{"report_id":"cad0e0d5-ce26-4299-b1d2-8857a0b587a8","version":0,"status":"done","tags":[],"date":"2026-10-07T08:18:21Z","url":{"schema":"http","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"title":"Mantle | Institutional Infrastructure for Real-World Assets","dom":{"size":138086,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6005)","md5":"8b346aabfa516e1558ede45d1c7fcdfa","sha1":"fe5628a343c8bffd919ac27254c3abebaa1c0d16","sha256":"a5aea727c85e3222ed4629ebdbc884a47d9a1af6acb8e9101d4bc2c1e5b86329","sha512":"665f9a38d3311c64f5331dcca01d6475de7109bd1158bed5c1415cc7698241c76d5f9049d9d653c3ee0f2417e19c7c373f094a1558960b78f4717b9d4b09620a","ssdeep":"1536:H0HYpEM3+S/Xt70dlO2/3XfUYoxflOaWcK0sXzpfCr2rVr2rCr2rVbfrVr2rVbfg:H0HEEM3FOVoRSUH652","tlshash":"86d3c56051e1223b2207c3e8f970ef16aea9a617ca1f8918b3fc21973fc5d95c92355c","dom_hash":"domhashd6df20c8496d0eb73f1e3bc629dbeed4","first_seen":"2026-10-07T08:18:37.516896Z","last_seen":"2026-10-07T08:18:37.516896Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T08:18:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"rpc.ankr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-10-05T17:10:00.051896Z","alert_count":0,"request_count":1,"received_data":20834,"sent_data":1316,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"104.20.46.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-10-06T14:34:08.477959Z","alert_count":0,"request_count":2,"received_data":1552,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay-9427b68d.paul-maze.workers.dev","ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T08:05:22.044821Z","last_seen":"2026-10-07T08:05:22.044821Z","alert_count":0,"request_count":8,"received_data":968392,"sent_data":4327,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3470079,"first_seen":"2024-06-07T05:17:26Z","last_seen":"2026-10-06T11:19:25.197859Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-10-04T07:35:13.58453Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.mantle.xyz","ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-02-21","domain_rank":0,"first_seen":"2015-07-24T13:00:00Z","last_seen":"2026-10-06T14:34:08.856618Z","alert_count":0,"request_count":2,"received_data":68604,"sent_data":1213,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-10-05T20:23:58.256827Z","alert_count":0,"request_count":1,"received_data":1058,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2817504,"first_seen":"2023-07-30T16:39:25Z","last_seen":"2026-10-03T19:36:15.28593Z","alert_count":0,"request_count":2,"received_data":1533,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1rpc.io","ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-10-02T11:31:53.841541Z","alert_count":2,"request_count":2,"received_data":1899,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"allocation-mantle.cfd","ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-06","domain_rank":0,"first_seen":"2026-10-07T08:17:57.821668Z","last_seen":"2026-10-07T08:17:57.821668Z","alert_count":77,"request_count":77,"received_data":1231105,"sent_data":40127,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allocation-mantle.cfd/3fffbc9b-ea8a-429b-abcc-fd7aa8b356f0","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"246634a474a9dc1a180ac8b98c5e554e","sha1":"4c376c1d424427d7a3f69785f889f86fe47e7b27","sha256":"82d2fa3fef0c8ea14f3a31ea7f6207d351544b5becfc84e645300cb76a8a363b","sha512":"5552ecf2e4b52f7b3fed9b7d63c9c409881ff9a67c6af5ee4fb70a9092c6206cb7fa151d5f5935baa94c6a2e2dd0412a9805420be8736aa7025d6c601be9bf23","ssdeep":"","tlshash":"8801f41d8fec5babc28f0256825e3f5d065c117733297f21d3aacd2000e55d1251291b","size":673,"data":"","first_seen":"2026-10-03T20:04:04.283984Z","last_seen":"2026-10-11T12:33:12.0915Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bed96558c46d7e6396c5a1483fe6603","sha1":"d1937d202cf2698867bfe5181d527479e53938f6","sha256":"79cfcc300a793a1d3da6f525a45e27dc9298ed82757c0dac8c038ce79e8680f9","sha512":"e05297bb57bb5d665fd70e1c72dbee8fc83f7a3128fe528b9f5621ceb9d0ecfc5bddfc03eaca99c4657e0d553f40e1d5dcc99a091ccb9664e12d7751e9ed9784","ssdeep":"","tlshash":"8d60000000c30030cc3c000030c3000c003c0c333c03f0300300030c000c3000c00000","size":14,"data":"","first_seen":"2026-10-07T03:41:39.925242Z","last_seen":"2026-10-10T14:22:55.108431Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/991c93e1-2293-4adf-bb05-08b8c213d6c5","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","size":3269,"data":"","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-10T14:22:55.099119Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/b65385de-8b47-4004-a990-d1e6e77b4a0b","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","size":70200,"data":"","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-10T14:22:55.094653Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/chunk.42.28748q25.js","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0eafc2bda81241b5da3694f08b52b89","sha1":"193eb0fdc40f0d45f4a63bc846dd6e10d09acb6e","sha256":"f68d6d8ce951a55c900e2f0b10726c1a1ef97f7074536ef9641f8214b1a74159","sha512":"3a598b9297a859036d51c8a4662e6d8c67c7f69682cd9ee6a26519e7f4efbe02cb2f33b72342b8e9d406c4699cacf42d08a49c9a99d90df41040d1b421a76201","ssdeep":"384:D9grrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:CvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"717219f87665206a03633532207f9102e177eb118d5b9050a2e28a917decf6be677fc8","size":17079,"data":"","first_seen":"2026-10-03T20:04:04.24929Z","last_seen":"2026-10-11T12:33:27.709577Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/f1a13703-e1a0-41c3-b214-77b9c5eb3552","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d217dac8e1dcd370e6cf6a68cec2c5e8","sha1":"34ef5162b0169512de5789f5f55b82e42d2b6121","sha256":"538e151d0af9f15b69b8cf836907e1148f2b960d5c51d2167b5fadb2e4f67bce","sha512":"098befe84b361e5da12e87a34b505ff9f06d703854472561589b5ff18e1bfcdc43f6ed73306f38aa4ee4085a06c4bbc12853d1b630b4d8939c62c73d3f7d581d","ssdeep":"3072:8WH6HIuLo0G1i1qS+jhB35xHD7pLRtg1xumIakppl:rHi14jhBzd9tg1cLakpX","tlshash":"b664a194184791d0ce4711bde4afd448f0783b638b9da1f6a43feeb0b16cb6045e71aa","size":310677,"data":"","first_seen":"2026-10-07T08:05:27.648932Z","last_seen":"2026-10-07T12:36:00.962725Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-11T19:41:42.722481Z","times_seen":859816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/ce63511e-05f6-4b27-b85e-de58177c198d","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","size":30003,"data":"","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-10T14:22:55.095779Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/71086226-9c2c-4e63-93b7-730080576b23","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","size":16644,"data":"","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-10T14:22:55.091737Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/c335e065-7a43-48f3-b09f-9e75a82a7341","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","size":528504,"data":"","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-11T12:33:27.722481Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4f8c03c9a7c606b5813bcfe5434e7cf","sha1":"81ceefcdfa11fb8a73e2caf0c5210de926cf06aa","sha256":"b4b3a22fe17b0f6fd76afab56c180d98cc628173832dbb4bc1c1f258f3dfe285","sha512":"39e560b6daf154192f7139f01cc081954d2f6cb222d0129774b30be0352006aae2e8330afcd2bb85f0683031c130992ad698c1303a0f41f27b8f38c4945eda27","ssdeep":"","tlshash":"3771cc3beb00173bdc8fa9fdcfd5b4c02e62497262496960691ce102b16cd7487bed88","size":3737,"data":"","first_seen":"2026-08-31T08:11:04.014068Z","last_seen":"2026-10-07T17:51:44.872723Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"allocation-mantle.cfd/fireblocks.