8FrswrOY34gc4YR:EheRIlPUbE9bg8FQszc4YR","tlshash":"22b19eb1d29e9d086029e2f2b1ccd5085c47239a34df0267ebe137d138c7cb625e4818","first_seen":"2026-02-10T13:22:13.529342Z","last_seen":"2026-07-12T20:59:35.268425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raac.io/_next/static/media/1ccf8ef962b3f693-s.p.1edb596a.woff2","fqdn":"raac.io","domain":"raac.io","tld":"io"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.661Z","timestamp":1783889933661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raac.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 04:03:55 GMT","end":"Fri, 02 Oct 2026 04:03:54 GMT"},"fingerprint":{"sha1":"42:62:6A:61:33:E7:F6:8D:4E:3C:56:47:3A:6B:EA:A6:3F:30:76:84","sha256":"65:DC:14:42:CA:1C:F9:AE:62:C7:8A:EE:A4:3B:40:1F:D6:BC:F2:E7:F2:57:FE:A8:26:89:4F:87:B6:F7:DB:60"}}},"request":{"raw":"GET /_next/static/media/1ccf8ef962b3f693-s.p.1edb596a.woff2 HTTP/1.1\r\nHost: raac.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 919864\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1ccf8ef962b3f693-s.p.1edb596a.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\netag: \"e7f85bd6a6c1fc1083f4e613cdb815a8\"\r\nlast-modified: Thu, 02 Jul 2026 05:27:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/1ccf8ef962b3f693-s.p.1edb596a.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s8jdm-1783889933990-246d44286b36\r\ncontent-length: 9944\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9944,"size_decoded":10554,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9944, version 1.0","md5":"e7f85bd6a6c1fc1083f4e613cdb815a8","sha1":"3b139cf8718343dd2f37340331e218d02a5af641","sha256":"adf007cd277ef6dac0c8cecacfb60cc5e24e7c8bcce4db98aa233bd3a88ef5a3","sha512":"ffa4b94911384e69de11421a2ac856bc32a5769db4f7ff34499315fe823b79eba0f263be0fcd5ece1a2610dba2d69894c06633e0da82b4fdedff2c2fb07276e7","ssdeep":"192:+lFdb+VMgX7CiBQ3QFSB7F6c7Z3rtfop+FFddZiQA1Koq1yMyl+:ubLgy3QsVRrRS+XdriQAIp1N8+","tlshash":"3d22cf4316cee1cbf8e1a6638d43b8e063c201d7961093c7e09aa2734a471bd4b968f7","first_seen":"2025-06-10T18:20:15.653146Z","last_seen":"2026-07-13T11:38:16.46496Z","times_seen":126,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":85,"connect":2,"send":0,"wait":18,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/lending-bg.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.149Z","timestamp":1783889933149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /lending-bg.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-1642d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PW9Lbfp21qBlMqmEX6wILW0wnmy05F64ugNO1leEezmaXugFKz6R4waAtTlcat3%2FNveNbzfIyrJN2M1YUViiHTBqpaUSQpy1l0eTRLvtYi0vhixe7RFfbZ0A5wK0Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f22deeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91181,"size_decoded":91780,"mime_type":"image/png","magic":"PNG image data, 303 x 582, 8-bit/color RGBA, non-interlaced","md5":"92606536eb29895e48f40134f0ad1a1b","sha1":"55bd202e5d8e8b4aaf510f0a5aeb1d559d94cd2a","sha256":"767ff4f86bd9f0c73ab1bbe119825c12245bf35423ecf06c08b08d6b99feef11","sha512":"c2463ceb41c11ddb016d7ddc8f5fbce88026ea9a997ac9b551213c17c6f59f7d099a73594ba6021d7b35a10c86424f66995468c697ab32e0f35880c0279bc3aa","ssdeep":"1536:2VTJqTSHWllYPRc/0sA61+UQhNp94/EFggR5eEYlEUp4fJaQcwX8+fMxm6:OOSHESRcr1+UQhvjHY7mJaQam6","tlshash":"2a9302c6b1a55b20e11341f3be0e771b52ee22ed25d3dd6ef8e4c153a8854a2788c4de","first_seen":"2026-02-10T13:22:13.53655Z","last_seen":"2026-07-12T20:59:35.272298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/linkedin-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.174Z","timestamp":1783889933174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /linkedin-