{"report_id":"c63f530f-767d-4379-8622-76100be7949f","version":6,"status":"done","tags":[],"date":"2026-02-13T19:37:56Z","url":{"schema":"https","addr":"allocation-cascabe.com/","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"104.21.16.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allocation-cascabe.com/","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"title":"Cascade","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T02:01:16.32267Z","times_seen":17734944,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"allocation-cascabe.com/","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"104.21.16.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T19:37:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"allocation-cascabe.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"allocation-cascabe.com/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"allocation-cascabe.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-06","domain_rank":0,"first_seen":"2026-02-12T19:50:05.337356Z","last_seen":"2026-02-12T19:50:05.337356Z","alert_count":1,"request_count":12,"received_data":3766871,"sent_data":5562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cascade.xyz","ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-12-23","domain_rank":0,"first_seen":"2026-01-02T19:31:55.089846Z","last_seen":"2026-02-06T22:27:42.04725Z","alert_count":6,"request_count":6,"received_data":1789967,"sent_data":3179,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allocation-cascabe.com/orion.js","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","size":107989,"data":"","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"allocation-cascabe.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7cedee5f4aabfe0f0a25596641b0073","sha1":"9e90df4076abbd3350295826c5ad3ec1856ffd56","sha256":"c2e60dc68f09c70895f8cb98a4a88e16cf3c691d5a96b9c93c3aab931eafc258","sha512":"17dc0e86fcd7af709d5ffb50d255169d2300566d30c2da4345505703e6a6ebf303df263db9561688753bc03af86b134ccfa9f763966f8612ef554be796d6c025","ssdeep":"1536:jQe6pw4biVcuVXdWAgB1PusH2DY7sX3lX56oH:Me6KBVcuVtWAgR2Do2X6oH","tlshash":"7fa340d59a4bd0e08e5a11edd077ed0ae0281aa3cdacf193b92cded1355df22c84753a","size":104467,"data":"","first_seen":"2026-01-07T13:23:26.460119Z","last_seen":"2026-02-14T09:07:38.76649Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"allocation-cascabe.com/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/47960e46-d371-416f-ab58-26fe1f01eadb","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-04T05:46:09.708582Z","times_seen":5105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fbedb0b3347993aaffda511427d5ef7","sha1":"e20ab6a72f14d0d94e111b2f7b05c3260c936a07","sha256":"0d5314efb310b706bb73a055d0863a287a2636eb5e9eceae221a74a5895a94ec","sha512":"252650d07bdc4223ba829bba1298a0effa6d343cbc58d9651350bb49138d3baa710235fbc428fbc8f5b783f8531f4527b67751143b72a75790efe8f217e525b2","ssdeep":"","tlshash":"ce01f65d27f332b9627f2162d2038489be50506370dadc49741c91894fd6e6464de69a","size":657,"data":"","first_seen":"2025-06-07T13:25:17.713531Z","last_seen":"2026-02-14T08:22:12.898758Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"allocation-cascabe.com/hero-48-static-light.png","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /hero-48-static-light.png HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 83068\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\netag: \"695d469d-1447c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xee89klWp%2BK%2BOjttqtkw%2BYm6HZL5oxewDKvgfjSGOMXwehv1C8zZHZh1JaeNgtrJhpp6nFCkCpuK%2F%2FbVYcXAei560JRZdDCfVpCcpIeS6NbSllUY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd6c7f3a94a2e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 8-bit/color