{"report_id":"c65848c8-7907-4deb-82d0-0260b4b086ef","version":0,"status":"done","tags":[],"date":"2026-10-13T00:43:28Z","url":{"schema":"http","addr":"take-papertrade.xyz/","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"take-papertrade.xyz/","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"title":"papertrade - rewards date proposal","dom":{"size":15435,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (658)","md5":"92fe949afcd73932dcccb3d467ffe6bf","sha1":"b1a98090cc8a887763a635512dbd59cf3700e1d3","sha256":"3774f62c992a6ba02ecc5a44346f13c67f0829321c2bd9cdf6af5e7465b9244d","sha512":"86d13856b4209938b0f4e9144e0c7d87fd1f4cb2c644226bbf2eb5f3f937391459ed46a5fe723a2f83db54ef59f7dc6ee74a4bc7fe4f03691ec2b8cfe44a0139","ssdeep":"384:hRP+i2ici6giOihNiEik2pYzzFcpmJAOMFpXe9h90efF7Dq:j+i2iciPiOiLiEik2pYdcpmJAOMbm9TY","tlshash":"1362adb3a5f6522210b2d4c6baa91b1b2ed5de1bc90b460073bd8bd40febd82fd53055","dom_hash":"domhash9cccde0e2aa147894cdd9bf74afe7e49","first_seen":"2026-10-13T00:43:32.162868Z","last_seen":"2026-10-13T00:43:32.162868Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"take-papertrade.xyz/","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T00:43:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"take-papertrade.xyz","ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-11","domain_rank":0,"first_seen":"2026-10-12T03:07:53.294497Z","last_seen":"2026-10-12T03:07:53.294497Z","alert_count":13,"request_count":13,"received_data":660036,"sent_data":6396,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app-7067748c.stevepoyet.workers.dev","ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-12T23:34:30.561085Z","last_seen":"2026-10-12T23:34:30.561085Z","alert_count":0,"request_count":8,"received_data":935963,"sent_data":4287,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-10-06T14:34:08.477959Z","alert_count":0,"request_count":2,"received_data":1550,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-10-12T23:34:31.288714Z","alert_count":0,"request_count":2,"received_data":2956,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"base-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3470079,"first_seen":"2024-06-07T05:17:26Z","last_seen":"2026-10-06T11:19:25.197859Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1089,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2817504,"first_seen":"2023-07-30T16:39:25Z","last_seen":"2026-10-11T12:31:33.149363Z","alert_count":0,"request_count":2,"received_data":1537,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-10-12T17:49:11.821394Z","alert_count":0,"request_count":1,"received_data":20835,"sent_data":1312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1rpc.io","ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-10-09T12:48:30.57805Z","alert_count":2,"request_count":2,"received_data":1885,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-10-12T01:53:43.979918Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":554,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"take-papertrade.xyz/js/main.js","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c91917012e8eb0576f81400ca8529c","sha1":"4b001f2d9cba76446c6c8c216398236177bb1d56","sha256":"8f286c62c9e469e4c653f5e8a37366cc55007e3305086ed41a1aabbc1f91f792","sha512":"d2d256bac15e0de4a7ec2ffb4aaa4df8bf6fcdf1e84677ca9fb9457247dde5b458aac520ca3c29ae20f90f96f5866e23284c656951f7f4abb1592b58d14d7dbb","ssdeep":"","tlshash":"9f31de6fb44928b699bb737f861ee208fe7604232901c7123cacc4b01f74c551a6aedd","size":1751,"data":"","first_seen":"2026-10-12T03:07:59.628785Z","last_seen":"2026-10-13T00:43:32.17226Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/a2acde92-0ffc-4de7-ad22-6f0ac3c52084","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"408925a5dd2ba2096215a1a528671002","sha1":"cec3634f1749b628e1e202ef584131bb1f1a96e6","sha256":"95fd80e73f0166eec62ac6e5af8e00a678b437d83a4f87e4347d725ae29e1cdb","sha512":"065d2d3bd263723be5ba94a89bda10576355c7d2b9466825c20ae8c553d44769f063480c99cec22b5b432da6dc6620bedacab4a14727efad05f5481d6c996e19","ssdeep":"3072:DlcWmIH8unuHDLeqsIR+Ybq7d3gLpxhfL0O1VbUSxur7Ce:hcWmAuHWqtR+Ybq7dwRL0O1V4Sa","tlshash":"0e54cb952cc7eb84ceca3e9d965fc806c1150e254b966d83a94fd9b433eebe081c711b","size":288330,"data":"","first_seen":"2026-10-12T23:34:37.150797Z","last_seen":"2026-10-13T00:43:32.192161Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/43569fe5-4fef-419a-b498-34eff011bdb3","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6889a33c2c6552ebc996ec77140f75e5","sha1":"664f0bf1ad0d648b44f664f71f7672521ffe9c9c","sha256":"903367acec640e6284a29684fc2f1eae088e6499ee9fadfb54ffbb23abe1b076","sha512":"b647090dfb1d08102b9ea6b4d7103422dcdc86f6a94e506c88eea0d74361f5cb401900085cec8385e0f9e7c4e8090bcee7dae202f060195c28e8a428cd4ad308","ssdeep":"1536:dLALBh1OvHvpl++AIzIJw57fI7w4nbQ9xHqztqZTcS5HoJ:lHTQ04bQ9xHqztGT95HoJ","tlshash":"a9636e305344723e110395e39b89034b393e334d7da1628e66bec11c95eaddeb1f69ba","size":72557,"data":"","first_seen":"2026-10-11T02:13:09.554341Z","last_seen":"2026-10-13T00:43:32.171548Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/03ebb1b9-f1c6-458f-9822-2ca760dafe61","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42a8df8912c677c0367df03cc4c4de5","sha1":"4517fc7f81fa4bd2c841b6e3799743427c499e1e","sha256":"ad757ce72a7c54dccd0991575ec817a29a4cd5bac297552969d997afc1462088","sha512":"30e66c64dd36a82c94ca09b91a2458c06085541380076cb144eeb3181c44efaf5ca01f74a9fb480b34c60ed12de14f36244c728c9ee32ed49a678ac3584f45a5","ssdeep":"","tlshash":"e461500fe3b51a7c22c58970303f565c992c68597911c854753bd8f1ab38e8628beff8","size":3440,"data":"","first_seen":"2026-10-11T02:13:09.59146Z","last_seen":"2026-10-13T00:43:32.18227Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/5fc2fbbc-50aa-46b5-94d2-7b8104c9e1c0","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c5ffa7fe80e597db44879e8cd618093","sha1":"727ca6fd5787db650aa1052516d7e3ed41f7b456","sha256":"46d2f66e4dcaf533c54c995fb3f9e45aa8966242bea5f1ae3928cdd84dfb8226","sha512":"00a7e8c2831a855f7d88fdefc52618da8bdc0b9cc8ff817defe1f7e2d97aa886a12da7e52c4aa7b458f078e978c5526117bff6e3964896c6e03cd368aeb2839e","ssdeep":"384:xJsAMROmBNlV+EMekGyvl0BEuPeQRRybEhtMlye:XsAxmBfV+lCBEuP/xMlye","tlshash":"c572534d6541183083a3411c13ef3a59a277fc919aaf263cb1c08ad376eea6f52d7dd4","size":17150,"