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-597\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RPozH6meMyErZdaSfzJ6cDrGH8eAmhl%2Fp3Ibv0%2BDJVrao5%2BXDhQwLkpc80illpUWPZPOM%2F8CKDyad%2BwaUz7Caz2pLYEhC0vNLZsjtlI5SK0PmPnnmmcv97FTmUwKA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f25e09b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":1327,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fac39430d67c62a99e92ac0e8d3d609b","sha1":"fbdcd2f1e80ebed0cd2d45ab8a3237db7a9667cf","sha256":"f9f04bac9d1743849731115692db82f7e756631b176a3f4338dba2a9c735d4c1","sha512":"7129efcb5f045bd49672f22fbab34925468ac2d6d3635272cf5de68d236f7b3dc7138bec979cc83510a561672876ff340801bfbd9e6c0e1dbeec671618cb63bd","ssdeep":"","tlshash":"a22111e26084c56c7e06e3f8d96b74c836573ca9063c849373b229d1f83862b0fa99d1","first_seen":"2026-02-10T13:22:13.557735Z","last_seen":"2026-07-12T20:59:35.273724Z","times_seen":7,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/wittgenstein/v4/WBLirEDOakJCHParhXGwMgvYK-Cs.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.662Z","timestamp":1783889933662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/wittgenstein/v4/WBLirEDOakJCHParhXGwMgvYK-Cs.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28736\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Jul 2026 12:06:38 GMT\r\nexpires: Sun, 11 Jul 2027 12:06:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118335\r\nlast-modified: Mon, 08 Sep 2025 18:10:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28736,"size_decoded":29549,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28736, version 1.0","md5":"88572bdd9c03597bad0b1a0d498d1c58","sha1":"2081974a7b93dce61182a391a7f640a969b75ac0","sha256":"c52b21f0506ea781bf3cd07f8fbde05ea4cf62dc307233454b8b81304ddab1f2","sha512":"3a7cbdb3d95cd423593d715531768f8583096b537e53b283df15003f0000cedf42654a549a616d8785302b6b448aaff44b428255c0650f89100e1a200491bedd","ssdeep":"768:VURTzUGIsFIEmLx5Ul96wjOOe3i8ZakeEc8VbZicEK0oAv:VUpxIBEmtO6cO9AkeEcsFicfPAv","tlshash":"fad2e13bf8c91bd9c5eb81b70b65c9a4b0792f21b011d145a238e13b983e8351f35698","first_seen":"2025-09-12T20:42:11.207478Z","last_seen":"2026-07-12T20:59:35.256767Z","times_seen":31,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.550Z","timestamp":1783889935550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a1a2f801cd967130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":709,"mime_type":"application/json","magic":"JSON text data","md5":"6b59890e86d91d519fe3814527c513e2","sha1":"e07729c3305bb79e1d07b6197d3860dfc587c712","sha256":"91968884db03d40ccbdce685a0d19e11b60147401e00da7c5dea00e8fd73d650","sha512":"273cd03ec53b20c72a45c4dc559b618686e602d461544eeeb1491890a17d168379498f500cdc270e10e045470b66cac6d873dba03923aef717adecdf608175a7","ssdeep":"","tlshash":"9ae02bd13d87c7a0c04d583641a0bd28d210b501dbc10c4e035c40c8eaf077698112c9","first_seen":"2026-07-12T20:59:35.207967Z","last_seen":"2026-07-12T20:59:35.207967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/hr-rwfx-v2.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.138Z","timestamp":1783889933138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /hr-rwfx-v2.