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.824Z","timestamp":1791361068824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /fireblocks.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vRpk%2B7nKEuYb8xbquwnDjqQv7juRlQYs8b0NC0eUkZjuGJ17CrhpbNhnCgL5tMywac3bKvz0xOtL7mT6jiodbZO9iXFnFkPKeMUao9%2B5yeYMOYenExdJreh4gwQO44vJHjVhIxKi8Y%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-19bc\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b82ce45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6588,"size_decoded":3234,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"765b79867886da566ecbccdab39208ff","sha1":"1b32020a844c099b24adf86ff5c9307c2580925a","sha256":"74163f5f2c107dc5ce87888cbc8d7c907ee8562b281632e8aad0557b83b25835","sha512":"e78375ee4ea1bce118888bc1515a20989f7e61919a6a102e7da56fec68925e990f7fb0ee140645758b552363e23638e5ffa00583a260c02822e0221a7653532d","ssdeep":"192:XBDP5PMCPGZBhiWmA82bIct0aArF9USQfeI6oE:XZP5PLAH21wDtBAZN4eHX","tlshash":"f9d177e4678951e0d047d3e1dd281079bf2b30f6abd687e4c7e46e053d868ee8d589c0","first_seen":"2026-10-06T14:34:19.104189Z","last_seen":"2026-10-07T08:34:03.434424Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/usdy.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.831Z","timestamp":1791361068831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /usdy.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1eed\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo1fS%2B11P3ZeNoFlTHrsJNg8%2FDmGo2tahinW74Sv8trWaeoOn7CAut9uJcer6JOfjFHTRIrgfA7KZtJ%2BwfrviYeEyJouDzZbiSCwgMBRHBeGdRIGKzoPGr4drnwbvc%2FX4fgYGky%2B8oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83ced5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7917\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7917,"size_decoded":8625,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"d8169bf263180325c93480fab1d214e1","sha1":"89f17e7cc3475660147361558c89ffecf2e066ba","sha256":"5e00824888bb2a955d63cd505dd60d5902b2eac422888daaa4be0ab0f695d272","sha512":"0ee00335f707eea7e1322cbf9f01cc674927c546e8f975c02db817ded413db298e41b94f947b27a92461902c1b87eba20fde4188f874dabeff89719b16516884","ssdeep":"192:6pypftdGsTbIs3ryg9pC02s0/Dos5XPF8Uvd5:6kptdLIt42s07yUX","tlshash":"76f1a08dbcdf69128fe4d163bd4f2858fba772c79944d1b3b4990a27c4ad3d42185242","first_seen":"2026-10-06T14:34:19.070924Z","last_seen":"2026-10-07T08:34:03.3936Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mantle.xyz/_next/static/media/ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB","fqdn":"www.mantle.xyz","domain":"mantle.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.383Z","timestamp":1791361069383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mantle.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 09:04:47 GMT","end":"Fri, 20 Nov 2026 09:04:46 GMT"},"fingerprint":{"sha1":"61:B8:4C:5A:DA:C8:86:07:78:7A:6B:86:14:3E:DF:5B:BB:16:B7:B3","sha256":"54:B3:AA:71:C8:73:11:75:C8:DA:3C:C5:1E:70:11:8D:6F:3F:7A:C6:94:D0:1B:E2:CB:61:A1:AE:96:A3:B3:2E"}}},"request":{"raw":"GET /_next/static/media/ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB HTTP/1.1\r\nHost: www.mantle.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 518564\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\netag: \"d01c5edac889df2cb7834866199aa490\"\r\nlast-modified: Thu, 01 Oct 2026 08:15:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/ABCMonumentGrotesk_Regular-s.p.091v31ezp7ufb.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bvktq-1791361069434-029a328d2bbb\r\ncontent-length: 32396\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32396,"size_decoded":33037,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32396, version 2.6619","md5":"d01c5edac889df2cb7834866199aa490","sha1":"1d1bf018ea9f16654b1d1977f5e1f94d80372cfa","sha256":"9a7a4464066d44c3ea10def07b409054d3f8a83dc6a2458014f82dede2b94096","sha512":"855087da19df4763c24d55942dbf9fd36a9a9d74e55e75025308c1020482ade1852ba8e68fb4038dec6c0be1c7d5c1c8a0005075490c0451651a05bd93bf9831","ssdeep":"768:ruiIIjuVRD3vMVO+QnShh98xlV22uR9zuBJto7R27:rH1u/vvnShX8xlcl/zIG27","tlshash":"65e2f1b46a5f4260e390c8fb8703261aec2da05ce0f8f79095ce531b6dd258a0d7b774","first_seen":"2026-01-27T10:51:38.454557Z","last_seen":"2026-10-07T08:34:03.429815Z","times_seen":11,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":22,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.972Z","timestamp":1791361069972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:50 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: a46b78bf6f7049c5-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 9503\r\ncache-control: public, max-age=43200\r\nexpires: Wed, 07 Oct 2026 20:17:50 GMT\r\nlast-modified: Wed, 07 Oct 2026 05:39:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20376,"size_decoded":5507,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c01db5dfee3f863f4d14cd8a6067bbc","sha1":"f3b2050d63b872da1cf778078d91e98f06265858","sha256":"30a77bb0f6c954a8edc69bb8dea580debee574b39d3dfd09656361075f0e1afc","sha512":"c79d82ce5672d44426d9aadc7a16337a35aa3f2937fd971f48c9c782478351715d25456e52bd5706f528ec2392bfd345621a1346f7751f6aea15b7931e6ecc4b","ssdeep":"384:qJu9vMUwOkd77rzdoVWIMCtm9jGdU95wiDCDtl7:ucvVuNo9i2R5","tlshash":"d792229e47d09d96de70c788e7adf9ef947ee003c2cd189aa5b1497440fd8a3320169e","first_seen":"2026-09-21T14:26:22.574Z","last_seen":"2026-10-11T12:33:27.805661Z","times_seen":327,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-23.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.869Z","timestamp":1791361068869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-23.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1f9b\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1OjS5lh8m0EuW9czn8C%2F0ZBDelQOxIOgvtFalJI7hUMZtfAN7Aft7KvtQpJCVCgaRtAm%2Bhioovu25%2FCZstfipROYGjlO%2BBH3wkAbaLiTXNSr%2BmcSkEcI4zbyXcvS6jLO4GCZhDR%2FR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d0f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8091\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8091,"size_decoded":8801,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"7d52fb45177d3974c3bbb30680bce676","sha1":"23cf3c114d9160b034ee9ff5ba014d9425cc3666","sha256":"b4b3df1ca3164ebd84fe0724cf043129b6691d10e8a69a80282bbece714fd984","sha512":"5cae126be0a1bfeb00b3c7452a16bc78a811e6967505244f189354fbc8e10653d99066ad17068321c1dad92e151f8ade9ea8c12d0deb07cc956e447d14172390","ssdeep":"192:fXpGWiRBXRkCXPIIfL6eDQsg4xSQj8chrHK7XKl8BPUe69uNEJ4Cojf:fX8WiR5m6QAQUxfpjK7JsgNy4Cob","tlshash":"74f1bfeefc9bdaefb4e1d9c86096c54927256c2fc1824c6c4c2468707e10eae5d83567","first_seen":"2026-10-06T14:34:19.132969Z","last_seen":"2026-10-07T08:34:03.400975Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/world-liberty-financial.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.807Z","timestamp":1791361068807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /world-liberty-financial.