data":"","first_seen":"2026-10-11T02:13:09.527092Z","last_seen":"2026-10-13T00:43:32.188918Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/22f70dd4-966b-4d6b-8186-7e378cd344dd","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","size":528504,"data":"","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-13T00:43:32.166496Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/chunk.48.l5zpzweg.js","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8a016af718a07aee6197e9a70064430","sha1":"61528febd3ef96fdeb48980d6e58a70ed2de9975","sha256":"6dccac5674c471018b74914483ab9378d7022e1d5040fcfee70f5c0f9d89b467","sha512":"0f9d8566b3df48810ef19cbec72529e5daba37c72ed89ba049841289f107737c8439b78f535b307bbb6e27e0ece009a988c87fda16989e7eab40bef339c37c38","ssdeep":"384:DTgrrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:AvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"22721af87365206a03633532607f9102d177eb118d5b9050a2e28a957decf6be677fc8","size":17079,"data":"","first_seen":"2026-09-27T02:44:53.599511Z","last_seen":"2026-10-13T00:43:32.1658Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/ad83db6a-b6e2-43a2-8361-90dc66d10d6a","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"708adcdf02897466ab06cb8215c4a2c4","sha1":"0345ce14ee2f38ad79609d1bf68878555e270b66","sha256":"503b934de29c5678a6482a673005c011015c773e110000539334cf38a190e397","sha512":"8399678b495671fc592457be9f982f8df299a99e79caf0e0319feca5decaa20d99e8fa42deebae424f2bbcc87516cd129cd05a5015c6e729c669d40ce5ba43a7","ssdeep":"","tlshash":"15f08b194fe85b8bd28e4261429d6e6d065c2047b379ae32c3a6cd2240e16d02566a2f","size":530,"data":"","first_seen":"2026-09-20T12:45:21.533206Z","last_seen":"2026-10-13T00:43:32.193246Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ce8e25d91425a57851341e34dbe890a","sha1":"c45423bd7a6a2517149e5a0b62f9499b5af3c24b","sha256":"e0af6520f9fa748910f1a11f80f16ec0af53c4bf9f9fead0f8488bfba116a2fd","sha512":"b2ff222372c879d2bd1704536d38e1ff67d1cfec508d1f66be249a0496032bba3dfe36dc6d1ccc7d86d6ffa83c83c96971e70167778fe79608131a1976f077fb","ssdeep":"","tlshash":"1f6000c000c0033ff0300000000c000300f000000c333030000c033000303000000000","size":13,"data":"","first_seen":"2026-10-11T02:13:09.617936Z","last_seen":"2026-10-13T00:43:32.194436Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-13T02:23:35.951007Z","times_seen":861255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/441d8dc4-ec7d-484a-976b-9d2f58b30d45","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99daf44e14c7430acd6c41929f6d989f","sha1":"500f15295da3a22114a34fcf612662983e448033","sha256":"c6c72a6a71e5870d4d9a8aa95f640dd8aa289c547f09c9d794a7be9fd634d583","sha512":"2db5932fa1283dcfc60d1ad37e783c09efa495fa77611bde3d643882c03a6f7af1f9b1e085fbc310aea9b135d432ddb5829702f78f3132a33a7d19951fae8563","ssdeep":"384:48wvEBNsoJ3eYWIfSmmE/XUYc3IMb9wKyJox:48wvToJ3ekXUYcYMb9wtJ6","tlshash":"e672e7358310513c96a743d576ea925f81771041e34e30c6ebbb835c8ff0c66aebaba5","size":16807,"data":"","first_seen":"2026-10-11T10:07:29.450434Z","last_seen":"2026-10-13T00:43:32.170848Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/img/favicon.ico","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.162Z","timestamp":1791852179162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"386d4380-6987e\"\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BKj8vBXixDqTrbfUUGmCofrBejqT6HGprQU38AmQwDLLzay%2Bqzmtz6ow6ltxjMTtV5ZEkuf4mbJj9JdZdIGtOwzL6zFWkU6NYZPgXU%2BLRSbW9ZbZCquXoTp51ThG3mMjj7TqOYm\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49a4eb7c94656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432254,"size_decoded":35316,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"f9f28ce2d48382afa48191922776cf97","sha1":"d04a7e1d995bd4cbb714c3184ec44460e54c81b0","sha256":"15f6a9bc5f0fa288c37893b0feb8f4c8901d3e09b4b9474091d058ebacf0747b","sha512":"3de446c37100fad927a77d0efc7f0fe55d9453d77f84b428a5c226a7fe28eafe61838352179c2f3a335a748e0d668b987d064980c5a74802068aea201ee28804","ssdeep":"1536:tfkT7O1iJ9LN8deAmdhstQrZF2bUWAtB9+SQ:k3h8dJ7tQDgXd","tlshash":"77941bcfdf829e06c2f7e8f2ac7856d1856cd952c3dee296e472020ba5c443947d858b","first_seen":"2026-10-07T13:02:55.01913Z","last_seen":"2026-10-13T00:43:32.164193Z","times_seen":116,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:02.356Z","timestamp":1791852182356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 3003\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3003,"data":"ybRoGFfiLP9gFIXMI16tPuDR2YyRrSoVP41pV90tgHwOm4b-X6qGTiyGiC08tr3vVVZRXc8XfCv9NdrPXz3lDlUgmCrNoQyWklQPu-gaISTpgHpYO6TK72FWOR-4a3CwFCgoUVS4-qZl23hB7x9TcfcpJVA20ciq_-_2rDEVqHtzGH3NgmSyfl1QuDbE6_qsj8ULstU5qLguNqnzZcAXFaJdLeJLzoAdCmfhcFlaRldUacAN8bAQSKVDZoXYOLi-J1H4mTeoizTeFvrAj02upCsI9sv27aasBy0JXJ2jq4aAxVVUqVFvCbqVqPPv7GLVbKbIpAjTkLwKnCokEH9BWSHe2xQfqqr70MtGYgt2z0sc-3R58a7DyZPiUFfqTTRy07q7K44Jtdr4khdTXzoDMVR3RUzxfe2TaXM2E82MFz3moR8wsAEh8EAXA23Nw9iuWazt2YNYhxIFEne1JNHawD_vE7R6cLPqwZ5ltMuSApgJXIE2vniDPUvwB-nQebcCW_Q8Xn0-191poE_edjPYN22sS6cgvJ7-f39QosMUbt6EWd5uVsom-HmxIo_nfE3WXUjZcHmRkja8u_QVrgpDblg5z_4sZTwQvCeC5-7v8gGiknPqjxdYZ4Ctimc4Hrwt3UXBIX8CnxjXTXxMvr0GD8BFTyrsXVV7YrJL9IC4aQN_96-nNqdfBl-Rp1AMt3rxpEOU_gcRtxNZHIuvKzz95mEZNoSn9gkNT-wOF34B_lR2INJ4isFiKOzC7ewUoeat9LfngPEQVyKbS5XAMLC8fdfkACK5v91-Ga5g43JpD6osUKKPlXJiojIYLTF2PVuqzGECUbtRcBOE9ICu-XO_SgkXzFbAizg6oJ5-JvzG0ao_hhBhcB8mKRJi2Q_ebEHAaYZRz48im5Wg9frdbMlOSkHwrIEHkHHhFYZ4WFbdOXVRNW1WfNF5cTe5VaQV0KneI4kmwFmgLWo6ZDLu69v2hHhFj-9dch6c3HeiWUEnN-eKsrxdHBX0RMXroMptocbUNj8QqlHhTCEJCeXa9GmqqSSk94HLocYWqIIIScwe-6Ogo5zL-j1XSuJOMm50waADbaBQTWM0uwy_sLq_vs3rwsIcQJl2KUEn2PIgBAs2SeEOAo9Rj9BXyEW6ANrq3quW2pdBlULAioSiQziiZihJmWwLXe8cwy9tsN1RMft3zE5h-Xz_W7bp_aKmIOvwZVr8JDIf3lcy0WOzuIs0s5V4c1mxCLz5qzifh0NrtqqIJuCX095sIqL57yJjUKqJAXeNT8GmK7j7_Cxs-btSfJQ9cjZ6hISRs-bi6mHJit9kAUC46Fy9R7VlnzBqzAE2lPKIc0ygeyUenAMx0jtjyKILF-6H8wUmeX4RfdbzJ4PTKWd3Xoi-IsKAwnMQe67pe2mlMxI_B3kOlDM9eHB7Gvvr3mxosBMquDwGdTBbahov2BBxadcfSQheoYzMXHJm-gaglgNcBAQTGHNIxSDORU7F7DWNUnkDcH_ZBaBG4ywglIioDwxC6mLl2xLl9XlfgNGw1Wn7w9QOiXb2Yyl0wT9UAO132kqcsVmA3_225Y0RdfechzL5OyAVhPfE85-3XuziAG41XBM8zoHN9fVnMQ8ssy9UccoYDeBJ1LuLuTFysAcc2dnNroC7kKSZY-g2KKL1K-IJS1YdKdxc8KNo9p-dk34aAmiZ4vSlsJ8l9Af9e2Vd0IxWtf7aJNTL8BphHN821iMdi15IXpKV83ksh9GlppsWdICAZ762adD_VjPGMVvdlSBk5ck0Dqyh8zK8YidhMI-2UR5uyFVUdo3vJ-YRXLW8B6bLhzRQZtemEqpTmazDJhIXxXwUmSk9jBTNfSkXkgO5rs7_