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-27f85\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9tDX2lrAHRX2ulU1114f5%2Fo8PdwkeRJkVaOdCVuw%2BxjkcTomM6HkA7%2BVnPujc%2BS5d8unQBfQ4iKblm1fHChE1CHRjUaJWK0XiusKmmL4ViN4WCO05E6Eqtmjkq%2B%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f21de4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163717,"size_decoded":163689,"mime_type":"image/png","magic":"PNG image data, 367 x 800, 8-bit/color RGBA, non-interlaced","md5":"fa2fee9ee8cce6a149d0a319e56f37d6","sha1":"5b448a6d822461e9b6c67fed14dbe0bc91158417","sha256":"84267519788be3959db756db58d768a799a95a5c390652e2afcf8479c9cb61b6","sha512":"75135120ca8ab431c1b676fcf3eedfa31a83cb00943a41b8d5b27de21b4eb4817ead72e3fe410a654a04df4b1f60cb6033422c86d3856d528f32ff550e42c023","ssdeep":"3072:HTTcJd9y9TdtxbzxVcoFug/nVu5ZKUWjxH/zXv6yoWSaH2Aj+4OFWygtTZHe2:HkJTy7ZPFugYNWjx7T3RjaF6t+2","tlshash":"3af312d676b4951aaa4a57e603dff9cfcfd4f290846323e8bc9abcc0166921d040c5ed","first_seen":"2026-02-10T13:22:13.562582Z","last_seen":"2026-07-12T20:59:35.274993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/llama-airforce-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.167Z","timestamp":1783889933167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /llama-airforce-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-379a\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOKAm2cKBssjx6PFkws2KDaBGh0bftDrK%2BaZc2syJ6VqANIFsPJbSpJUERPEnVFHvV9CYcFIxxsgzmQmY59DBOz6eiND3varCdKcgS2K7uXbn77jHFwgrD5XvJC4vA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f24e03b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14234,"size_decoded":11412,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4497d7b03103a7fd90fe315460490e2","sha1":"076c8b2dee34f5aa8fee7cbe1adc9ca986df32cb","sha256":"89830af04f557ecab9eb2851b2857606b3ff973361c707a7b481760fa9808b31","sha512":"ec846e74ddbe916941fc5added55b40503f5ac39632c586f6751a6b4dc2d8c34db45d72cefaf6c11850ec07d8e02ee7cc1f69e8b17952b5ea66223932ea0ee13","ssdeep":"384:/4oN3MVO9UTmvrBOyiWT/czlJqFPaHlp9RuHU:/fN3MVOzrBOy5bczTqS9","tlshash":"3a52d0a8b78550d552ad8f18b2b18f79139e3ad137fce1655bc83012feaf9c25c4c246","first_seen":"2026-02-10T13:22:13.528107Z","last_seen":"2026-07-12T20:59:35.276092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/cycle-tr.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.141Z","timestamp":1783889933141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /cycle-tr.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-b109\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6WORWpq4HWCPxv7AE3rD1ZepHlGvdmbOJ9%2BNbaZik3dTZhh4eCtmr9VgX%2BAivdF36rXjqsXMUTY8dFwNCn4KFPW4mh5suAMTLKSIYKrD6HSK%2FewukH4oLYEmYlQWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f22de6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45321,"size_decoded":46035,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"555c8a70ca19bd071d416c38c63c0f21","sha1":"cb0cf3c366c8cc2bb6978c68b3b0c6289ebd4d44","sha256":"9b34f5fb58ce2fff48ca06bb066f862ff53b467fe2192605758ed05ff8bf6ae5","sha512":"6bed138438913a344ec666f3f1b3559e3468faf45b532eee6fe7e433a065a39cc9240e0a872e1191a4fbf26bef0b431bb282625202a7214bfe36ea1e8a7852e5","ssdeep":"768:RrgZpRgZO4rXw1mWySfy6MqIvqGJD65k3iOJb+KtfN+CFEo5Yotc1BWLPVzYSmUP:mZpRgq1mXFSj5k3iOJCafHSo5YotcfWZ","tlshash":"2f13025657234fae90f63ae05806a6496a3cd04403a41d36e32d9531f9777fb8bf02bd","first_seen":"2026-02-10T13:22:13.585337Z","last_seen":"2026-07-12T20:59:35.306556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/css2-1.css","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.227Z","timestamp":1783889933227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/ab02ddb6d448636a.