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwCgDXZ1BOgfXa4XwmY88icxfyTvGubYbTBc1c90JK7VFIsZsXQf%2FyvYPIiEgb6xMu7eX2SivW%2BBQ2Cov3ZBcuaaAsibF9VeC4w2dYVg4f%2Bk4GjeSGxS1CY6E4ehz%2Bwurv8nF8YShJw%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-4200\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b80cd55693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16896,"size_decoded":7346,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ab82e41ea2d0182254e3954bacf87cd","sha1":"04c26bdfedfafe205ffca86a94aaffa14ab57452","sha256":"d978215bead13da8cb2157bc7e07fd63e73955ab5b3bfcdac08d434587d434bd","sha512":"17a5a2e62bbe73ec2c741e3c0a4fcac9cbf6a2fa4cad748507e851a04618f176c659307610518664ce3c453b29256a2fa38753354ab3b1bc7f10ba076c020a51","ssdeep":"384:x9yXb/LfvMkspqNkqiUI8OD1/P2i5Jnc0kgJE0kV8MFXDb9:x0DnEqNk5UI8ODj5ygi0kVdFv9","tlshash":"3772a5eaabe496f08c49dbd6fd224269ba1724ff5b59cf08c35cdf683805469c488cc0","first_seen":"2026-10-06T14:34:18.994457Z","last_seen":"2026-10-07T08:34:03.407409Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/ethena.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.810Z","timestamp":1791361068810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /ethena.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuhsFNVNCrqgxSEFgrae4cAKbChA%2F0ilf0CBvGZwKejZbpl7GMXPazZrYPgOLczTKxQLKbD0FGSFiUBwhwhD72v%2FYpB1b8mf95UGJixCWCRXu5R3L0Fa6fhA3m34dznIk79Y4opme0c%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-aa5\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b81cd85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2725,"size_decoded":1893,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e5101e7ef2d3329897bfdcea112aa0f","sha1":"e21e973be04058c17f6f4576119553d0cc51503a","sha256":"2f8399598e6271c12f49d694bafc090c982e5a6bba7aaf42541aa5612a484412","sha512":"1de7375a364d3892d1a301db85f5e65c5fbba17ef1c4b0a3c5f97afe1e668d5f75f6a87d1d27938b88389fad2d8f8aec519f50c3d12ba9c8601cae59d9d1a986","ssdeep":"","tlshash":"4c5174e552f473e4da02fbb0443ae5b1795f38bfa36dc3a84185bd04f55a0887d48c98","first_seen":"2026-10-06T14:34:19.041689Z","last_seen":"2026-10-07T08:34:03.453059Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/ondo.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.812Z","timestamp":1791361068812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /ondo.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrgK5fFJjbAnY5nwvyN1SXjC3eMUUnVFeDxyzIfCs7I6WhKwmaTlR1xU3q5btB1QxYxb54xn3TOMbH%2BwgrbU4QMYoKderi7D%2Bf5yzY%2B8LT8ZBQujVS3oTP00TtcDASkdvmgu0f0bN2I%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-da3\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b81cda5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3491,"size_decoded":2082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fd6ebf0077a15af71ab4a172c908326","sha1":"c88b95fc590fa059eafeec60565130b22d19639c","sha256":"29ff9f76101c4a38e360071403bcabd4b45e150fae6498233162664573a57ba5","sha512":"06a56fdd8f2bb83652a1d91d6754795d45bbffd4c1c23fd59ce17c5e8f47c2ffcbd75e2c2313ee123a92e40652e03e56b39832c72efc065bed655b17b387f7ea","ssdeep":"","tlshash":"b97101f233d8f8ecf509e7a08822f966765630fe27248956c3806e58e50605d998edb8","first_seen":"2026-10-06T14:34:19.011228Z","last_seen":"2026-10-07T08:34:03.390414Z","times_seen":9,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/franklin-templeton.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.813Z","timestamp":1791361068813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /franklin-templeton.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-6686\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hVuvJtUpvANCpIYkh0CePbGsjBE2C8DPt581cWUiKck87rtXVfZJtKQzQCJNJtJUezD9GLO99qhsBKOIGbDrxq%2BxJ%2Fsd%2BjcXr1cXbZOJ12RFr%2BHmYmU7Oa8SkHDPS7jkPzzkJQtkiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b81cdb5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26246,"size_decoded":26953,"mime_type":"image/png","magic":"PNG image data, 479 x 94, 8-bit/color RGBA, non-interlaced","md5":"9e0082448d0bbe750695e7b627896354","sha1":"9d3ccabc86eed3662990840ec926738b60759b1d","sha256":"0d72cae52edafd0cdbb516a35b5f6e007efb81355a29800e90b3d3b6c4ff67d4","sha512":"5721c9d824be797b58f20db1a4d95c5bf81dabd59cb5061f48625f2b738758b416e305dd43c305aae6a3697522c9635ed8b29ea0a73ef9988ae81e31b5ba2eed","ssdeep":"768:GOqgWnwV8LSMI/pQt0p8zF1T26A7ZXld1EH3+Ph407vM:GOqgkwaL7I/pQt0py7E1EuP207M","tlshash":"96c2e18b85f30c456a3a2394138daa178a63721639ed7a9ef35831d074c65357ea6b01","first_seen":"2026-10-06T14:34:19.067765Z","last_seen":"2026-10-07T08:34:03.362242Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/chainlink.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.816Z","timestamp":1791361068816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /chainlink.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPdzJLZYSUpQC74kyhGfdw3EDbY%2FXJA701UrWVFCq3PZXhCGLfR05Fz%2F7K8mS6AcsDHhzo%2FcDHxN%2BR16mHEUdaWyjHTjppVcV1NOqPrALq6MMYoACyFZ1sOHFFsb9VzBmoNslLntJYM%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-1823\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b81cde5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6179,"size_decoded":3366,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"516321bb1617d9b8f5d2b3a92642e990","sha1":"f6351edbc10a24fb837ff9e27b2143f2bdd66ad3","sha256":"e3fe5876a2352e8f7131a11c99dbe8b456334411e930e920b82647be90a65f00","sha512":"4fc2f53ba326fc20c14ed8b7cb051391ffb30c4752586304d892fbaf2137e8ede3cbd3490e35857fcb88b83dd03061ea90a60e1069528b8fb51a5def174e1af4","ssdeep":"96:3QlM1wSYKKQKiy2D23AADOoZMb8L1x7ok/SDi77ZWivYMaML:g2wSYfIyh3AGOb8Lvl/SD8rvYM/L","tlshash":"9dd142cd3f7489c1c988878bff1150a8761ba8fa99894b20c24c9f5e74c586dde49ad1","first_seen":"2026-10-06T14:34:19.088832Z","last_seen":"2026-10-07T08:34:03.408754Z","times_seen":9,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/usde.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.837Z","timestamp":1791361068837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /usde.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1fc9\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RT6iWnn60hrB5ucoWZaVEJYOpO33iiCc%2BVu%2F1WjL%2B39dFbNjUUarFYY7NRqg47fPQ73AKW5886%2FbH%2Bs3%2B6H7Ojqi3UmxF%2BUn79DHLDym6M7NNBI5ZC6pPV%2FacAb%2BQrr8G0PBnNpBZUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cf25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8137,"size_decoded":8853,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"427089c35ae0b2c280ec3e79ca3aff1b","sha1":"60c253595c7a13e5a74fae0015b0391ec5629f7b","sha256":"efe2181c49b6290a63d321f05f1dd09e518ad27089cbeadf7b71cbdc902f4af6","sha512":"c76967476ad3a47b4ca32bcfda428dcea586399d91f4901e13067786c2e9fc87b9ad77d2005de72452cfd6a51ca079edd89fbb91b4296fbaad33c20fdf5dc81f","ssdeep":"192:adWUOLNqQcOjIYzjQNI6zj4J50LY8QQCP8fF7:CkkJsIYz0NTj250U8QvPoF7","tlshash":"1ff1afa0e202f775e664e3dc439bf2214b33380a5bec8f1a5625a712e7f84b01e1d261","first_seen":"2026-10-06T14:34:19.01257Z","last_seen":"2026-10-07T08:34:03.358705Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-15.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.860Z","timestamp":1791361068860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-15.