RGB, non-interlaced","md5":"8918d338d5fd292f3cad3cf9fc464d6b","sha1":"afe0b6bb9063ef7fb95786560a02c7200a060ea2","sha256":"5fa237271e0469cc9a3ac35630589953803c70337f02587ab5191da0f95d2841","sha512":"5201978b3dc8834977a3e406d1b8bf2c5b5514fd048b3f2412de05981baab75228643892506d94d7e6db1946988c805b03789b31c8ec33966a8311feca5846c1","ssdeep":"1536:LYdYMukPLtmzZMqPxdvOe9uNgX5uj3txfCcQpES53mHZlt5TqOhoa:L4Y24ZMkdvOes6XUjqFpES53mHLq+oa","tlshash":"4b836b1ad8564d65ddc409324cb74f38bfe84adee844c2438377b2268fd3b895a5ca4e","first_seen":"2026-01-07T13:23:26.453999Z","last_seen":"2026-05-05T08:45:50.022419Z","times_seen":36,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/backgrounds/hero-48-1440p-light.mp4","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /backgrounds/hero-48-1440p-light.mp4 HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3201640\r\naccess-control-allow-origin: *\r\nage: 64259\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"hero-48-1440p-light.mp4\"\r\netag: \"d49fc477a7dd6b2decba2644360359bf\"\r\nlast-modified: Wed, 28 Jan 2026 15:44:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /backgrounds/hero-48-1440p-light.mp4\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ch2vv-1769679300685-e1915f4d6f7f\r\ncontent-range: bytes 0-3201639/3201640\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivLMpudLBCfjWNZdEij9LP3dn4iRjQEUz%2FBxy%2BJCWV9tsxlfs2yI4tfC1J8zqpwA7t0J20UFn8zo8UOVC6IFTSc8Z%2BmLgRexNU0%3D\"}]}\r\ncf-ray: 9cd6c7f4ab3ee07c-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3a7497f04862ee434a7cfc3e8f4d95a4","sha1":"1dc33b5e9f0ba5533bceebf65a5a87de9d73fd60","sha256":"58ed6ce25aad6c64c6c1450d5d8ab776f22729b04bf05a81fb1e7e9d851ab082","sha512":"d23f784a0a1675dd2775b162f106eb0033094e1b9ea2afb40a86988ba79f17a4467ee0764f27d128e0b203f4ea2fe862e31694a056d1db959e3397f9f9794105","ssdeep":"24576:ym2UfSkgdkkcbEFABOPBD6x/tPmo2Ovl8cymLwr:D2Uf9CkkchIcJIo2mlHymLc","tlshash":"db25239443763d07ec150fb0e5e996702ad7c4aa468e238b969c2b50ee4cd720ef9d7c","first_seen":"2026-01-07T13:23:26.456538Z","last_seen":"2026-03-28T00:19:51.287202Z","times_seen":33,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":142,"dns":95,"connect":8,"send":0,"wait":48,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/variant-light.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /variant-light.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 85671\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zOcTzfni9rDGvVgY67D13yW9dhYN023bRk9uiX2DnJTY0ZasOPKjAPIRNqJuOVTUGjF7C39WZw2Uo8BpjKBoJ5hIGeHMZuZfQFR394iNpAchLjy\"}]}\r\netag: W/\"695d469d-1bad\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f3c9642e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e383261345387db502ade999cac76204","sha1":"268e4120297a3fa928bf6d6d7f230052edbbde33","sha256":"4db5c3430e3d56e9eeb062341d44b4fbcd9b50b66a677a2e6d72c29b80734f7d","sha512":"7b7fd47badebb60b4a74015d6591a1f2c6d4e7fb5ce987b1a727c35cb5513a1d9a25a90d737a453855a65c1a5cb551decc3c6fd226f56e0f9976cc13c7f4d5ef","ssdeep":"192:ybo/a4H9bSf+lGFhfMpfuIpd1wbQdVTIqV1:ni4H9JGOuYd13sqL","tlshash":"7ee1c5f153d4b2f4e642fb39c92114b17aea38fabbd65704c280cb92b061045aecdce5","first_seen":"2026-01-07T13:23:26.40381Z","last_seen":"2026-03-28T00:19:51.296378Z","times_seen":35,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/cbventures-light.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /cbventures-light.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGuI6TkeXholjvatSBv6Z%2BQs%2BYY4E9g7u8dWsYUehrEw2O8bCWYddHHZ6c0wtfDFsihssFIOAupTH9OwPPD7dAamcJuae0GQu6LE5qpAgaUsyhot\"}]}\r\netag: W/\"695d469d-d1b\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f3c9662e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b8319948f2ea385a464563266e9e731","sha1":"76428a1ba18620e8a7bde07529ac740489853bb2","sha256":"90bd0490a72bed7b987000309d26d35b914be5d1aa01709097facc27d704e1a9","sha512":"ef5463fa6d2ccda672e42e27083b6cf03e077816978583c3421bc8ef14b402c8ed6b04d1e1a066be3d054600d70d94f1268387397419d4e83f48c92b5b106567","ssdeep":"","tlshash":"5c6175eba22493d0a44bd3788e14a0f166ef34f67fc546f88391fd999a340d24a89844","first_seen":"2026-01-07T13:23:26.451119Z","last_seen":"2026-03-28T00:19:51.290017Z","times_seen":35,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/5e2ccd6a7d0edc8e.css","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:33.