F6aBwVeN7elvBHfc0jotp8KFGyS-dMG6JEPZx0w_9re3mXyWBgCNTkG48aVOmWUAlL5ibQrJXkPx2Dm9YfnoVh5DGCc_vFsoFHNywXv0oQ_SyA6ZlPBCAUvMPjx2qJsKINRdGTdKofNTqrt6cBLYbF6yyba7U1aEMDhM5G_qai3MsMeZpCo0azC3HN1m0w38TUUtTMqC81nGpd4KUn0fxIr1BZ4o_ymgAqWmn2P_FrMc6JUB-hFGYKA0Ec9lw7-d4vQNm1Pycuoz8VQXeRwYlsYYcRDJITJR3nnhoUhigUb4y0XEef1hXtraUHMfeurYWbsK_ugW4qoZ-JFcCWabSEQHQIxRX2f3UCaVj-aM8ETzqHpaeuQ-mZX4s8x7xgw58ne6IgmvwrGO62e9Y-7l4tAXClAmGAnO-RFBqO8DHaLrFJh-h4jWrFlI4CbYBF5Fhs2XAQJbPSemAm7iDajY7wK8GDeSJBQJTU64YfBZXDH9OMtJpdkRD0r5ktLJ6VQrw9DzL6J4knAIEvfTp7bxdSH5UlSMd6QlAHHGxMIK0Nw5-iS1rHGwVIfkcbhX1pN6-Z54_e5_gtk2F9xkdJP8oo1xzF6h_WQ0Fy7rZ9EcpAqxn7PAr3oEzj0rWSy9sizxpdWX6Gs9D4b7apYJ4LQ17dV1d3YpC-2xY2u8BsBZMqbth-V7TE5CCr_rpRSkn58aRnvPRy9VT9sjaKEDo2KrWD0S0rbDC6vhBHSLsNTZu2DGPQ_mu9abYwsQkYdsyI1AdVU3tJb52shP11P3DGodYC-9YrtPYW_eMZyisTdcr6z3JeCqWAlhjhWweb-Z8rk92CNUAFx0MLFygLnzTS4QTnI7DEwihYkXJoVPaMQ-0S69imlr1t91U2zKE025Syyzv4zzpO2OK9A0hWTUbGXPMLWPUAe11hXTeAqR1bBCJyaLFrvK87GDVqNk98nYK071-TYMmsUvGdXooB2w9qxPmYb5m_vpDsUOr2SS_jkIaia5-MN77_QSKI5z00qSft15Fb-rMCz5hsoUyrVKS1DQygML9-AD7aQOcjyJqXZPdMXIK5nDeTxK8UcSL80fqxQ_CZqrarGepOHbxdNZFJngduoGuyH7448Fk4e7SnkHqaNtTvI1aVI"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4ZLnkjMgtcWGDMpZEKBMb%2BJDoNmzGTVimMpCIlAM5Pl0aQQCLq7K0xunyGa2JS9%2FKBCq9b6C29U%2BIWpyrJ3iY7DMrUlwL37biw1xAoP%2Fa5Afs3SHS7cvN9hRWg9E1yVG9%2Ftpkq1aRyyhOSpeaNXTCAG5uXkhqppoBkS\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:02 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ecbbffab50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":788,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-13T02:21:26.515353Z","times_seen":24362,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/chunk.48.l5zpzweg.js","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.007Z","timestamp":1791852179007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /chunk.48.l5zpzweg.js HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-42b7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3879\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmLz4RmWlRIVFl2hNenBherV4pRkhqRC1wMHZ5Uyogj%2B6dlqz4lfeKtLBsPYXWCOBfZgepk1bl9LWlBujmZs8lHHDyupFLGsv22s%2BbeLWQJ%2BppUy0SRj9A5j%2BXkfluyoEOckgeVr\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a49a4eb6c92556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17079,"size_decoded":7938,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8594)","md5":"c8a016af718a07aee6197e9a70064430","sha1":"61528febd3ef96fdeb48980d6e58a70ed2de9975","sha256":"6dccac5674c471018b74914483ab9378d7022e1d5040fcfee70f5c0f9d89b467","sha512":"0f9d8566b3df48810ef19cbec72529e5daba37c72ed89ba049841289f107737c8439b78f535b307bbb6e27e0ece009a988c87fda16989e7eab40bef339c37c38","ssdeep":"384:DTgrrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:AvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"22721af87365206a03633532607f9102d177eb118d5b9050a2e28a957decf6be677fc8","first_seen":"2026-09-27T02:44:53.599511Z","last_seen":"2026-10-13T00:43:32.1658Z","times_seen":20,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.190Z","timestamp":1791852180190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"6cAqIqa_ieNlvrQHB7FDu3x8UXsgtfxl1XG39dix7hOGB6Docv-PtfNevP3GL5nnwFSmxs957mJX4tkLgXFOvkrjCPoAbvMDVqC6mJDDnQ"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j99wXuXlgZtdIaKYiF1l4DdBJKpH7LsLG6l%2BOd2HB9%2FlnW1H%2BCFjIqqKXrzPf8Fwn%2BHyqlEMm7cuC0y7dLefVNTanqKxvB0%2B%2F%2BH3USIoQLMxrjiE75BSOO93%2BDIDPkZ7kKgoKzj%2BIp09xPMFC9KaQtenx6EE2Wv6HbkG\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ebe2e8db50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528504,"size_decoded":158901,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-13T00:43:32.166496Z","times_seen":431,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/css/styles.css","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.003Z","timestamp":1791852179003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-4237\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3879\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o356pwpjt6NGf6zEbdat6Li9MrkyPPmYEO0Z1tkqjV%2FShcgGAtjLWNxVbKn35DBm5uGY0gi2drh%2F5QX8Rgkk%2FPTdtQrTn4kssICz6DmdMRyFoVNY7cP2VoG%2F1VOyX32T4SjxRX9d\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a49a4eb6c92256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16951,"size_decoded":5205,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63de2ad0e907943733cb065c46d66091","sha1":"a9baf1a256b0bf637793499c7fd04aa625b4cc60","sha256":"b7b8e2b91db3d213d5fa06a38ae7999223f8087fdb53c8952ea907e2e3de57ad","sha512":"955554240e9064e1006c3dcda8d834085af2a494a0d2135b8ac7d886aa7f8090d30f0165713d6570915652f3bbc5fc15652b84dfcbc4b70474bc3f88217ca07a","ssdeep":"192:lzu4/dldXwaA+AoSs5tpa4yASQL+tT60a2LnjHnSRyr6KS7g0lU:xF7dJRSQL+C2nrpn","tlshash":"35725599d72a9166b733efb4b7865f5fb29454224e0203797fe0100caac15be52a1fcc","first_seen":"2026-10-12T03:07:59.655034Z","last_seen":"2026-10-13T00:43:32.167366Z","times_seen":11,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.621Z","timestamp":1791852179621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 04:48:43 GMT","end":"Sat, 09 Jan 2027 05:48:40 GMT"},"fingerprint":{"sha1":"0F:16:47:99:F7:A7:A2:93:13:F7:FB:03:71:F4:FD:A0:E0:57:E4:C1","sha256":"4D:46:23:C6:50:2A:C2:23:FA:6B:F7:62:14:F8:ED:04:76:38:0F:8F:3B:69:32:FE:C5:93:5B:C5:36:B0:13:54"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: a676be40d599282c5d1ae0b8405903df\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a49a4ebb7ea85687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":817,"mime_type":"application/json","magic":"JSON text data","md5":"da3ff47e55a6d0fec2ee11e7e46ae6c7","sha1":"6d3bc7a2a079b50b4eba0b4434d585bdcb3eee95","sha256":"acbb917a737bc42f47f2b565ec547eeed2a82e689ff5683f391df93f435bbf8b","sha512":"e44ddfacdf8bac7f9e2a18e95a93c473fde0c2f6fad87b1bc18c581f798e77802f361ee6c8d44bdea83dd0e8455800befa282c9648d0879765b8b4a429c4f52d","ssdeep":"","tlshash":"ebf0cdec5c11fa54f4859c42de54b84040827dfd7be6cd584d2cb72638761915f449cf","first_seen":"2026-10-12T23:34:37.137019Z","last_seen":"2026-10-13T00:43:32.168068Z","times_seen":15,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.623Z","timestamp":1791852179623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"POST /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvXBVN3vS8xmEBGOdgEznFYYiV4Boq1I6f7s89INKDv7tpMfCVudp81yM%2Bgp1CUSHMguUieRfA6AVPqGwqljFWpQGhhiGHT9gOtdUwlG4sXmG2r8uHc4jgVn\"}]}\r\ncf-ray: a49a4ebbbc7a23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":841,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b310481112587c3811e64e20c683fe74","sha1":"0329c63a4cfc71c9047600712ce036c4d2635d88","sha256":"7b51dd07dc7dd035862fd261469628ca6ff7d47df9c0f791b8ce1aa13a3169f5","sha512":"caa7f0703b3495ecbb946e05145ec76380350d4d964a435403153f5e958e634328b4426eb46974abcae9ce6fcdb2d98dd055c48ee224fc8b6110c9d31e231e49","ssdeep":"","tlshash":"edf0cdec5c11fa54f4859c42da54b84040827dfd7be6cd584d2cb72638761915f449cf","first_seen":"2026-10-12T23:34:37.128855Z","last_seen":"2026-10-13T00:43:32.168656Z","times_seen":15,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.627Z","timestamp":1791852179627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://take-papertrade.xyz\r\nvary: Accept-Encoding\r\nx-node-id: base_base-mainnet_ewr\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Va1gPns.iyOyoCBYS0aNdAPe7C8OWA72brrXWVi9ZUM-1791852179.648993-1.0.1.1-oq3FOQtg6wCqIelA5d_MmSjJGom639U9s8cjE1rjvSg_SW_tu4n9lUpcKRtQa373mBA7CkJkenkFXr9_e2tt7aiqzi7MjhRpXOzZAKrrvIwM7R9lKPfFYd3xfU7wyGJv; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Tue, 13 Oct 2026 01:12:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bEEZMh8iDDdYnk2X%2BsnsUw12DtYVBtLMQQEJFYXh2ahGxgIWhUonwXPpWeXtzFg7jVH38uHn9gqGGdZzLokgElGmCVZseRk562oVfP905VA98g6fWMk6oDEWtY8PgFrUAF0fDEqBLJrZAxIkwreCxU06YuZx86qGxipE8Ax\"}]}\r\nserver: cloudflare\r\ncf-ray: a49a4ebac82f569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Va1gPns.iyOyoCBYS0aNdAPe7C8OWA72brrXWVi9ZUM-1791852179.648993-1.0.1.1-oq3FOQtg6wCqIelA5d_MmSjJGom639U9s8cjE1rjvSg_SW_tu4n9lUpcKRtQa373mBA7CkJkenkFXr9_e2tt7aiqzi7MjhRpXOzZAKrrvIwM7R9lKPfFYd3xfU7wyGJv","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-13T01:12:59Z","raw_expires":"Tue, 13 Oct 2026 01:12:59 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Va1gPns.iyOyoCBYS0aNdAPe7C8OWA72brrXWVi9ZUM-1791852179.648993-1.0.1.1-oq3FOQtg6wCqIelA5d_MmSjJGom639U9s8cjE1rjvSg_SW_tu4n9lUpcKRtQa373mBA7CkJkenkFXr9_e2tt7aiqzi7MjhRpXOzZAKrrvIwM7R9lKPfFYd3xfU7wyGJv; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Tue, 13 Oct 2026 01:12:59 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1189,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":107,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.628Z","timestamp":1791852179628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a49a4ebac98a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.197Z","timestamp":1791852180197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"TNKLR9YvmY7Rkt_hmV5s_1q4QiLKTZdFIhm4aBHA4VEF4pTD04pJYYi_4srDrQBswkDFqRV5qxUqPP5_l1ldzfgeui1QjJyu-8DCk2I"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVh9RCPGEpaLjlefGQ34nAHfhqKq38JkNJEd2oiizydFMYrCP%2BzAFYliUAXNF%2B20rOZPtmc%2FYMlKPtGwg1OEI7Z4Z7Mccmw%2BFEzd%2FTYBhck8ob%2BUmlWT1n3qiLuMU%2BIl4DeEVnIu3RJrV1pTkVmuay8NvjnOUj4TimXm\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ebe3e8fb50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16807,"size_decoded":6084,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16807), with no line terminators","md5":"99daf44e14c7430acd6c41929f6d989f","sha1":"500f15295da3a22114a34fcf612662983e448033","sha256":"c6c72a6a71e5870d4d9a8aa95f640dd8aa289c547f09c9d794a7be9fd634d583","sha512":"2db5932fa1283dcfc60d1ad37e783c09efa495fa77611bde3d643882c03a6f7af1f9b1e085fbc310aea9b135d432ddb5829702f78f3132a33a7d19951fae8563","ssdeep":"384:48wvEBNsoJ3eYWIfSmmE/XUYc3IMb9wKyJox:48wvToJ3ekXUYcYMb9wtJ6","tlshash":"e672e7358310513c96a743d576ea925f81771041e34e30c6ebbb835c8ff0c66aebaba5","first_seen":"2026-10-11T10:07:29.450434Z","last_seen":"2026-10-13T00:43:32.170848Z","times_seen":22,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.616Z","timestamp":1791852179616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://take-papertrade.xyz\r\nvary: Accept-Encoding\r\nx-host-id: f1b546936d23e3b5-cbff48f9aa1b0f3a\r\nx-node-id: base_base-mainnet_ewr\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=RwBH3I2ZzCM75VxgwOQldJapKAYdjkmVAEPrTwQmvzs-1791852179.7635036-1.0.1.1-QHI0rbUFtvQsVUFCs4aCguaRA1OYA7QdXMw2KX5F23Lh9Zq2QsDNK1clJu1L3pNzUG7ineU.tVgnwrXhhcKun7c8itCJqwfy3Fa0Os4r5e17IL01flABIGdVuHA_aiS3; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Tue, 13 Oct 2026 01:12:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dUGhkJkZK2Qt%2B2ACLYJ30%2FqclpfKJrx33uvWS6eN0UYF0wAEbDRTvSkyEA6zFqHOJApPTQofICVS6lDmuINEaMoIby8pmhnMv%2FOlr%2BmCEMceobGSY8KGVVTRYeMUmD0%2B3HghvJ5n3bP8CpoNQm4G9ihiquNxcjcGCUXkSdC\"}]}\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49a4ebb886a569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"RwBH3I2ZzCM75VxgwOQldJapKAYdjkmVAEPrTwQmvzs-1791852179.7635036-1.0.1.1-QHI0rbUFtvQsVUFCs4aCguaRA1OYA7QdXMw2KX5F23Lh9Zq2QsDNK1clJu1L3pNzUG7ineU.tVgnwrXhhcKun7c8itCJqwfy3Fa0Os4r5e17IL01flABIGdVuHA_aiS3","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-13T01:12:59Z","raw_expires":"Tue, 13 Oct 2026 01:12:59 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=RwBH3I2ZzCM75VxgwOQldJapKAYdjkmVAEPrTwQmvzs-1791852179.7635036-1.0.1.1-QHI0rbUFtvQsVUFCs4aCguaRA1OYA7QdXMw2KX5F23Lh9Zq2QsDNK1clJu1L3pNzUG7ineU.tVgnwrXhhcKun7c8itCJqwfy3Fa0Os4r5e17IL01flABIGdVuHA_aiS3; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Tue, 13 Oct 2026 01:12:59 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":486,"size_decoded":1490,"mime_type":"application/json","magic":"JSON text