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2454\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K67jwVf2ljv4HUcZPwiam4XnQUnHWwOgKKezfUu2t3Vg7Zep%2BkruDzgoBgUWTrCx27UEXHqi7fPZ%2BJV0ya7%2BZN8hn24F6Rem4vl7pn%2Fsnnv0O5EKrtmHruQ2iSubD4TKrDyx4Qma9DU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d065693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9300,"size_decoded":10006,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2a76ccf63ff16f643365eb26dec568fd","sha1":"23dde4d6e18dc2b13eb8e841f4cffe6a5ba89d28","sha256":"ecdf8347c00b6f97b08dd396bfe026af9045dc4994234858bc257e475fe579ba","sha512":"49502ddd20b16b682eba4da16550e3d183f5493bd9a4a875fb72b826a308f530369f91b747870cb1696cf2f0147b660e33c192dd513dfc48b20d35a629013b9c","ssdeep":"192:Xly8UJs8EC5Ax/oeb4d/4MVNJbbAYT55rBiKogxU21yE:XlTgH5CUWKvbAYDrIG","tlshash":"0612aec21b02669ca52c2a6a82d75b01c4fe195931f67ecd74942639e7acf1480e16f9","first_seen":"2026-10-06T14:34:19.075823Z","last_seen":"2026-10-07T08:34:03.382572Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-18.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.863Z","timestamp":1791361068863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-18.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1d77\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv7VjGk80aobZ7I6p9FM07%2BgPZSKtx3dI1Ob6yzmXJ6XFeVhg0JKUSF%2Fa9%2Ba9USHdPv8OhKAwcNtuknjnD%2FNcUdA56j4kmyRKrk%2FY5GA2j6SH2988VMMdNSzKm9y%2FW3UyQrwPpq5lhc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d095693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7543,"size_decoded":8253,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0bdec4682bcd6ee6fe613c3c390df38b","sha1":"316909f1ff1906b21941edf8be4bc1fad3ced501","sha256":"6eb811912d86cf3fafda632b436037d39c6e488ca509439a02b53f77f7fd3e15","sha512":"ff2e47e6048016ea7ee6e3429f0fe1b3a29988dc445016c635ecca38d0e0cfbc39e3504d69a1e73087b1d78904513ad85a26d26f2b00f7360ccdce7114df6414","ssdeep":"192:7Pe7WMGQJiu4nmLdxRYzogsww0vCOWVLMD52qA5:Y1gnEMcqarVs2t5","tlshash":"35f19fbfe8d8b4c8706246a8c6770f7cf5f1d91b51d156a00d943c278a476d08a7a239","first_seen":"2026-10-06T14:34:19.126652Z","last_seen":"2026-10-07T08:34:03.453862Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-28.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.876Z","timestamp":1791361068876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-28.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-224a\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SURWuFz3tj2rtMjg2M0KAGsnfkzLiKZDf0j3HZZTMzeK0uni6HgonxrAl6hlyRAqH7nOOcyKP%2FJwq12GKD5byj0%2B%2B4ZJ1TaDXsCTCTYCdyaeTrJkx3VKNgb7CF%2B2yqby1JfRqzx92A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b87d145693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8778,"size_decoded":9484,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c70d427e02d43e5521bcb527689e8896","sha1":"266d53141e60114ce9b05eb7d0caee15593d7845","sha256":"3ad23af27358b3ebe0fe80a75bef7017ff42ff747679ec649b62648e0159457e","sha512":"598f1ebdd3085b5844fbb1a60d4b9e470d6d8d31f666b82cec9be827ea4401594c0a5681d9ecae36ce187607fffe6594ee2e02390b7339213981ce84fc262004","ssdeep":"192:qKR4ag+Nq4Ki7+JJisHfdoUzR8fyPib6y2xeEnFSk:qK3g+Mi7+JJZG3KiH8eEnFP","tlshash":"a502bf620a88fc6d8b9b6c630e6900cbde8bc6f9593a0d19984da9019f45c4098cccff","first_seen":"2026-10-06T14:34:19.015735Z","last_seen":"2026-10-07T08:34:03.384558Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/20260818-173110.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.901Z","timestamp":1791361068901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /20260818-173110.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-43b3\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCEixdV2cT4xu2q7bdcw%2Bs4nfSVDlRnpKvo%2FaA8XL6U8aJHcLuq5zIcxjWKI24ifek3qUMCpzL0JeWm%2FUemsB25jOH3LzJl69xNpMBOqoitwVdzpcTOZaDvrUpZiGi%2BgHyl7H5eQyU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b8ad355693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17331\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17331,"size_decoded":18038,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"341e37e2b78bd66703947f68439d91ba","sha1":"781b6bb1c5338e1c0112325491f056cce8d53e07","sha256":"affc5ebad5fea7d5020c6f26d60b27810c3532a991d67fe9ad53a307c1cb4c73","sha512":"c737efe611aebb322c8d109bbe1426290cf075ea1fe21af3d5554954da41130df41a0544d8addbb9f57dae0a91562f55aea3c5199ed363978dcb408249f1d1d4","ssdeep":"384:Jv533qWAAMI0apHNnkkfuwKKKKKKKKKK81pLayS7SSY5wPnr89dJm:x531AA50apHNXLKKKKKKKKKK83+M75E","tlshash":"8d72be33a67ca1b25382f66b65f50ecbcd7756466127c291533923ec8f8943058ed9c3","first_seen":"2026-10-06T14:34:19.135003Z","last_seen":"2026-10-07T08:34:03.377878Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/mantle-radial.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.906Z","timestamp":1791361068906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /mantle-radial.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWUxa4PEPoyef0XioWXC48mB%2BdkVGTDVk03TRihYi4JrE%2BJBjYk7uctntq5tC2mFCVmcU2jeWz%2FWec3B3Vx3S5xphsQ%2B7vsGrQCOvk6d1cwuIX6u7o6aCFWUS%2BHB%2F%2BnBxqx79bQRa%2B0%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-4458\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b8ad3f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17496,"size_decoded":5490,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9ab27481b1a39165565a0126bb94383","sha1":"9f28dbeece458db9b00bc2200575edca13b75f5b","sha256":"4b0129edf3f9b27278c3e5613a84c7db9c5c31d28b19a6f0e01c76ad1cbfcc01","sha512":"d97ecbc4e7047d405fea6db921526d2b40b342c9fc88a62eed89a2ed6543cdf3bdde1550c95833c3f7b0de7c2bb5390fc6c6f3440b4e6f296ce8a289af9b4438","ssdeep":"192:UEREoMRWLmMtJxAw6dh1N7adc+MtoAX+evADIU5pyZJVKSYJ4scoORInwM5BUWQR:FH7Sxqy+evFUoaJ+OfOkF05","tlshash":"7e7213aff51a9c67fb94c3cced408424626751fb9985c2b1c190ef6f6428cd39e1e6a0","first_seen":"2026-10-06T14:34:19.102949Z","last_seen":"2026-10-07T08:34:03.438726Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.20.46.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.416Z","timestamp":1791361069416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://allocation-mantle.cfd\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a46b78bc0da85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":450,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T19:43:33.472137Z","times_seen":19036048,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":1,"connect":22,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/mnt.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.828Z","timestamp":1791361068828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /mnt.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-230d\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FsdE1h%2FvTK%2FNmjsFtIiPLUjjEwTYkmx3%2F7YODIbh1LFaA%2Bqybrg8bN%2BwzC%2BPSYLSp%2FTH5d3SSYwyxqiFvwUGBapcXZZy2eH%2FWI%2FurcLbg4d4Lhr6jKwbIsNxMaWdPVaoKlCta8pVeFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b82ce95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8973\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8973,"size_decoded":9691,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1a0fff84559986c0c80c51f4b8eb3778","sha1":"4ce25d64356cc0ac26eb72ada9c290d291538764","sha256":"1268b94748bb36267082e20f8bd7987d91553ba265b4bed7cade2bae6c919dba","sha512":"8324b0ab9513f4e93be0884ef514b6b3380db782ee6f437f993776cab0fcb87f775c1741020e611dbbc2f4f9299e29def1bca1211581ae6a4dce4d3926bfbbc2","ssdeep":"192:YThOiboejtRv9aJ7rS1QYfWvjDwxzX/Khd1bKOfXYqC9:5eHv9aNrWOvjDwVvKhd1WYIr","tlshash":"3202b0cc7b16bf4a0c3230d2337878222639518b55f675e501283ace93440512bfaeeb","first_seen":"2026-10-06T14:34:19.114988Z","last_seen":"2026-10-07T08:34:03.416079Z","times_seen":9,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-06.