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /5e2ccd6a7d0edc8e.css HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\netag: W/\"695d469d-1b25b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkG%2F3s0D37bCLvNl%2BKB1uT%2BppMVD8qclP2%2F4oDI%2FdVOAq8fAdiVUA85VT%2F6GoejSKWYkApao%2FtRdalyIjbzf7vvSs02%2BrGwQxo8Zbod4gL8Cn2nB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd6c7f09eed2e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51549)","md5":"2e6aae9b083fcff6109d69e262bcff9f","sha1":"43be41c2379d116af28e2a3c4d2416a119af6500","sha256":"097fd3a8dde4de970abce26e97060fecb0e4fb950bb65136bee43453c320177d","sha512":"3ff54b4e7674477fcf5f4c314a7b43671bcfcb90134a1324cec4cc70da6114ee225cf395f4352f3eb38a6b20c817a8ac91d5f61be56c0cd9ed8e4a2d51f4fe35","ssdeep":"3072:7V2Qhf+K7s9Xv6928f3yKYMdiYAX/3b+Q:7V2Qhf+K7s9Xv69YKK/3b+Q","tlshash":"47b37420e12a9d3bbd33d8fd639cf84e610a6092ae3167d9fb1235119ac76f71d72214","first_seen":"2026-01-07T13:23:26.443982Z","last_seen":"2026-02-13T19:37:59.453978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2 HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-cascabe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"06ba6ef833b337bc-s.p.0faac26c.woff2\"\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sun, 08 Feb 2026 00:07:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cpglc-1771011454217-45fa39816d75\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crTcBTg1mz1mmwe08YPa2P234qYSKqNS6rBbtUkYr6oaIxkh6bPvl%2FjvxbIXOegnZGT7Bqw%2F6Rctn1%2BEphb%2BlpvK6qBv0HYuGaE%3D\"}]}\r\ncf-ray: 9cd6c7f4bc235868-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T01:53:19.317716Z","times_seen":87181,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":115,"dns":56,"connect":10,"send":0,"wait":59,"receive":22,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/apple-icon.png?apple-icon.819a356a.png","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /apple-icon.png?apple-icon.819a356a.png HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 3325\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 41180\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-icon.png\"\r\netag: \"3f13dce7cc4fe57ae8e88d63484779df\"\r\nlast-modified: Thu, 12 Feb 2026 08:23:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /apple-icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::94phb-1770925782628-ac8ed916967c\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pCUpRNSeGOI1MewsqfLuYO5qZVKDwYd17DnU6fmPu7LMydaD7EQ1sOYTt5WdMcxO9RBQRCUC%2Fvw9kWIjoL1UdcxzcPFK53hPsM%3D\"}]}\r\ncf-ray: 9cd6c7f6f9165868-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"3f13dce7cc4fe57ae8e88d63484779df","sha1":"469db33808df4aaec239dcbdf9d9d774dbb8f941","sha256":"96c4889ca2f9011e9c2a70b4c2eca3fd4a5d1c3fcb9888e7c23dd0bcd3605a63","sha512":"8ea1a6d997eadf4e6f2d1634b700afa2d2e38a9caff14c79fe9baa320a067fa71eca9d3bd3bb3e127f33a19dd96dfba5ad71a5f747ff9f94b7145043866158bb","ssdeep":"","tlshash":"f961f88be4465c01159ae5b0a4eed243eaa2ce81c98019896cedd5135c396fecd1839f","first_seen":"2026-01-07T13:23:26.452208Z","last_seen":"2026-04-28T14:14:03.888031Z","times_seen":43,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/icon.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsqLwtDPoCASUjRrnNfqGRV7sLUu3QvsoC94ePtPDgYka6J%2FM8IGKOSFzf%2BZKV9yltvbAaDS%2Bny%2B0mfyvrExOdg%2FMytmeDWcFEn5jd8%2FmxVmPlPy\"}]}\r\netag: W/\"695d469d-d20\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f6fba52e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3360,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b950857d9231f965042bc878fbd2e2b","sha1":"9c8c792df7fad885409d5a53fdeeca7dbd6555b4","sha256":"55da57823a16e7936fbf425d0b2834679c8f897ba483ac1977a961352e1a3a96","sha512":"7a23984a4c8515a66b0ded2668c9038625ce46ceed4866d4d7a361a44ed04ab420610510070558a8691eb92e0379bf5a456f84b82d73a78aee8f42f63ec13c98","ssdeep":"","tlshash":"bd6164f222dc21d868475760aa294c26332e20fff70dd70e8e4d2760a5510dac99fcc0","first_seen":"2026-01-07T13:23:26.438833Z","last_seen":"2026-04-28T14:14:03.89029Z","times_seen":17,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/orion.js","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:33.