data","md5":"b310481112587c3811e64e20c683fe74","sha1":"0329c63a4cfc71c9047600712ce036c4d2635d88","sha256":"7b51dd07dc7dd035862fd261469628ca6ff7d47df9c0f791b8ce1aa13a3169f5","sha512":"caa7f0703b3495ecbb946e05145ec76380350d4d964a435403153f5e958e634328b4426eb46974abcae9ce6fcdb2d98dd055c48ee224fc8b6110c9d31e231e49","ssdeep":"","tlshash":"edf0cdec5c11fa54f4859c42da54b84040827dfd7be6cd584d2cb72638761915f449cf","first_seen":"2026-10-12T23:34:37.128855Z","last_seen":"2026-10-13T00:43:32.168656Z","times_seen":15,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.629Z","timestamp":1791852179629,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.632Z","timestamp":1791852179632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSqA9pXQy4%2F1HCOt032Msylra4JnZdb8i9L%2BOM5O%2BZDL1xqXqBsRfEodz6OtPgKhQEHEE5hVZiZwpEmnQ9z8a3z7WCKZ4ito6WpZWU0KUqJh6G3jEoCo0nScrbnBDm1vN7M%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a49a4ebaec2e5695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":809,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":27,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.187Z","timestamp":1791852180187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"ShKKanFAK5WMoVkGz1Ij0RItn4-7-yPbUz1UKFtMO8igYkkxkpKv9axKKKSe2OMTa5BxS_CgUsO6IUqMGAZ6V9Tp6h0TVqvDC-gAeUk"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oGXL6uO%2BRyt01pfov7xf1Oflq9iIFOwgWgS%2Bs2ydoW8rPuJ05vAEbsfQL6lKzt6FFopSMIe8aWQDpssQkN3zwFXtd8XnvYW2%2BBZPDbDgXiJl6IoratkUE2E87VfP3RcISjlJm56SCko9eVphvz%2BfKkDlb1yI5%2FxRc0B%2F\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ebe2e8cb50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72557,"size_decoded":21978,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6889a33c2c6552ebc996ec77140f75e5","sha1":"664f0bf1ad0d648b44f664f71f7672521ffe9c9c","sha256":"903367acec640e6284a29684fc2f1eae088e6499ee9fadfb54ffbb23abe1b076","sha512":"b647090dfb1d08102b9ea6b4d7103422dcdc86f6a94e506c88eea0d74361f5cb401900085cec8385e0f9e7c4e8090bcee7dae202f060195c28e8a428cd4ad308","ssdeep":"1536:dLALBh1OvHvpl++AIzIJw57fI7w4nbQ9xHqztqZTcS5HoJ:lHTQ04bQ9xHqztGT95HoJ","tlshash":"a9636e305344723e110395e39b89034b393e334d7da1628e66bec11c95eaddeb1f69ba","first_seen":"2026-10-11T02:13:09.554341Z","last_seen":"2026-10-13T00:43:32.171548Z","times_seen":24,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/js/main.js","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.005Z","timestamp":1791852179005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-6d7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3879\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FW46jUlBHzX8mXO2PQKk7BSpwR3AtNk89MloG6zWdTHnahpZZnc%2BqDv8CPAjdTCfX51%2FTWAZHufC1%2FvTN3d2x1g7Hn6TFse4IaqbQHRkcOG57vFmQmfYMQPNM7M5g6uPCgUVRUpW\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a49a4eb6c92456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":1726,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"16c91917012e8eb0576f81400ca8529c","sha1":"4b001f2d9cba76446c6c8c216398236177bb1d56","sha256":"8f286c62c9e469e4c653f5e8a37366cc55007e3305086ed41a1aabbc1f91f792","sha512":"d2d256bac15e0de4a7ec2ffb4aaa4df8bf6fcdf1e84677ca9fb9457247dde5b458aac520ca3c29ae20f90f96f5866e23284c656951f7f4abb1592b58d14d7dbb","ssdeep":"","tlshash":"9f31de6fb44928b699bb737f861ee208fe7604232901c7123cacc4b01f74c551a6aedd","first_seen":"2026-10-12T03:07:59.628785Z","last_seen":"2026-10-13T00:43:32.17226Z","times_seen":11,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/jetbrains-mono-400.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.114Z","timestamp":1791852179114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/jetbrains-mono-400.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-52b0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3FKIdILKopwkzP8GpO%2BTkuPknMLABSFByVbWTrLWKH2eFnMxBhNDnHV2OVb8lPymUVDygmlEQPDuysSi6C19i%2BET7L4WI1VgZNn%2BmRcFfb4muk8EQn4r1gbA56m%2FSXuAYKQVk1r\"}]}\r\ncf-ray: a49a4eb7793a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21168,"size_decoded":22109,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21168, version 1.0","md5":"caf0dfde4e448468f09b7bed230206a4","sha1":"3ae621518210e658f2cec928e0c3aede6d0cefe2","sha256":"14425ba9c695763c1547f48a206b7aa60350a33ae23de09f0407877f3fcd89eb","sha512":"901b535ef03d223622abf9f8fb4af14bf80bf474c139229d4a0e50fb6f988569c3ffb2933c107a456052925b102325987d06ceaeee24db628de7598088305757","ssdeep":"384:2r0vIFlaUmbfLh0/QbqqSfF9KpME3dUJ3hPrJvn/86C4KJYHtSuOBFoXqfEeUu:AsIFlaBfVsQLSfFYaw4KJYN/Ov4KEeZ","tlshash":"c292d08f03ee3734f94036f0283bfcc283e95a321ae79236e09c7d455d5595264a6a47","first_seen":"2024-12-28T16:03:38.26782Z","last_seen":"2026-10-13T01:59:24.935421Z","times_seen":1953,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/inter-700.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.126Z","timestamp":1791852179126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/inter-700.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-5f20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6f%2BU3MZmH0GhlFbbaMm0DWm86S8qUV9rfiLrW3i9QR02KqUlm5bfWiRavr7ORUbuRmrTUQ4ElSJaUA25V2Ox1pz5%2FX03a%2FWU2s3lP8MZ5BHR2nh4WTC1p5%2BXwWcDlEl7CfF5nQfn\"}]}\r\ncf-ray: a49a4eb7894056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24352\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24352,"size_decoded":25293,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24352, version 1.0","md5":"3714175d15f37e385c0d80f1c8f4fb42","sha1":"51e26e670e609c5940946aa0e750529a86648f5a","sha256":"aac638f7503cebb084ec494cf00f75f7d8260d50c2f4e7820bccabba09626a3a","sha512":"2330466d763875da4362098860689b77192eaaf805b06b6af90c9bfe9fd9c4ba0b39fff32b20809f773defce1cb2beb00972bc66dcfc395690c08d7004def865","ssdeep":"384:ho14eajAfZxGlbbY6d7ftVKsMaPNSCPWE/8q+kDgQWazNpm2F3g6iqL8xzqiKfv1:muJcfZxGFU6d7f79M8NjP/8q+kXzNpmi","tlshash":"36b2d0aaf6248f8fd61242fd16459df335418db98e2bb45284c2f85d3f4a03a64f05bb","first_seen":"2024-08-07T12:34:04Z","last_seen":"2026-10-13T00:43:32.180004Z","times_seen":3463,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.789Z","timestamp":1791852179789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 127\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"8P5v-niw3SfJSFQhpbcTCQbww89qJe3DfFyKz32fqWsDineEWpucYj4dEJV7eQeK6VXyHMbDhfWu1h8eRBzBLK5424jYwkQcCDdoqquB7IkAN3yIjJLB4R23sipvm_c"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqJfpUu%2BBkMmzxLoSPQr4lcmEi1c9KshPcTs6vjYYUGNFoswkg35dQBLl3KHmcX1%2FRcQAmHIyqctPUoRweZBuQgalGl6OgFaZGgCuTv4an9UjBE5MfcYJ6X3NnQFRckUPi8nMDfUwbJuO4t2d6mgsoE0nWx0BQDdyioe\"}]}\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ebbddf8b50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291207,"size_decoded":73420,"mime_type":"application/json","magic":"JSON text