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.846Z","timestamp":1791361068846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-06.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1b52\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1T4u1Gq25BH0PHW66f6YVjI%2BRhEhCsXNpzfcYz5REeH3RLatKfxmJ8%2FkBlTSvbjrrqoN496BRGrs33lI5BkPkj384febLCis45Ysa2xu1cZJabIvzLedvLeZyQ%2Ffp7Gn1Hdu%2Fag9bX8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cfd5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6994,"size_decoded":7700,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"42af250b7c154533e87ac465ea42de46","sha1":"6f06237f4ccc4d3fd5feb91a748c1e067b4489c4","sha256":"eee3bde7b4cef80ddae736293fb6110b80dc7b24bcfcc091ab517c371cea93d2","sha512":"ffdae26f462c6378323682d3db6681cbb66d0e7aeecc1b24a63f9a1f03bd2bc53ac8c1e5ee55867056a95de85eecf5ed8bab4aecac67cdfcbe2d6b995a0de4c4","ssdeep":"192:NxJ5WuEU+V1TetRvyTKzL6f9Cciqb3JhHVzom6dPh:Nx7WuEUSCRAmyb3JhHVYX","tlshash":"29e19e4d08ec9af9537b0a3437e89ccfdd39ccd1a4349256398c4958a1618f4a2b5a99","first_seen":"2026-10-06T14:34:19.014045Z","last_seen":"2026-10-07T08:34:03.354565Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-24.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.870Z","timestamp":1791361068870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-24.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2317\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Trd2PVx%2Bi2jzwrMXx4L7TRn4o92XGNNtjdgdkjPtO2dGz7vud274JoLRV9uB218%2BoPgCNnZWNDTj%2F1Sfl1IPM%2FkklOHRjFelb8e7N46sBWopKahaPXXV%2BwZd5imqoqRQHNWeQEsHHUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b87d105693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8983\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8983,"size_decoded":9691,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"7aeb15494b5476fe60c594b917dbfe3c","sha1":"4bc2939c8add642495bd0253488c13d5ada5cda7","sha256":"2c3a21460fcea8fd8ae5dc129d3a6a1fa089a780fc65c797e1b64930d69805ba","sha512":"272a12061c2f2063207a849fe6473a865fd76c8c5319c2db9c02574e293be2c4931c87b1434b714f9fffa58376c642bbc23d4bc9fded23becfe96868ad66529c","ssdeep":"192:kMzWuKsPtlAL+dcWuldxm1oGjXWU2mMfoBgaQ9U29MtVj:YuKsPt+UclmjW3fXaiYbj","tlshash":"9b02a0d6ae735f7520c8b30982a8b2817940777c0a174d1c9c8f17668eb76a1fa19f12","first_seen":"2026-10-06T14:34:19.12247Z","last_seen":"2026-10-07T08:34:03.443682Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/rwa2.jpeg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.894Z","timestamp":1791361068894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /rwa2.jpeg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-8e5f\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gnAoT%2FlZKJA%2B12Dgmwt23bHj1vxf16owKJ0LB%2FL5ts2ilHgcASUVV2de%2BEQBIdK8UOMa94leq%2BpaJulOzynH7M4kCSQIa5dVU76P8aX9KMRDg7Cp5sVUNc%2Fn%2F8Ebx1NF6zVpCoBhTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b89d265693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36447,"size_decoded":37161,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"8d98d1017059a51c478aa337b74ef9b7","sha1":"46870f4a80259648c51995dce6811a04ba46639d","sha256":"0b4aa4e1a39833809ede7a45ee3a47428362e79282a20ae5e1a251d71b9a494e","sha512":"8aba659d477fbac28a1e4708c20e9f4f8787b2a89e879e44dfac267551e1e9ec7424f5de250b6858efd71520bac880f2d482202521df4db524cb9f2ebd3356b8","ssdeep":"768:QNeK/YFmJPbdtj+xP8o/uSwk2aENutN7Myt3juJmg:QNeKwFmhm2nD7v","tlshash":"60f2f18225840b4ac13e60794ccf0490d369c892f44b9b772a6e811dfb6e4f7f9994be","first_seen":"2026-10-06T14:34:19.110842Z","last_seen":"2026-10-07T08:34:03.444603Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.413Z","timestamp":1791361069413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 07 Oct 2026 08:17:55 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=6ulQGuEFjJ9eANjR0AlMM0jechy3GxoxRuf0xR02yIk-1791361075.8537831-1.0.1.1-3ximYRF4U7hL.qsLoeSWQVW4wWaN5iVKdEOed0m8b7kOuwvP3K9wYG7h0xSA_pN5JTJsIrABTjB5n.gu.4VeqY.oGai07315dlSz0WyZdyxy1Ii4Eer6wRRD1VpbnH.a; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 08:47:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtYICQlTQNIlWVoBpFRraF3kt2pJepzttvChh2q1wGun0KMpiSCJsqgh4V6ug8ndNIWUyEgQWPu4mPEoWGxrb1iwxrX9fAG%2FSgT0LmL0N93X7sm3uEQmsNUi%2FAxzIW%2Bu%2FEA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a46b78e41ca2b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"6ulQGuEFjJ9eANjR0AlMM0jechy3GxoxRuf0xR02yIk-1791361075.8537831-1.0.1.1-3ximYRF4U7hL.qsLoeSWQVW4wWaN5iVKdEOed0m8b7kOuwvP3K9wYG7h0xSA_pN5JTJsIrABTjB5n.gu.4VeqY.oGai07315dlSz0WyZdyxy1Ii4Eer6wRRD1VpbnH.a","quoted":false,"path":"/","domain":"base.org","expires":"2026-10-07T08:47:55Z","raw_expires":"Wed, 07 Oct 2026 08:47:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=6ulQGuEFjJ9eANjR0AlMM0jechy3GxoxRuf0xR02yIk-1791361075.8537831-1.0.1.1-3ximYRF4U7hL.qsLoeSWQVW4wWaN5iVKdEOed0m8b7kOuwvP3K9wYG7h0xSA_pN5JTJsIrABTjB5n.gu.4VeqY.oGai07315dlSz0WyZdyxy1Ii4Eer6wRRD1VpbnH.a; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Wed, 07 Oct 2026 08:47:55 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1058,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T19:43:33.472137Z","times_seen":19036048,"resource_available":true,"data":null}},"time_used":6541,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":107,"receive":0,"ssl":6429},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:52.263Z","timestamp":1791361072263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 3014\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3014,"data":"OJ2-qPMDDJGY5jiwmm-qPz-IfrnPIWK7jcr3Wzyl_PaIg9l9UWD0RlDAFvJ9hIup-HBz6diYaHMtClqg85aRboxd_uICZXghGeh-KGE6tad14MCQ2Vvo7ksNUGJBuHIddvONesodVw4osXAuM0zgEeRajfVL2V7MaxybJ3DWeoJjtAFwUUPw3elvgr5NrKzx-iuupiJtK-arXtbWMx5vk_onM3MUvRA5rnn3iDq3UsWwLCoysg16gs_bKnJtoXu6zwUn7cRbY7OosYbycMY36gERIWF-YsAwYM9ANZ3akXpmrzZz_3Rp39zb5luWpbg2PSi94c7hzFFhP7XjZ0yyfAkGNjYHgR7fgAcNfg9gaEwzaU6zXJ5oidMvSOOZMZqBjAANkwmAc8qBRGuTxwClGueBqSWUvaoRRXBy8MZosl5cGrzevNIWXg2Zfd8j7TBA3mww7obkvSH7f0sYCCMApZJpp0ZjOWakx_RFdABcKadLh-9hj2dj7o3jA0plzDzuGtLI592di-ooDblR1KllLhReuIgYg9QobGBWocI1AEderwKVC3hTIXhNDYY7gbE-qZhUX-9LYFVmcmEySi4JdwIOzPB2fmejrUqF1oEcXU6TFqnlotLJPV_7uytzUpkY8Prszt81r10BVDD1UqqhoibxCAGgogd025nLzgftJw7dOEI-FKlHpZQyAKJcs8tJWmPIWGT0AJfgFp9DOyx6l0MqRnUuIdck-TU58bYnR9GtWglsAr0hA74PcONDbq4R8rGadO0NTwrxWsXOY_eXKBAOjxBi2spGawmRt83_QLeDyxJA9Hezw1Cc4Yr-Ek40gchmFdCzyWf8D3DgJvmZj-h_2Avod4FXh_Vk-E3DyzCdZerCOa0jUaiJ7NWC2_MmbjeXp8_r3bfCOwhQ4AT32NktZ6kJOAXkJrq4RVZvj8zjNsCmMrXX2HUEDUk-LgXc3-xEjSSKntP7gmOMxKqlg7tAddBczKOsZtqX0Ve2ov31f1K7CrcGD2-gid1923BN7AnmSSg8lW6LNCm0s0wN6ATY8vxZQR-De8oh0SD2xD4fHzJBGhym3WOAbBFh6jV4sCeewqAhYAxSkEmNWvrpVKWAgfo8X8QYL-9DU_bCGqmS3uSr_0UyiMAiDFJnjHPnsIPbO5mP-9_RBTcAw7RucQ8CY6VQscoqtH6Gyb6uTqvf_I365upn8FcQAEWuqoXOKUuEMkaHZaB51UTcd34i8eU103Ml0Bpksq8odHIaYLbNaGIzHGjBf9eM42eE2gJ7-KDqq1UVQUnz6G6Knx4ZQFwO59S_jwP3N7-Fhi5gCxmA5rzUMCpa5CZEBcjYlDHxL8aT3Ov86FBA8UTKfhJR6kRrEUzfDjAVhMMriOy05Ne8rzqQgk6YVULvcwY6Fk7n2mp6J_fhCph2ouPEimGRXC6R5HqEQHvK8BN2TNKjxwqhq5jKItAl8FSTD3PF2gRoqvauDidfyWnfAyXr04lI23N2NJF28F1uXD1q8WhO9BEGMUo--3qMNpBLbDhuM2wZPBOvUKMgs4UZrP8p9eyfuk0fr90Fpfy96T2JjbCVGcMR78XnmVXkvcG6gxH0gePsrPpuYQCReHrh0htWXhBf_SEBGAo3BJT_HmSDA7XHPiEfIDYGc7xTo-NF5h_I5UbBPFdcprCXboAPj96BTZ5BMkd58vnM7f_KDKELhkaFBSdPDiPf8MCYSMQ23w6os7Tt6kMALEYgOqAjANAqOFpXQKgm0F_S4O_30LDdM34wIRjvAfgwTF4wZhUyYbBF5h2NK3ZeP6JBCKoL6eeqSREwwQoZAgBNOpl0YYxHe7ssG2wSGRFr2hB9bVhLY8_TYLS19RDu45vrswCpVP3CJB5q6xzUN660aBsjRPOAZd-2r8zldO_8jyDupG6YBXrNmo8x0As1zGrHDI3wAMF9N3xWDqJv9S_z9Meq0XKqDI5ZqPDc3zmKwOqIcwbOw0GTetVzdTOSXWw-_yVT92_-jcJW529AeOoDPGlt2Onim3IkgMeRur50cU0B-OiQ9RgYN2MSr2tP3j-kBl4Stw9Wow6ZjpTYreIJIiyCgWOfLhybPd31tP3BCIP9APp8rDExiGSDUnxt2eW-UWZBeWJRZgLmwbzRxFctvqbtnOVDo_AQoX6Iw9c-MdXui3FzMhNTSWGVqv6c2NOYWPx9OLVhPj-K36ZaNxpn-mAWtOg76BlfO6F0x1rqDUhuBcePnA7imSVOyMRE0GddI_VkwE3ifwcCgi9zSBcbK537rOSEAkzDsqdG9ysmhyCyttwn0a6r0tXKPIL0IzSQ55UA3VLo8DxzuxILPI7c1N7VjE1ooaZc37bDheGPSSV63-0CKRXw0m40BR-9oEJvW5xxRpZlWi2x7FMSxw1_DYrTb0KOU1yREK8PTwyy-jntXhAGeOvvacqS0dLgKAvTMxwyI_HGNDhdd2AuBfhABbTOW7Vdnxo6bIpZIvfCBKfvfQJ8RPBHoTmoRBu4SayQUYQPyKWm35orDwSkEVjilkYbBSuCZ9Q_ndMzYDbTJFXoFpF7isvKiWk4UQrQQwrIv8DfAhtzvbKui42Rs4mc9UdveGfrywmW2iAASbFi-YIbrm1Fg4FLoBzlycD4lSTq01S0HawDV8ua9uStowv82Fj6pdwVZxLCH59s2_AE4gBEXmqmmXI4RYzO5XHKULfmFl5uzBSxyDRmmnscfzVgm517tIy-VMyvZuVeQ8UJqGAbWqMgm-SfyEnSPD_-0-70x6-Km77CBi3MlKfLiYgk0nmbcw9SZtO52LZUnuX7yJ-baM1yZ6Zi4xgq_qyhqTQ6OO2R7uz-JnwPm83BM9RX11erJz96oenjWjxDKiOT8hB8e4IoLXyJKvdNXfaCoEZHllgXqxHnyUXszo1DF3D8x4898elJsFiNhVJ2aPgwzexXRmss__yygcc5zHNAcbnqrGFWN1AzKzdKTcq9yDwDRqGXb-ZG5PBcK1z7UlF-_Yr5ls_HdsSgkCzDWylU5Q"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFfdvdkPOOzirN6%2F9LXzGMFsIZhd7X9uiiR4vl0lJOWb3CS8bHj%2FcOTDf6%2BAW2KZ2%2BJAZ0TXFMv7Ls1ktel56DPoib%2FkvkT%2F9%2B45ak%2F9rI0pzASTwnsRSs0cDEooqxPSFl4FPrT5bHC7KOu4RPqkuWU2fcS3AUIL8iog\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:52 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a46b78cda9f10b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":794,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-11T18:49:40.016684Z","times_seen":24207,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/usdc.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.827Z","timestamp":1791361068827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /usdc.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1667\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSgr7Bqcf7jG9zg%2FiLHQdqJWTf6mjQdwiJ2Pw9qJ0uA4nrM%2BqXp4lEwmzgKPz4H4w1uhEYMV%2B8E8jbkzXjVBEkUi2p%2BIMFtIdA%2FpfuJ2Ao5QU4KLN3bgzPZfoNTQ5t1WSBBMBSP2a6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b82ce85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5735,"size_decoded":6443,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ea52b02b4fae591da782ce75ffc0292b","sha1":"93060c2e94b0bebcbf67db52d1d04180862e0f5c","sha256":"9ccc7493a3a70cf821af16df3cbdd1c5667a32eb384dd237b4b40a90b8722e97","sha512":"9a732c027f7af12882640d2677fce881e62ae3842ed6d219810eb1eaff33cc8c2cf381d4a666dc2a0050c2454cb7c36ec0473ce6ea0e874c2211c0b62820fde3","ssdeep":"96:pJFuogs1WMDFy6y38sDAFLAwLMRDw37maZ0o3k9KhzxZUIKFKy9+YD:hursdDb/sDAFLvLMRiR/k9WiKy9+M","tlshash":"4cc19fe75812df68fe5fa3b68012207256e73fae80d8601551cd46b867319ccf0a4a7f","first_seen":"2026-10-06T14:34:19.025111Z","last_seen":"2026-10-07T08:34:03.411769Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-25.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.872Z","timestamp":1791361068872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-25.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-42ed\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=762eOsDg%2F%2F7WEOZ%2Bb4pe9jC56xlqdufusTT1vtAMqs1qhd%2Fx5xmDwfcgVCCC3IRrlgLWcnvd2o03KxuGBiPf6BVqBOoTLy68HasmESKKGSSi6Gm9ZYVcd5USN8361vLViWhoDDOCBlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b87d115693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17133\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17133,"size_decoded":17840,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"fe567772fc65e9db25cef44971e4b806","sha1":"e15301c0a7362685652296d9ef38b92b19757bf3","sha256":"f72500d43a3eaf3b2e233fafd5ca24175e4364e908e5d1db014ee39a42306938","sha512":"7a86399b0228b48a33de8ce603dcff667afc0569af04193c8843481a808c2e43216bb3e0f569658dfe9fabd46ed8a8e64bb37e93a651f84d630257193020dfac","ssdeep":"384:Hj14h0l9FYzb8lffyeg1hY5K4t3D4RrQznqEm5uqkH2ZeHMXDDAnp:5YMlfWBflUxm5uEHXDDAp","tlshash":"1372cf05a3f531adc93e4ec45306a7e9d6b5556c3387dcc09f7e8925a901a80e2e7b43","first_seen":"2026-10-06T14:34:19.043795Z","last_seen":"2026-10-07T08:34:03.376353Z","times_seen":9,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-32.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.886Z","timestamp":1791361068886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-32.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2687\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MrQ1hWh4Acu1E51RGYi01GJCV8ZJM0URxcn%2BOa%2BrIUjQ083MkMQCvxSxHYwnssLVmAIiCRHN6iyYdwKPdAiNEIDXD5Yf37wy%2F2rC%2Flb10gtpOPjnS%2BJ%2F56CvX4fwYvC5nyesgYF33s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b88d1b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9863,"size_decoded":10573,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c5bb68113b47d40c7071b4dd92c16a97","sha1":"b01fcace6b22de41d68de763a094763cfd5e03d8","sha256":"2ff39982939ea5d017e0ef1298c58e170ac4c25369b26ff3c6663c478ae5a37f","sha512":"9492efeed1a3436f03ab1f24e1c914a941a00e8e0eaa6672d8419e46cad8956ecbb447a18767ba57ef97d6a7f5a17c658175ee2adb4a0dd4ec715eaf0cf55860","ssdeep":"192:YV/YHDF13y+nIIZwRs+MUo539ud81bcf9Ct2Zki2O1Y1k3QXai2WdWvBMe83i:MyD7y8wNTmtuOCEtxi71Yeyai2WdWD8y","tlshash":"2512cf5e94d273f7e20d59248bf314c89e17cdcc242e01b97663cab90d264fb12287b0","first_seen":"2026-10-06T14:34:18.982467Z","last_seen":"2026-10-07T08:34:03.355951Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/distribution.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.890Z","timestamp":1791361068890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /distribution.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWLqpr3R55il0RfxYm0l6pVDhFPF9u%2FP7BM0C1ZmpMZIMGBTt44olXVa6Pd1b6UqKjS8r2HbRjuOSLLWviHItRsZJtcSHblYXPCU%2BuEFi0ZEQuH05LeEgGXkm7IA3Qv15lhAtjPVHeM%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-8f45\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b89d1e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36677,"size_decoded":4621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c93573ad81da60912e17f4cdd0417faf","sha1":"c2a5950a527217cac513a87dee9bd0ce2d855703","sha256":"8436e005eb7f24d8a9e8c796536718781e72e56d609e013f6c346c0e30e27a8e","sha512":"12c97edc39d4f65d18ad15d6b3e69ded705ddd718ac5cbeecdc3895756646ac5ccc06f0f594f052e8883ded786b6133afff27614e5e292dabec05cb68703198a","ssdeep":"192:KOVCHmbGnLYv/y+/drdL1gV99aIA1tBfQ+j5eATJbDE0x7baxGZKeeSW5bzcLotP:N4/A/y+GTeMNgSt","tlshash":"5df243fd72acc420284991b8e6d7feb85e5ed973231073e220254e9df8e0d661b35366","first_seen":"2026-10-06T14:34:19.095393Z","last_seen":"2026-10-07T08:34:03.447458Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mantle.xyz/_next/static/media/ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB","fqdn":"www.mantle.xyz","domain":"mantle.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.386Z","timestamp":1791361069386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mantle.