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /orion.js HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\netag: W/\"695d469d-1a5d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BhWU0sIThqQPeGlzZw%2ByHPfw%2F0iSLpzeLwLAtPUMJdhfhQQBDJgvjSftSQzFv4ZUk6VCSh%2BR1WfXWZ6bWCSQ30ZWLTHTou%2FBuRiieko0hYbMmirR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd6c7f09eec2e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"allocation-cascabe.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/polychain-light.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /polychain-light.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 85671\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqr12uKzLZXLdLzcYWy2W9I2N23TfQK0NzmSlPfvnYx3J5KcqI52VaO5Y29HSw%2FFPp6xFx3W6I4nvpamuaehFbI%2BO2nKi%2BFss7bi5eR1g9aC0qEf\"}]}\r\netag: W/\"695d469d-46dd\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f3c9622e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60e9779c04baeb68caf173791a7e267f","sha1":"a2bce35b7586b0a7811c563e055217145f209781","sha256":"d30d5dc22f681701f2a4c687bbe03c36f917042c2792ccba97eae032ca85b5ee","sha512":"32bbea79ab714628e807d9f72d1ee54682845ab151e5ed52b90c0473cd97ca3995654562f66cd58ae532a08cb92349a21ff0034c816c7e0148660aea3ca51fb3","ssdeep":"384:a3cQmGhm4cYIw2cwdquz6COenZdLvKs6fj7o2XKc:qBoVXrcwdqbCnZJZ6fjU26c","tlshash":"218294f177e871f4e806f798d333c8ac7606187e3ba5c75a82a8ad64a51149c8ccdce5","first_seen":"2026-01-07T13:23:26.45801Z","last_seen":"2026-03-28T00:19:51.293883Z","times_seen":35,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/auros-light.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /auros-light.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdQknKdvpTGeAIlVgKmKyTf9v3uZTTLHoPGqq4FNpaKFoJYiZZ%2BAngSw1OlnsbDfIDBAjv%2BnXoLCNmVu87p5yqj32XHNV1BuWKYNpEP512b0l0mY\"}]}\r\netag: W/\"695d469d-a1d\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f3c9652e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0510a364b68e62f1595f35ee2d00290","sha1":"7621fd0fcda8017748b3cf1484f69680212a7bac","sha256":"6d0223dcd9b582a0777582f7c9a76e5e75a00d08fd52ea270b878b41bc2c559b","sha512":"17f48f15b5239bab3776a483c980cd1ecc041567d84933ebc017ac6aab4185cf859c9fdec220c6e3b4d1bfdec9864c62960c2ecdc899dcc6c1177379e13ffc5a","ssdeep":"","tlshash":"185175f132b8f2c56805f72d1f397868a21b24ff6ac20588d642e91a6c491d61ec1cfa","first_seen":"2026-01-07T13:23:26.408846Z","last_seen":"2026-03-28T00:19:51.291936Z","times_seen":36,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/archetype-light.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /archetype-light.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6sQNI8Erja1mhqSzhQv0pD7gTYh%2B4%2BUI%2F8TYtEss8PK2bKZQsD1PzSfBB4syAKpbHrGFVUdE6FcfwwT7Jjmzq9q3obSbjQGkKEW42VN3rERtSKT\"}]}\r\netag: W/\"695d469d-913\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f3c9672e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e883f4732c81b06a0642fb35625dcccd","sha1":"583e411ee2fe2663de203b0b690ca24a4c2b15a3","sha256":"7664131acc910340bb15e81825b3591defd8dd69a2b82092fe8f0e59a611e288","sha512":"8735fa012c0585bdbdc191b89e523d8b62cdf234722103c075840b10e90a8345f0f6e8d669f6f3940e330f4b5ec24af94eaf906e66a211216a785b2119f15eb7","ssdeep":"","tlshash":"c341456562c084d9da4dabdc2805dcf679335cdc376edfcd86c72b55751904c101ed8a","first_seen":"2026-01-07T13:23:26.41508Z","last_seen":"2026-03-28T00:19:51.280425Z","times_seen":35,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2 HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-cascabe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 502194\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"06ba6ef833b337bc-s.p.0faac26c.woff2\"\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sun, 08 Feb 2026 00:07:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cpglc-1771011454217-45fa39816d75\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmIEwf6ALQWuCrMtUSCCxh%2F3bFPZjYPKBHr5P7F5ZIG3ntpopYPGXTpz94WLrOgJdXBHRSlvxEAEwzx6BEIDHtP50TgpROQdFcs%3D\"}]}\r\ncf-ray: 9cd6c7f4bc145868-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T01:53:19.317716Z","times_seen":87181,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":98,"dns":46,"connect":10,"send":0,"wait":65,"receive":23,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/logo-light.svg","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:33.