data","md5":"00d2e451854f8944f5d4441a354e2101","sha1":"6602895e827ed77766201d2d0a9737b35159d3d9","sha256":"12a3ba045da3f4618c8cf1a6dad0ae7201b080b1ed3117df368d0e6798042330","sha512":"329b8bffe1c1bdf2002af200d3ff6deb0c7c49e045e2918cd6e0254a988f22b0a0145a29c83c15bb29b2f908d450db559ad1a5eb02409af3078ed4f788897e41","ssdeep":"3072:7FocmGIfEWf8pDzErM/eiRyF3CGuLXxxfP+E9ppcpQmUMpG7:6cmGw8pEI/eiRyF3CLP+E9pECx","tlshash":"7154c8d52cc7e784ceca2e9d965fc806c1150e254b8a6d93a94fd9b433eebe081c711b","first_seen":"2026-10-12T03:07:59.694813Z","last_seen":"2026-10-13T00:43:32.181489Z","times_seen":6,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":7,"connect":16,"send":0,"wait":186,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.198Z","timestamp":1791852180198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"zLy9tidmSrBiANJRytJnUmv54X0ohf9gU4dfT22Wp-Sxw7ZkuGabKIVs_yDT55ccQVpMcduMHELCV7AhVrVfIREN7pTcJW61evsfP58P"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pf9hpLaHbdaciea9Kg%2FobVuU%2BWaa%2F3ZmwuFtmfNQF06aC3Mk%2FpxPmlFLckpLO4VBiHbVxBh8aDqM5r5nSHu2r96eRQGPK9%2BkqjnImkZQo4cWOWExid3Ncu5846bVuBdnbZrEUWIz%2Bcv41erGax%2BnIN5T2bSKsJU%2FM%2F1\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ebe3e91b50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3440,"size_decoded":2228,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3440), with no line terminators","md5":"b42a8df8912c677c0367df03cc4c4de5","sha1":"4517fc7f81fa4bd2c841b6e3799743427c499e1e","sha256":"ad757ce72a7c54dccd0991575ec817a29a4cd5bac297552969d997afc1462088","sha512":"30e66c64dd36a82c94ca09b91a2458c06085541380076cb144eeb3181c44efaf5ca01f74a9fb480b34c60ed12de14f36244c728c9ee32ed49a678ac3584f45a5","ssdeep":"","tlshash":"e461500fe3b51a7c22c58970303f565c992c68597911c854753bd8f1ab38e8628beff8","first_seen":"2026-10-11T02:13:09.59146Z","last_seen":"2026-10-13T00:43:32.18227Z","times_seen":31,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.309Z","timestamp":1791852180309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Oct 2026 22:43:09 GMT","end":"Wed, 06 Jan 2027 23:42:56 GMT"},"fingerprint":{"sha1":"7A:AB:E2:A8:B0:3E:E4:04:B7:F9:F1:FB:B9:9E:6A:24:51:8D:1E:0B","sha256":"01:3D:38:F4:4C:0E:DD:F8:28:D9:A1:3D:3A:96:8F:33:76:CD:6D:4E:1E:2B:73:2A:D0:1E:FD:E6:E8:86:C0:9B"}}},"request":{"raw":"GET /getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: a49a4ebf081a56c5-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 19165\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 13 Oct 2026 12:43:00 GMT\r\nlast-modified: Mon, 12 Oct 2026 19:23:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20376,"size_decoded":5474,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c01db5dfee3f863f4d14cd8a6067bbc","sha1":"f3b2050d63b872da1cf778078d91e98f06265858","sha256":"30a77bb0f6c954a8edc69bb8dea580debee574b39d3dfd09656361075f0e1afc","sha512":"c79d82ce5672d44426d9aadc7a16337a35aa3f2937fd971f48c9c782478351715d25456e52bd5706f528ec2392bfd345621a1346f7751f6aea15b7931e6ecc4b","ssdeep":"384:qJu9vMUwOkd77rzdoVWIMCtm9jGdU95wiDCDtl7:ucvVuNo9i2R5","tlshash":"d792229e47d09d96de70c788e7adf9ef947ee003c2cd189aa5b1497440fd8a3320169e","first_seen":"2026-09-21T14:26:22.574Z","last_seen":"2026-10-13T00:43:32.183133Z","times_seen":346,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T00:42:58.351Z","timestamp":1791852178351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fbn3PQT1aHE3XF9s%2BavNZTs8swe0CwBYo7I%2FQyWRZIxVFDGC%2FGBYMiTluVwbneHupB4a2hM%2B%2FeSNQ82I8jhyh%2BYRvNI4QJorS1SL61Z%2FjVQRKVQ4rNqgeaPa3DAaORNWHYGB0XnL\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49a4eb2d8ef56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15034,"size_decoded":4717,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a74b2f865f8e417c16548597d040904a","sha1":"051344cbafb5cc6f6ce393cf972cb76240f854e8","sha256":"6c790a56adf20f2f545c8d603c121a2c2efc9742b02014717192886bddf82a32","sha512":"7cbb512d082b386184cd47e2c4f0e22946eebc24350ff2155697c771bff3421af24a89c00620681e16044dd3d93a9760669de330fa4bc959218f4e60db0b8476","ssdeep":"192:kkGVkwYPk9TiNKEo9Knpmi85S3eWcLehj/H1/eyBuZcS8pYj6p93:kNUk9+YwpmV5RWZtUOuZcSMT3","tlshash":"b26266b261d651222173c4c6aaaa5b9bfdd5c61bca0b460036edcbd71ffbd02ed63050","first_seen":"2026-10-12T03:07:59.687034Z","last_seen":"2026-10-13T00:43:32.183925Z","times_seen":11,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":7,"connect":18,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/jetbrains-mono-500.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.117Z","timestamp":1791852179117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/jetbrains-mono-500.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-5548\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGNLXJ0gGmip7PZB5a68%2Bub4YzifFm7FIkoJSCRjI9hZyyU5zRz%2B8f2piMtD0EX3eg1ShsnrnvCTk97otiJisLgET15R9K%2BfMMBz6kaN%2FDt6HhEXuwc07%2FIU%2BlLmoMyg%2F0ctaJcd\"}]}\r\ncf-ray: a49a4eb7793b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21832,"size_decoded":22779,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21832, version 1.0","md5":"a21e038a03f709cf60aa1e2944048aef","sha1":"35c2a72b759f5a19834ff0ddd7f94a9cbe557860","sha256":"cb182feeed4d798ff6961d3c79f7026279448fca0676438aaecb21f3fc39553a","sha512":"1bc050df652621ba5577ed422d62e772b36bb2176b37adc3465830eda2c7f4634fd1e8d051285ece7fed0789b72694bcf5e7e908725add53319db3393e33f76a","ssdeep":"384:FkrCJN/+9XC0hl2yCY22vnuykoPbcmlHy3qhXo4JD8S0UcotKuKY2RZD5Si:FkrCmSE8yCYnvujpBoX2SFcqK1Y2nJ","tlshash":"41a2e11b33449687ca1e0933bea7f3d556b9904ee7f135c969a313e11e063b0c502aed","first_seen":"2025-06-08T14:57:17.920295Z","last_seen":"2026-10-13T00:54:49.085527Z","times_seen":2035,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/inter-900.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.123Z","timestamp":1791852179123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/inter-900.