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 09:04:47 GMT","end":"Fri, 20 Nov 2026 09:04:46 GMT"},"fingerprint":{"sha1":"61:B8:4C:5A:DA:C8:86:07:78:7A:6B:86:14:3E:DF:5B:BB:16:B7:B3","sha256":"54:B3:AA:71:C8:73:11:75:C8:DA:3C:C5:1E:70:11:8D:6F:3F:7A:C6:94:D0:1B:E2:CB:61:A1:AE:96:A3:B3:2E"}}},"request":{"raw":"GET /_next/static/media/ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2?dpl=dpl_4WqvkcdccTnkNFEE3ReyRrPwTQxB HTTP/1.1\r\nHost: www.mantle.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 580006\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\netag: \"cf289907bac2ed3301ba7a3f2bc03c86\"\r\nlast-modified: Wed, 30 Sep 2026 15:11:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/ABCMonumentGrotesk_Medium-s.p.1dy-_6-lj_q6j.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::csn7f-1791361069621-539b5326f3fc\r\ncontent-length: 34928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34928,"size_decoded":35567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 2.6619","md5":"cf289907bac2ed3301ba7a3f2bc03c86","sha1":"5232149f969d60a25f4225340e0bf76330212d05","sha256":"9d24bb81788141076b72687bf24057e9a38b2d8e575322a2b92f3fcc2c5f68b6","sha512":"80129c162b03b7ca56da78c215488f75e60137e4ccef352bcdd5f3f516a78816506b947f3b12735e8566676f6374e5d4be499ae288e7e687e2e5cf0ace717a8d","ssdeep":"768:FAAaDU9LK6rF7cc1vOEErb2ULuqPZNq+Ey3C4z8jtldBp:FAK9LfZxmxPZo+Ey3CE8jtlB","tlshash":"eff2f163361e0bb51ee228326dac12a2c3fda1d8e971096d22537dadf17016516d71ec","first_seen":"2026-10-06T14:34:19.120857Z","last_seen":"2026-10-07T08:34:03.440003Z","times_seen":9,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":24,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.404Z","timestamp":1791361069404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 9\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a46b78bc6af0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":487,"size_decoded":724,"mime_type":"application/json","magic":"JSON text data","md5":"55f6e1f9912e8fe1cbb44e24c33838c4","sha1":"f5fa0b054ad7710c33dc9867526e11561cb028f5","sha256":"da1d7837d390365e1f94269c10e1c11a01595d16a615cd1e1767b65ce23d6372","sha512":"a505e522a13eaf1d27e89670bacf3938394ed7aab5182cc20bbd33ed51e3718d888ef1771b0b63144834c48cc2d07e42db4d392a5bac1ed0b1b00637e6c78dcb","ssdeep":"","tlshash":"7ef086f0ec05e499f4855846e8d0784500017cfd34dfcd0c4549b62b3e921144f849df","first_seen":"2026-10-07T08:08:16.442177Z","last_seen":"2026-10-07T12:36:00.950987Z","times_seen":100,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/weth.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.834Z","timestamp":1791361068834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /weth.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1880\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQwLsB6QrX%2FL053o33hsKy4Zn%2FSv%2BdyIRIefD%2FOeLGCFK0HiyigUQd%2FyIbN9FkS5PFKGiKo%2BxXaFPsHQiTLzFPcSs4V2EZxmpS2dvK%2FeJ06bzle3AfFImREjvULibTWuYBOtCQ%2Fq2CE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cef5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6272,"size_decoded":6986,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ea2a5428c3b64d8798c6f472710560d9","sha1":"a6d2308ec802c93a2fd1c31149bebecb1567b6a0","sha256":"89118618dba751413f184cbccfecb5f10535ce14a7791f838595aedea546cbfe","sha512":"e02e6bd7c32624a314274a132136485b3f690806b0ccce15c3d7a6a438274723d9440cad966f99838eeadc46daf9e43ae892ac71317fc6778563975699f2c96f","ssdeep":"192:04IYY/6TWUcTWDUTlNBAizX85Zidwc43qTl:0rYY/XWDUTXBAiLWZzv3i","tlshash":"c3d1b0eaa43d00b65d464cc8ec08cdffbff011bd541a16dcea939e0002912a96acdbc7","first_seen":"2026-10-06T14:34:19.079816Z","last_seen":"2026-10-07T08:34:03.461156Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-19.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.864Z","timestamp":1791361068864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-19.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-3746\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1rUTWxumBdihemOl2Esiy3owOt4lHl6zaZa0UlL1XaLPVp5IDisk5ZbjASkRBcqABI4b6C%2BUxRQDnda0BgsPAICiVP%2Fn2Lsks8vGOcP54NaacKhs3JaacXElUIQJ1r2TFLguNCo%2F%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d0a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14150,"size_decoded":14857,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e35731afea9d9e8d69834071368c5fd","sha1":"a147bedfc921ad4c03d30eb3b594b27ea786d177","sha256":"dd247514e3721e4e2fca1c2b77993d5ebe491422bd7d8e5375cccdd7a8dff212","sha512":"a8077dcc222aa94a1c80fe4729428213bc3fabadbdcf130609a9c630e0e77a29560eb1ce88d7a6ce2a221c00913c54c177fbb104bbf0d4ac8b89582ec402e6f1","ssdeep":"384:T2utThuic8iwsLsPYVExhaLg/IFJiIa0YJUjOcSCb7o9dmLi:RxiZLYYVExhQOicIbON+09Mu","tlshash":"b052df9332ab6faa332745a924a4d9317f748ec6b54e016b0ceb369136bd9347130035","first_seen":"2026-10-06T14:34:19.093736Z","last_seen":"2026-10-07T08:34:03.410715Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-26.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.872Z","timestamp":1791361068872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-26.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-20c6\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cRapEL07gkCfWmQo2EVJEWpZ0%2FKMSO2OCyX%2BWsndLnx7fvVP8XiX4fZWZ2oGbOOa71jxouDEWHQf%2FCGlxSyoJrnPur1b82l2xOfMgzupC2VvpmJnTErvOwBDgcm0z45vXMiiibkiiM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b87d125693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8390,"size_decoded":9094,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e7ffbeb840a3e3d2e47a57ab3a3db446","sha1":"5ae7e110c14c63a22d2e5f20c1b7acfed81349c9","sha256":"a23d47896b02f32a5da854049361cefa6df4b254efa92ba7ff95f66120bb41ee","sha512":"1bcdc7c2dcc0b6caec2c0a8908018e75cb4af1a8f3ec54ea4f2b0b0806a5145279bb371bafc4a72c144f9f82efacd23bdfd76a70d7617f1d023bf9f83f171fa1","ssdeep":"192:qp9GuFqstJYQDpI7I1T5zhIFz1iYm0mD+HjmLe+tDE9:8qstKQd1TJWV1QvD+CLXD8","tlshash":"4b02ae88fbe99645b1e2fe2611ba83e0d8d53aa26427ec122c9927195133832d3303e4","first_seen":"2026-10-06T14:34:19.001486Z","last_seen":"2026-10-07T08:34:03.363796Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/HMyVomMbAAAmb_Y.jpeg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.902Z","timestamp":1791361068902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /HMyVomMbAAAmb_Y.jpeg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-e18b\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBW2ulDg7dU9AzGPwIAd%2BIWTNg1W%2Fl4PsNVUe7YCK0R5oa%2BEUplfBsgEmhVFR7xyyOe7Ci9K%2FfasQHUYFATNfVCn7q5qW1Kc98C3ZWokTBAi0i%2BXjMiRrJZ2oN2VDAcFRhoeNYq6pDw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b8ad365693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57739\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57739,"size_decoded":58449,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x451, components 3","md5":"917ad2cbe25a2e70fe803de2dcd1d02c","sha1":"331f51c7be7816ee0698c5c11fb3cd8f1ccb3502","sha256":"b3cd7548416b6470404e2a8651d8bb99b841c9ef137a83f9bd2bb1ccaa438f0a","sha512":"6ab0b49a8c701575ed6d7f19f9ba432c49a0f47223b190df814b050ce1ba66a20bda1225599754bc0dd4a42c3fa5a75767d54b14e87d7c51aa528e6ebcf04db1","ssdeep":"1536:bhQAmvwB3bslQcA1YG/7ND3VXxvOZakfMHRjX3blgSDn:uf8w+cObjVhvQa2iBhgYn","tlshash":"db43019fc2fba23bfd5a1d7d0e2225e340dac86536963f4a28a1cb15636e43c9c452d4","first_seen":"2026-10-06T14:34:19.111905Z","last_seen":"2026-10-07T08:34:03.368137Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.839Z","timestamp":1791361069839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"E3TUFYKEW7ygf3gn6uiSBV88Pnn7gfeGJilGh-HSTnSJkcVMu6oze9X-Pi-yiiTFg_Qaw7CVwEZmuicVjzOXOr6SeGN4cI7eC0oAjsF9VA"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yi8Y5x00iBx%2F6ONX3hhaK4u%2FZdhikoCmKhuO0nbgwbVuuTr7iDteTxhyGIhhAjkS%2FYNzWEO7QMxhxLqvkpqeE4la0K5x3CW8zBV%2FBtii2g6IOKyU9mGFFdJJqnangCazkz8uocsbLMD1RqFjIrvyJvL2E7cLMSIs9ngN\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b78be790d0b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528504,"size_decoded":158457,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-11T12:33:27.722481Z","times_seen":412,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/bybit.