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a21d598-da4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXM1z9ToXKdOndLSn6IN4lgeU85urfH4iPGq%2Bh1IP%2FbzcMfbWOQoRuZxqm0Tr0bkHEw96mpGk45WOUYUBQpz0%2BI5dp6neAHRF3CFLdcrERKiHRURfa%2BcsSJv5eQjJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f2ae13b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3492,"size_decoded":1153,"mime_type":"text/css","magic":"ASCII text","md5":"b7d34c4dbf34bb973a3d4e051ca2fa02","sha1":"0e623f478a3c374326ed7a8f53b5d1328ce38813","sha256":"26d71ea697518c264cefd291fc7ddcdf7d6332d6aa96f0d52a5bc11c267e6e2a","sha512":"47b68836eb25008a360c05815bec70f9c193b15c2977c3a3abc930ecd52d46b4ab8d3f0cebb6cd9c862ee5fb9f8fd1ee88a60b0c5755a70156bcf9dd0b2a5c56","ssdeep":"","tlshash":"cb71cd91081fb504eba32dc117dd3e27ee1eb1606845d974affe2498bd5ad674322b0c","first_seen":"2026-07-12T20:59:35.315331Z","last_seen":"2026-07-12T20:59:35.315331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/favicon.ico","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:54.619Z","timestamp":1783889934619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:54 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a21d598-5a21\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KThC1Q6s7z%2F8CVJGm27RHgGQ5CzyQ9Xaq%2FUNlbxnbr02jMgLqQbH6qmvAMQB0wIxo9YY%2BfmxsoMUt%2BnzyJTPd5vYlvsdkF%2F8eqeg5XC2ufK8ZLvExQwQbyk6JPBirg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7fb6e8eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23073,"size_decoded":1870,"mime_type":"image/x-icon","magic":"PNG image data, 2366 x 1924, 8-bit/color RGBA, non-interlaced","md5":"eec578c848106fce1f28fc48272d8192","sha1":"5b48c921cc9185cfb69f40251b391cff2e94a5e9","sha256":"7ea1f0cc58e969df06d33457831f7e0f5443b55083e04839e2b0311ce85063e1","sha512":"c8036ce7f741897d96715d31fcc2ef47b1216d1592f63c56f7333ec71e76d00b394ff55528b025d85dfe1d214d9a6c9fd37b6a069a4ed8f6921d584244c23d2e","ssdeep":"384:HuuuuuuuuuuuuucuupuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuXuuuuuuuuuuA:QN","tlshash":"4aa254b84c1dd6aff6d9b036a8121ff8a27528056ce31b304fb8bf293dc94588956c49","first_seen":"2026-02-10T13:22:13.561386Z","last_seen":"2026-07-12T20:59:35.239708Z","times_seen":6,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lustrous-strategy.icu/api/ping","fqdn":"lustrous-strategy.icu","domain":"lustrous-strategy.icu","tld":"icu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:59:00.174Z","timestamp":1783889940174,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: lustrous-strategy.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"lustrous-strategy.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.555Z","timestamp":1783889935555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1a2f8015d927130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/JSA11C8PXT1poMfjdt7yy.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.797Z","timestamp":1783889935797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noteworthy-lox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 06:57:49 GMT","end":"Sun, 06 Sep 2026 07:56:39 GMT"},"fingerprint":{"sha1":"DB:74:6F:94:75:02:7C:E6:BC:B0:7B:9C:CC:4B:65:10:1D:D4:2E:21","sha256":"11:DE:20:78:C9:21:8B:67:CD:B9:F4:8A:20:C6:EA:C6:D2:35:95:87:2C:61:16:18:B8:AF:BF:91:52:7A:4E:50"}}},"request":{"raw":"GET /JSA11C8PXT1poMfjdt7yy.js HTTP/1.1\r\nHost: noteworthy-lox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 20:30:18 GMT\r\ndate: Sun, 12 Jul 2026 20:58:56 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"eaccb1b87a4c06681bfe99733c754c6d\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suYpfaUmPIaxvb7fDuFpB0Gdy1VN8bEHuLXHEf2NvYh3ZDG3BXG5IJTrzHeM5qaRWs7GK6PeiqGG7sQbqeB2SSxD80wg6sNtsuOjaklvLzf3sK4hH5McbTJXooQu7gLAf3%2FjuJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET\r\ncf-ray: a1a2f8035bbba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4837027,"size_decoded":834333,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4fe7f9aa8c972df39a7e8d83329b2ed9","sha1":"d2ee9fae6032ada98532b449ec0602ac42b70d0b","sha256":"e137e679afd9ce35f8edfb5c8e0329993032f6e25a7c35dec905eebf9534d53b","sha512":"d006ed408aa8f2129e5021a64784866dad52b6184cc580b55fe452738fe855b74692e75bf1a69174149746d7994b1937b9e906103bb76eb8bcf9932822848b25","ssdeep":"12288:XrvuPfvxkUKxSZzF8ZBwup6zmmx422L7pcvevzvcduHQ0HES:XrviZkUKxSZiZxp6zmmx6TcIKS","tlshash":"31253baf63207163432951558836358ce135e9984c89c06ef7b8ecffbd59c84aa67f32","first_seen":"2026-07-12T20:59:35.319286Z","last_seen":"2026-07-12T20:59:35.319286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1755,"timings":{"blocked":0,"dns":84,"connect":13,"send":0,"wait":284,"receive":1374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/liquidity-bg.png","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.151Z","timestamp":1783889933151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /liquidity-bg.png HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a21d598-170a1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvUsDKqJ3%2BynWy%2BJkx829XYrwR6gTDREcxau2CqzmhYxxfQETw5JwqEb7r0pn5vtB%2BCdhXEixWESd%2Bl15aJ59vBV2KtyABsu39biaHInvPGxQq1usJzBcsclPzKGCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f7f23df0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94369,"size_decoded":95088,"mime_type":"image/png","magic":"PNG image data, 303 x 582, 8-bit/color RGBA, non-interlaced","md5":"3f54b15df44f465e2b9d094d9174727e","sha1":"449429cd9461496c5345a7190cfcdffb17825e1a","sha256":"317d764d8e46cf78cf02a51a58be00df71b10bd54ec50fad500871b90dd89ae5","sha512":"43ac37730bccff41babc93bc488ad2ef1cf394ea80b8ef93dab388719346ea0f23d0e060cd8737b298d381992f4e972c985c7ddd92f0214757cbbcfdefa78e68","ssdeep":"1536:y5OkSY7rVIupAIXOkou9wlBFM/M5en1nWoNFP5VbgGyOCZ9iwoU6te+Z/ZcdlGuX:ySY7JIQOkqLGCeLNB5VbgGyli2a1Z/ZI","tlshash":"f793125e1518b936fd280f7a3878d4866c7dc912bc37abb1942e7d34a98d1f9c319c18","first_seen":"2026-02-10T13:22:13.578249Z","last_seen":"2026-07-12T20:59:35.321729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.549Z","timestamp":1783889935549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:26:33 GMT","end":"Thu, 01 Oct 2026 14:26:32 GMT"},"fingerprint":{"sha1":"31:E8:75:B2:BA:5F:FF:59:1E:07:30:ED:B1:9E:07:18:13:BC:81:0B","sha256":"3D:DA:48:00:A7:09:38:1D:2F:0C:31:F5:F9:2F:41:5A:DA:53:B2:FB:16:8F:F2:81:E1:A4:DF:67:48:94:B9:D9"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a2f8015cfb0afa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":424,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":139,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.561Z","timestamp":1783889935561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:58:55 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvS21oDz6o076YTFpfUL%2BFA0hePwMaEWuohakEjVCdh%2FYIBxCCXSm8Va94yfFHMsDNmv0Mip3pxxn2kierbT%2FhMymXPrta02jZjVv%2B5QNYUr5SsRicyuroJZI76TjttdnL1M1anz\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a2f8019b020b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":718,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-07-12T23:51:39.500512Z","times_seen":179,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/pmUSD-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.130Z","timestamp":1783889933130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /pmUSD-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-4a04\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJTjVAFZfXOHFJTGcr10YYSx6lxfkv%2BAxRObfNAcIIRaoLC3tP08wXCuGEipxlh56kaT9UGPoxt3sVRd2GkuVd1hGBs79vsD5WNg7gyIkrKqDuHGlYIqA%2BcFMExufQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f21de0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18948,"size_decoded":14935,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec6a42b935754269ed6a0f2486ba07fe","sha1":"e6d7cf6aad8f87124db2737086ec3d0886417c48","sha256":"0df46e5089f3f9275f6fcd6f3473847c5d486e9b67762f494597b13f3d7d2147","sha512":"1899d5b6f1b1c96e507c92a19c2119a840