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-5dc8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoCrxcWlY%2BOasfVA4b9nWJ2zr3eUZyi5GqPPlx2Bsn98ghXHBnqnYECQYZGJBIKHWopVsDZGt1cvy8BXJTK2PLRcUZ6TZ72NHfmxdTPy3BrlUBMa8WSgWMfIlxHZkwTfqoWyO%2Byw\"}]}\r\ncf-ray: a49a4eb7893e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24008,"size_decoded":24945,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24008, version 1.0","md5":"65e78c85115b153573f095000a2d81ab","sha1":"30e5b4632c66d6bb93f947f50e782624f3053c34","sha256":"08a195a0cb54f0aa04e00d7a57f175d8cad0923b62f99268d7279b4e982cb3e8","sha512":"6195a342e59f71af22a3c03c557875c7986ade0efa0f8a4d250eee30721029dca077932b8e16df2bda8e0662a00bbff5df70ee5e370ee966418b5eeb3ab9e2ab","ssdeep":"384:dDmyXnT2IxPweW6Z1TmTqyDScwqPBpd7va7H6zYTCBFIiczqw3JiF6RUj:dDmyj2IrW6Z1mTqyRvPZa7xT+dw3JNRw","tlshash":"d6b2e118c8be97c59af2d47166c45d33960f8dc2cb43f9e65409b135abc230b161576b","first_seen":"2024-08-13T22:55:12Z","last_seen":"2026-10-13T00:43:32.185409Z","times_seen":103,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.618Z","timestamp":1791852179618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 7\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a49a4ebb49ac5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":487,"size_decoded":725,"mime_type":"application/json","magic":"JSON text data","md5":"ecc6b720aa7ef66d805ae61a1e9248e5","sha1":"ad2283125fa6bb36c92fbef59232750a9793502d","sha256":"859ba05c6e24764c8e7599da676d8c2c587e88227efaa3de2e1eecd09ac5ec0e","sha512":"bf22a0912106094f0306faddad1aaa9d6fbc515be31c95d1249e00d3139bb5fdd382835afc4c6efcc9dd6eff8bc68a4056c176958629e1988415dfdfd052844b","ssdeep":"","tlshash":"4df0cdec5c11fa54f4859c42da54b8404082bdfd7be6cd584d2cb72638761915f449cf","first_seen":"2026-10-12T23:34:54.984376Z","last_seen":"2026-10-13T00:43:32.186004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.625Z","timestamp":1791852179625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ycO4w2dmmtgQ9pt6Sa6GXvvqPwCTsUNFN9XSzRjkHV0Fgn03MwyvKWnu7UHw7ZNVqt16sXQf7uk%2Bs008PvWZrDyJNbWFWMLX52LeWaOBtUoQdS6cSXC7m6aHZaxCyOpFRc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a49a4ebb1c425695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":710,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-10-13T00:43:32.186548Z","times_seen":880,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"172.66.146.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.630Z","timestamp":1791852179630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 04:48:43 GMT","end":"Sat, 09 Jan 2027 05:48:40 GMT"},"fingerprint":{"sha1":"0F:16:47:99:F7:A7:A2:93:13:F7:FB:03:71:F4:FD:A0:E0:57:E4:C1","sha256":"4D:46:23:C6:50:2A:C2:23:FA:6B:F7:62:14:F8:ED:04:76:38:0F:8F:3B:69:32:FE:C5:93:5B:C5:36:B0:13:54"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://take-papertrade.xyz\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a49a4ebacea05687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.631Z","timestamp":1791852179631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://take-papertrade.xyz/\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8F71p9P3us4a5fPOZT9OMI8dppaSg5ALL5JFwjmvRbEJI8OowYOC3KgYXMrNYiMFIB1yBuN5DsAo8kIzkqx%2FuD7v8vke%2FyOC2PSewFfCUOKe4uch0PK85U1\"}]}\r\ncf-ray: a49a4ebadc6323eb-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":751,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T02:30:36.778018Z","times_seen":19069494,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/inter-400.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.119Z","timestamp":1791852179119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/inter-400.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-5c8c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RyvIJKZya0km960d%2FltZkflUmo6WC9%2BoYmZEZH9OYz2Z8e3MSFEgKBXZ%2FS0rIjqzVXyGH2WRNnNqV6CsatH7ls29gEvVtuZ8CuP%2FIKmrRY8GpjR0%2FyqzlxGjmd%2FQEBE%2FQpkYA5I\"}]}\r\ncf-ray: a49a4eb7793c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23692\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23692,"size_decoded":24639,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23692, version 1.0","md5":"f837d382a885a07c34a3d4bf4f49373d","sha1":"68ddceef1d164a48d9d01d4a74f26b7897323229","sha256":"dd05e326cf8eac3b55acecf29c842ed73e6e6dd06491cf47f7e8800680ab3e33","sha512":"ef010d89971c4f69af7bf541430364c56245a5b63ed730fe628e49f48fa9e201c7f42b1e104eb14c3193bf79dd7ce20244f6b963e9996eb8308c0d61f444ece6","ssdeep":"384:rfabeuzsqm+MAlOitodpHq9WS5TO+cig4RKuIc7OhiVaCcHKLgFT1GS:rfEeuzM+MFSoHqgS5TOjr+QTUVPuSQ5X","tlshash":"85b2e177a100a48ec93cc9ec53b1ea7b736f7941f02e5fad41fa50361c7e580a19a0a6","first_seen":"2024-08-02T10:23:33Z","last_seen":"2026-10-13T00:43:32.187142Z","times_seen":9222,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/inter-800.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.121Z","timestamp":1791852179121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/inter-800.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-5fbc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jp6B%2F83U5KqATerkiUwZgcqe%2Fk8PkpvngmSoKsGgNyQT3TkzwV9MTpfN%2FXHUeLsAXF8A%2FaUh0kDusFNVBbWnAH7ptpReIzBv8EM3XSe8qm36SLnxi97%2BBPFlA1Cy5xwXtQFD%2F8YG\"}]}\r\ncf-ray: a49a4eb7793d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24508,"size_decoded":25453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24508, version 1.0","md5":"1b59c7d14ad0cab41b9a4cac5482ff1c","sha1":"135b864e7aa4672a3a76c94397aa509812fa8e14","sha256":"e4a6db93190ce6c09e9871496bc63a2b7a59838435e8ec23996afd9619bc3883","sha512":"f4374e44b3fe097ff9165653e527b67887ac27f45dff809ee1eee6f56cc71b21aab82a0cdc3d481491129ebcff82e197b3a654fc8ce46afda877a080d8a7f8bf","ssdeep":"384:JBrKq852ECZL1cDguaVHkwQUhRXXI+J/UuB36yt5xLko0RZnwr4fOMybBebnNqI5:rOq85aKMB1MUjJXtPXmZwkfO7bByNr5","tlshash":"28b2e1a9435f3721ed0cb032b67e76d717c1608673c310d7a1e654a5ab7ad6da80b036","first_seen":"2024-08-17T01:31:10Z","last_seen":"2026-10-13T00:43:32.187695Z","times_seen":2484,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/assets/fonts/jetbrains-mono-600.woff2","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.124Z","timestamp":1791852179124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /assets/fonts/jetbrains-mono-600.woff2 HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-5564\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3878\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uySQidSsEKme4%2FGiCZfplxNI2aDG34VIuKSi2YnnqBsjopNCUowYtvfU94Qmg9GhKTQgDjuEieU%2B8Lx6T3tPIklr3HVz9B2XZldowfmKD0mXYdLt2LIa8ImX3P0nu9E0GK7NjkQy\"}]}\r\ncf-ray: a49a4eb7893f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21860,"size_decoded":22797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21860, version 