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET /logo-light.svg HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 85671\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORn0gMQ6a9ZLJeEvNBx1jTYV8DSaZ8A%2FW49KvKcr0pSqdkjrwvDM1EEHR9Da74%2BVB5ttsAto1Le%2BGSircyItJCx192M66vHV1Q%2Fpd%2F91jAeTHheA\"}]}\r\netag: W/\"695d469d-1735\"\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7f09eef2e12-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5941,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5b178d57ed13e3016dbf346d9b9059f","sha1":"3c099973d5f4f89eae689909b0c7b51ab85a0a52","sha256":"b46a13152de6095612bb7cb3d95a32b2621dad0079e37e21bbb2576be34b6600","sha512":"6a32d5f92c5aa16a81cf41d105064521e67b577bf5af25d2bb4d0cd489251c6b03490d189f044368b717cd291129dbfe339590c75aa43eaee275c450e5e025a0","ssdeep":"96:3is6W+FUUT2ZcdFPrcVWpeooTY/IJ5aMUzTqp+30cuM+UG/zOaADsTzWGBnF39wA:3T6W+FUU9dwWY2bzTqpm0cuM+UG7OnIH","tlshash":"8ec193ddbe3856b9b809ebf2c9009065bd4f45fa23134a28d3da47d220c787bd406cc6","first_seen":"2026-01-07T13:23:26.447701Z","last_seen":"2026-04-28T14:14:03.879045Z","times_seen":40,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/fonts/GT-Standard-L-Standard-Medium.woff2","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /fonts/GT-Standard-L-Standard-Medium.woff2 HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-cascabe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62772\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 396117\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"GT-Standard-L-Standard-Medium.woff2\"\r\netag: \"63798a2003d6cef7aafa2bc41619ae1d\"\r\nlast-modified: Mon, 09 Feb 2026 05:35:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /fonts/GT-Standard-L-Standard-Medium.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jbxnx-1771011454225-c360183f8548\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bexMqQdsP49oq5jg7h3GTDs4q8IzY7WA5kGdOnDMj7LRudu%2FERPTXrIjRf%2FiB77%2F%2BUeeB3Dwo%2BdYX5BizCfUwbBbRkKBZTFjucw%3D\"}]}\r\ncf-ray: 9cd6c7f4ac095868-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62772,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 62772, version 1.0","md5":"63798a2003d6cef7aafa2bc41619ae1d","sha1":"f64015cc03a534422197219a161ee709f941a3e6","sha256":"faabee27a4bb26b35c9fba04560a6993db1701689942cdce0922c0af1ec9d1a6","sha512":"332400952b041e6e6513de8e93be27afbc97e37abbfc713506f661cc5d98fec11f29ad5f0e5c58b7b340015191ad696fd84196f90ffcf6d405004c3ce73ff091","ssdeep":"1536:5Zc1VnD3vlBOjO/h5WET6W1Usvt10UujRrVEE:XwBbvHOjSnT6SUsl10UujvEE","tlshash":"4a5302bd03956f81e5c04f1ac79e2cbae8805b1792db77c55a9395cf8453163278f8e0","first_seen":"2026-01-07T13:23:26.449369Z","last_seen":"2026-07-31T08:51:20.880775Z","times_seen":29,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":101,"dns":51,"connect":10,"send":0,"wait":54,"receive":23,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cascade.xyz/_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2","fqdn":"cascade.xyz","domain":"cascade.xyz","tld":"xyz"},"ip":{"addr":"104.26.15.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cascade.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 01:03:31 GMT","end":"Fri, 03 Apr 2026 02:03:29 GMT"},"fingerprint":{"sha1":"D5:23:F1:72:34:43:B4:9C:CF:2C:7A:63:EF:51:94:FB:90:F9:D7:60","sha256":"CE:C4:D0:20:72:21:5B:FC:FA:0B:9B:6D:97:FC:8F:44:FE:12:06:C1:F3:0F:FC:4C:B3:DF:6D:70:BD:40:15:C0"}}},"request":{"raw":"GET /_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2 HTTP/1.1\r\nHost: cascade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-cascabe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-cascabe.