c544f77dee788c23cb257a5fa0955a1b8b28f3b51911ac97774ec9117958118a394b879b6e33e5902fd827a275eef5","ssdeep":"384:aWmdOxDNRW4CEfVdYQ2oXTB9MN67mYg1RA9nzB3usY9lbJhZMf1SS:aWnCqd72oXMN67mF1RA9zg/fiX","tlshash":"b282d0304e07802965487f94365e108fae39480ac5df8a57a39b3542bdad5cb7d9c23e","first_seen":"2026-05-14T23:21:48.82791Z","last_seen":"2026-07-12T20:59:35.325829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:55.552Z","timestamp":1783889935552,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T20:34:03.533825Z","times_seen":17220215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:57.792Z","timestamp":1783889937792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://raacfi.club/\r\nOrigin: https://raacfi.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/wasm\r\nx-jsd-version: 0.0.7\r\nx-jsd-version-type: version\r\netag: W/\"5850-Zla5mhcuOico9+qcpv5wsYqeHHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 20:58:57 GMT\r\nage: 981288\r\nx-served-by: cache-fra-eddf8230077-FRA, cache-bma-essb1270055-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":22608,"size_decoded":9030,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"7116ffe340a553a454fef87341c44bed","sha1":"6656b99a172e3a2728f7ea9ca6fe70b18a9e1c72","sha256":"e4f3c00246a775193661f9277ca1288cd310a6514de166ecc2176ccd26fb06a9","sha512":"d9f2e698bf8beefb99d476bd78b26002d7e617ba6e8234c7c93e81ddb74594cf713fc276dc55fe8f5a837c8992fb51a6a52cc183998415cef1b626f4040f2b6c","ssdeep":"384:q1lFv+dy0yrXzRJnzAQTI+q9HU692o3SeHom/EtUHTOih2YeRbpKgYRSE94+D7+:K7zAZ9ao3XHom/L4RbgjSqDq","tlshash":"aaa2859231a428e1f13af73ae00ef1b937139558fb89ba2ac71f25e72c7b50465d6d10","first_seen":"2026-05-10T23:32:59.054461Z","last_seen":"2026-07-13T18:04:05.017673Z","times_seen":29,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raacfi.club/ion-icon.svg","fqdn":"raacfi.club","domain":"raacfi.club","tld":"club"},"ip":{"addr":"104.21.16.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raacfi.club/","date":"2026-07-12T20:58:53.159Z","timestamp":1783889933159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raacfi.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 21:48:41 GMT","end":"Sun, 04 Oct 2026 22:47:12 GMT"},"fingerprint":{"sha1":"68:33:89:6E:93:85:1E:33:12:2E:FF:D6:45:14:6B:29:FF:52:6E:98","sha256":"ED:1E:F2:07:D3:BC:80:8F:AF:F5:45:E9:61:D1:41:F2:3F:0B:2D:AB:5E:30:DC:31:D0:FC:8A:34:CF:0B:D0:AB"}}},"request":{"raw":"GET /ion-icon.svg HTTP/1.1\r\nHost: raacfi.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://raacfi.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a21d598-154b\"\r\nlast-modified: Thu, 04 Jun 2026 19:44:24 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4%2FGsZ3cP0N68ZsUkslPuWhOLF4lV6KJYI0TQOTGcps4C2YRFljV%2B2z1%2F0XYvEXYw8ZhHOT1N7OxU1QJULBtUfVEeCtAkGLJpCFejDGGcZW2%2F54zyj7V%2FL52yzLSqA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f7f23dfab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5451,"size_decoded":4789,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cabb686da3636d27b47f304adc9c80f1","sha1":"cf221ba5f8382c48a168635b5b8f2dfa5771443b","sha256":"c9838a7fe6a361c0004a7bb2450994eb7350e76ceb3f1c5bfb4d9bce09f51508","sha512":"6951677a17f82b32006397fbc05dfa614ec78a16304217c548f7a8afacb739dc22b472043c5da0cb8f48c7c73202daf5e93bde5fa7976185b8dc30a34ba1641e","ssdeep":"96:ypxoEOJfiZUaSXT1SX9kGbr4gz1zWunfRfUeIsoioDvG6xAPLetT2:XEOJfNLXT1SXrXrl/nDNroK6xTy","tlshash":"c4b18e76e50c7cf6a03f206da9ade6ddcc9cd4e271f608859d2424466d6f802cd05a93","first_seen":"2026-02-10T13:22:13.526898Z","last_seen":"2026-07-12T20:59:35.33221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"raacfi.club","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