1.0","md5":"075ec35bc15ba900f57dc181425eb889","sha1":"081a377d6aebfe077524d85cbcc9a0f5a0bc5f4d","sha256":"400c6bfda18d5d14acad1c15d6dcb9f8e13c015e7286317e0b9a482539bef147","sha512":"572710cdbd2179de881ba51a8a8521783869eadebaf00d0c242060e1d4c53bdef546448d313c8eab3347ad50da32e3c3ce3765494ab1b744264a9b61eb488629","ssdeep":"384:CggH9tLztAUckzvWjsRj3xqUdTx65ZxXJ2lrmLrc8zNk/Eb5/cJdpmRj+gU9Ov2p:O9tLyF0vCsxjzwZn4+lRk/q5/cJvmRjG","tlshash":"1fa2c0a584326223c0cdfcbb197d7dcac60e9a0eb79b06115bc965517c1bcbd3e1ca84","first_seen":"2025-05-29T18:19:56.381017Z","last_seen":"2026-10-13T00:43:32.188268Z","times_seen":397,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.194Z","timestamp":1791852180194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"gtajDz9_mWKA0MT6dkBcLwACLNOBCNIUAtgQKQjHJfU8-wUMDWVeMhzh5zC5vpazOtZhDROj6D7rprIaUkJ3TYMdIG-E33Plnf_Yb3pQ"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvqPooxZGERG7WHLxrbAbuA4Co4XCCEAfrOToMHNPmilqusxm9wkbtEjclEhl1fdkubhe3DGWcOxiYVzaAQtUUHhs%2FCpnjfx6bYR37G4Vh0FwDoCy68Ss16f7O8dnNSj6jXTuQuEPP%2By2yENwKuE0uOXln%2FBuorUftCs\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ebe3e8eb50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17150,"size_decoded":6887,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17150), with no line terminators","md5":"0c5ffa7fe80e597db44879e8cd618093","sha1":"727ca6fd5787db650aa1052516d7e3ed41f7b456","sha256":"46d2f66e4dcaf533c54c995fb3f9e45aa8966242bea5f1ae3928cdd84dfb8226","sha512":"00a7e8c2831a855f7d88fdefc52618da8bdc0b9cc8ff817defe1f7e2d97aa886a12da7e52c4aa7b458f078e978c5526117bff6e3964896c6e03cd368aeb2839e","ssdeep":"384:xJsAMROmBNlV+EMekGyvl0BEuPeQRRybEhtMlye:XsAxmBfV+lCBEuP/xMlye","tlshash":"c572534d6541183083a3411c13ef3a59a277fc919aaf263cb1c08ad376eea6f52d7dd4","first_seen":"2026-10-11T02:13:09.527092Z","last_seen":"2026-10-13T00:43:32.188918Z","times_seen":31,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-7067748c.stevepoyet.workers.dev/","fqdn":"app-7067748c.stevepoyet.workers.dev","domain":"stevepoyet.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.56.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:43:00.577Z","timestamp":1791852180577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stevepoyet.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 00:49:26 GMT","end":"Wed, 09 Dec 2026 01:49:08 GMT"},"fingerprint":{"sha1":"0D:CC:9C:32:66:FC:A6:60:EA:09:2E:17:84:75:7F:F7:41:68:2B:96","sha256":"BD:B3:08:4F:01:92:99:D3:93:0F:67:D5:52:A3:F0:DF:73:34:C8:A9:6F:17:1F:BE:14:D6:A4:E5:DE:A7:37:6A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: app-7067748c.stevepoyet.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://take-papertrade.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 746\r\nOrigin: https://take-papertrade.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":746,"data":"2PJGs9nACNqFS1MT$67a6!YwCtx32WQbFVYgjWxpy%FN3Q4UvJVTqzm$W^@PNr\u00263VNeWdHx!AkmJdCRN#TufHrjn%2g3HnJRhU7rSvJu\u0026!%J15@uX@6SBR4nb99Wb7SFWCL31AePb@bQHqD4^DrzWQ7Uv4JqPcZ295U5BhYrLfGMyYQbutqMuL750NSSne#SSFB#P5N9G!P^Bf#0PS#4eQp9KeNuu58uk7LFeZ3bWxvaudLEtV@Q1#NDk5MnE2a^3Z0$xNT#cQqLYhZcfL$R7qwLY3kn01PBHFJ9x2bTGjzPcERTf4s6eCDLYyL!pLBN9knG1jfSYceaT2En6^3jB0SAf2cXP\u0026Ru!Q\u0026NmHEXVc%jKt\u0026TCk6xXDbKHwzV@!HXvtav\u00266\u0026rNqHeTXWwvs1vqzh#uCHWq1GdT4e^42v@X2D3Agqk4M#yw39DaAjYM9%k5v6\u0026!Eb6mVKA@tzgR8Nm#Tn3vTZAxF#bE5KeLg7KaC%bDf@Ne8ApPBmhkamF$uKy9p^zt9SY2tSpX3y1Y!fMTchXUfd2@p7325T0BM$vYa5^y0Z2bzken$d7NAjBYhcry8qja9!3Cp5hH9WmsYSZ#HWmrsxbHQp$FSfxqxd#jXw#Bu71nzAF5VX\u0026B4f5GEVqzKNbkS@Nn8hKTpNKeR7tn%huvvyuFazcjLt15CDs^q5MJ20fVK9qAeW4%KBF5ce\u002658Hw#Ts1ZMKLfcxFmp4YxshsNaR#mjm%$fz3MT#y#A"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BRKlcqp0WjXyvnJv6ReAnphoN0NG1n90MOQtJuXfaghWePpm93QqPn1M4WJm7d9sFI96LrXw8f5e%2BaqmXex%2BGVxUH4zoQSXMUnETsv1%2BK2muW5Hg%2B2eJwn6aO4b5EQWceIVM6orgY%2FoUubvMsZZjLWc88eP9ZkC%2F3Gx\"}]}\r\ndate: Tue, 13 Oct 2026 00:43:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a49a4ec09eb7b50b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":878,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2b364a520b236ccb674b57207c812527","sha1":"74b366dc50e8079b2782cdf9ca5d6617462b1625","sha256":"1699825a382cb79b4e4f63e7cdeaa43156511d7d25ef8e4f943902113c3724da","sha512":"49702c0a599adf7629d672cc587a017388e287bf3ea0bb2adff30b5f64e7221272539adb9b56ee1dfc26fd2ec042c9f14432a8ebb3a047c9a101ba1a752a30a5","ssdeep":"","tlshash":"73b0128c803d600822521c7504512811463594ca40548c03d89c424c0c2d7824a286e3","first_seen":"2026-10-13T00:43:32.189443Z","last_seen":"2026-10-13T00:43:32.189443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take-papertrade.xyz/css/fonts.css","fqdn":"take-papertrade.xyz","domain":"take-papertrade.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://take-papertrade.xyz/","date":"2026-10-13T00:42:59.001Z","timestamp":1791852179001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take-papertrade.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Oct 2026 21:38:42 GMT","end":"Sat, 09 Jan 2027 21:38:41 GMT"},"fingerprint":{"sha1":"B7:CA:C8:27:15:FE:84:B8:57:42:A7:64:B3:CA:C4:06:D2:21:77:36","sha256":"DF:EA:CB:7A:4E:16:E8:18:DF:1B:7A:87:E9:4B:1F:83:78:A0:0F:5A:7C:CE:B1:AA:52:63:F0:7A:B8:7D:63:C3"}}},"request":{"raw":"GET /css/fonts.css HTTP/1.1\r\nHost: take-papertrade.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://take-papertrade.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 00:42:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 01 Jan 2000 00:00:00 GMT\r\netag: \"386d4380-d30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3879\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYzBFWFKSdR%2Fr81LHwgnegPxn4I983hPb2o1aIXyeTnu6w622UQ74InZhl%2F53JHwYCNGYsuLZItGylp1AiXCMvyeKO4WjyZl3DeQd1mFZhsSRu22CdaZFlIrGygDbsTunme4nzwU\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a49a4eb6b91e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3376,"size_decoded":1410,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"446f3c0cfbd244485944051a739e0244","sha1":"dbe394907fd0427801af8dc5d4635c0386540235","sha256":"d6332e470723136a320d43d271c37f012c1486f4d2c80c2f4161e24636f20f62","sha512":"cd9400f2fd9dedb934cd2998f9a46a6737b126ce71489928995eccf1cd1a0556bf278f1117df0c38d4f9e08f44aa737a2f048c8abd566db9ddcd30dd4466597e","ssdeep":"","tlshash":"6c614a10441b7600c6b31cc6378a7f227d1d22a67145a634bbf900acbedbd748366f2d","first_seen":"2026-10-12T03:07:59.691213Z","last_seen":"2026-10-13T00:43:32.191129Z","times_seen":11,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-12","alert":"Sinkholed","trigger":"take-papertrade.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}