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"06ba6ef833b337bc-s.p.0faac26c.woff2\"\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sun, 08 Feb 2026 00:07:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/06ba6ef833b337bc-s.p.0faac26c.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cpglc-1771011454217-45fa39816d75\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ez9u4TRXDmSBBQGMqAvX1EDVZ5jpa9Mqp%2BZ%2FfclSU0N6EwG6hvDSPYDTidOKDBLYikCcnbD%2Fpq9qvv0WSgvdE6cH1UaBSH6nSs%3D\"}]}\r\ncf-ray: 9cd6c7f4bc1c5868-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T01:53:19.317716Z","times_seen":87181,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":104,"dns":47,"connect":10,"send":0,"wait":62,"receive":21,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cascade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/secureproxy?e=jscdn/getFile","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-cascabe.com/","date":"2026-02-13T19:37:34.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allocation-cascabe.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://allocation-cascabe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"eo2upuit3j1bi7kc0oxl\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAFkR0MIbRTELadoIhDqSWfyvmCbaIq89liMNgrVQImpiWZBgx%2BAKrN6Fu%2BhAWoaLtbjzxcIcy%2B6SRJ6C1l1XWahonIYEjOSZv9%2BDbfyOIbTBA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cd6c7f65b282e12-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3386126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df9d928c82adfbccf752dd3d73d5bebc","sha1":"5c73aace0f5d029cbdcf3b7836039981e22ecfef","sha256":"e931b74a57ad7aece40434febfd37c79578f247d53c78183ce90afd9ac810f91","sha512":"0bb5b847b85fdd57a6fb966c8f7cec8d3b862d4b259904d7037b3678b4690da00bf65582ceccf5a967ccdad46a6d986dffb06a46aa7a0dc5fa8dea6179949969","ssdeep":"24576:bb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RuiAe:HGkwdNZngkO51","tlshash":"0d2523f2af6b5c2cce6c4d99216f2d0f2d444c410489eaf7fba6e487219e76012d7d68","first_seen":"2026-02-13T19:37:59.462515Z","last_seen":"2026-02-13T20:39:33.873975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":497,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-cascabe.com/","fqdn":"allocation-cascabe.com","domain":"allocation-cascabe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T19:37:33.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-cascabe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:33:44 GMT","end":"Mon, 06 Apr 2026 17:31:04 GMT"},"fingerprint":{"sha1":"8D:B1:4B:D7:15:EA:4A:78:7C:43:A9:39:B2:B6:06:E4:3F:78:FE:DA","sha256":"E9:8D:75:E3:57:51:8F:43:0E:4A:DA:71:FD:71:ED:6D:C3:46:E0:BE:2F:17:19:37:1C:8E:27:D0:EF:F3:D9:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allocation-cascabe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 19:37:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 17:30:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18nrSQ0frB4LVpp2fy2cVEKfqOPiOqW%2FWNMwKDGWkLNyHswfvYKpZeqDHKoge30qEUP7eZxTLHtaDDjqvbQ0MFFFQGU3qukILzPsHUvbsSvJGjNc\"}]}\r\nage: 85671\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd6c7ef5c5f70b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24574,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5913)","md5":"74e0fcd571bce1ef9d1d748e408a1506","sha1":"42b224dd9a466bfb265a346106017a62941d2719","sha256":"d53ccec6a5b94a17fadb98b5416b69164f62d267e5866c494e2fbd495d157abf","sha512":"c17d881a88ab504a5007a1a97ec257102defcc0a4bba767101a8272f1236d3704420576d071d8288b65f46d8c7d3c8fb154b25138ef392dcdc342f1ce5b8f677","ssdeep":"384:rzNYhUqQbIdBrm/B34Sem7ISrIGK2k2dTohx/sZilmMGUoMLM:rz7ICXTohx/uKm4o1","tlshash":"13b20cd0e532101a961b412bf3e7ef4712589e03c91befa4bbcde1918f855859eb3728","first_seen":"2026-01-07T13:23:26.422536Z","last_seen":"2026-02-13T19:37:59.463961Z","times_seen":4,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":53,"dns":21,"connect":8,"send":0,"wait":29,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}