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.819Z","timestamp":1791361068819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /bybit.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=viHoZPlRiSwCMBCg8yNCPPpTjAz6skWMLLSLQq5MXj8MD10fVXjz%2FwfFAs%2BWkVsb0sTtGQXEoSGxCziM0iI8%2BJw6Agx3ZzVZXbPm6%2FkihJEyv6QXHLVMayyg6TiZHtvEpXRz7AvMHws%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-6f8\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b81ce05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1784,"size_decoded":1497,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50dc834ae4b6926c3221405fae810510","sha1":"d39b558367a69f5f702189c58c440695aae779b1","sha256":"68f29e6dc1304c2e565a0ab8874a6b99c5f5be6ee8fc5f2c04c847874ed2b621","sha512":"7e04f937d23a2f4c3ddb6adb43f82d2115065fb2f56b2107672789f5a2d147bb5245a971b7148fc564f18aa9a1f96dc54db6d69ec2ff49292a3558f4eac7ca61","ssdeep":"","tlshash":"7831516cd2e8b292e449e3b0500df8a5381232fba771cba4628b0ea83c401990d8cde0","first_seen":"2026-10-06T14:34:19.098383Z","last_seen":"2026-10-07T08:34:03.35803Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/usdt0.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.825Z","timestamp":1791361068825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /usdt0.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-23f6\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeZ53ieDwHZKJ8abvs1AHhALpFb9n7T3rWxfk6akH%2BPb5t4o7aVtTjDay1y0G%2FcyRJ9Egb4gfSpsPg%2Fc8yhq75f1ezPLqEWPsWj7MVqM6pSsiiK2VJWZBL4TzhgUErBzlnHKB0PHi6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b82ce65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9206,"size_decoded":9910,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"bf3d836ffb0e50cd9b428c514513d6cd","sha1":"91b37656bca3de41c11b0ff67b9710d42b99fb33","sha256":"e0ed783f08e2056d778f27054b1aff4bee40d634095bbfa88492cd4ade65d61e","sha512":"cf3ac70824c54960d9090e138829593b4d5670b83d7387051983798f29120285955dd7b7228f045015eea2f36aa10fbe2dfcb692231f7797ac9b214aa7557beb","ssdeep":"192:SPhB3xPqBunAcswvS4Cq/KNk+ci9PAemwVjSNkFd8XmkBoaW:a3FqBuPRxlSjcgJOug2kqaW","tlshash":"cd12aeb9c603b056d70d9ff984d7290a26b3be9c5f0d9d03ac8a520d18944130e17bdb","first_seen":"2026-10-06T14:34:19.124454Z","last_seen":"2026-10-07T08:34:03.37907Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/xaut0.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.826Z","timestamp":1791361068826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /xaut0.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-23f4\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2F93JkaPznGRyOOP2Q2YFWqmNtpZi9v6bLhd1H7ilNaBqhhObqZb9sbfvUmBh%2F5uUBG%2BdK%2F66yLfAV3fV%2BHUkmPo5YfyGJcHJ51g5q%2BJKLOTUHUEAe3HYjjxyaWg9JoTxUk7xvM5%2BT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b82ce75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9204,"size_decoded":9916,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c1dd1ad0b15258be9afce7f09a39a092","sha1":"6175d55e7b7cff90088d2c0a51fdebc1f716e6e4","sha256":"18c036b4461679f6ffafdfe5eccd78c9ea9328584c437834c270e37901f3d197","sha512":"ad5c3c44b764ff7c4d430e795543ace0b29653c822fd0206df4aaad3a0aaf32c012f5ed215b07219169c15392dbd8a11bfdb664686c9d440cdb95cb2e35be5dc","ssdeep":"192:7IWhv6rnNOL/uN9sBw8Ng9MNjTcGXCHTCexwcgeFtB+u2beDn0:7JUoL/E9sBwl6NjQbkcgeAue","tlshash":"aa12aed9df5c50289139c3b5135a05b04cbe5add59f124ab03d1b7af72e8a2197cc621","first_seen":"2026-10-06T14:34:19.023103Z","last_seen":"2026-10-07T08:34:03.353854Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/fbtc.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.830Z","timestamp":1791361068830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /fbtc.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-32c8\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WH%2BiJR1XWo6XMjBOWBe78DbcRP2awEOBLY2W80Kdqs%2BUA51zglUeTOk5okL9lM8xIzzg82q8gBmBIvo3jCzR4AB4nFFl59Ewc99YdxDQ5PVz6ZB1jaa6C40LCYehH3QB%2F%2BqDO140GmA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b82cea5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13000,"size_decoded":13707,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"2d2687545eb9d886388ffd27aba30bf0","sha1":"af76650c469dc3aa3652f200e6388a8435e957bd","sha256":"d0df4e63de5a34671a61e036e94c7c4aa4a9768d0bc55c46e3cd08f5a5e98c90","sha512":"23674005ea73798b1eda012252f87cc4b22d6ed01984e73086b7c666135aa2125bda52e62136691962b720aa8d7109daf7447feff916050285c50f341661dcf6","ssdeep":"384:kJEDv7Fx7ra5SB1phlcQYrl9kDQkAiGkn/a:yApxva5Srhcbx9AQkIYa","tlshash":"4042cff9405006cc8f6c2a1557e4b80d79d9d9d3bc615a043bddecc2822e7fd80fa95a","first_seen":"2026-10-06T14:34:18.971715Z","last_seen":"2026-10-07T08:34:03.417031Z","times_seen":9,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-07.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.848Z","timestamp":1791361068848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-07.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-3a20\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoW22ZYH1bL1BmKUMkySwzMXRD2tYoJQLLbqXjCO3n6U829Uc0K8bdx1%2BrynDHjSnQIbrdv%2FBysYA4iZuFHtM527OSABGT49K4%2BeU6RL%2F49KMYP3qpXqL524A7%2FFwIPAcWr6ZRmCm1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cfe5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14880,"size_decoded":15589,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5912322fcc5e8326fd4d59b476906f75","sha1":"fad842693410bf05e9fd1cc7f4f8a276b0a6232e","sha256":"9d375c865853edb32f11266a5141fdcabbb48e9ffdc3f1b1928643a09956a5e6","sha512":"8a89068174f9715974d7557201f1baa6508fc9a5478b3eb3f9073933a3247077dcace94eb25c2ca276ecc5cbd3c5fd7c0a534ad44e18b00e031bb360e33a3090","ssdeep":"384:Msutbkmg59gt/OM8A9nSINuSe5KwP16gN:Ms95yt//9ntNITF","tlshash":"7b62e00a287ec3a0563002591db05e1db567372c0ea27d8b3cb779528a3f6279f75a15","first_seen":"2026-10-06T14:34:19.027098Z","last_seen":"2026-10-07T08:34:03.355148Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/USDG.jpeg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.896Z","timestamp":1791361068896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /USDG.jpeg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-4860\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7fViW1j%2FDgeUmaL7I0OPQxSspQ8sdhgy%2BNfZE6yIipvR%2BzFNWSvWwuXUV12O02f7a4danxDdZHNH5eLRQAdIlmkDMGUNLwdvnqgq7GZq%2F7tWz9snhmsrt%2FTE2YfEW8CAZd7WpYwx58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b89d285693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18528,"size_decoded":19238,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"033d20360ee4b05393ac0efaad7fce97","sha1":"ee3f318f50c8211ded0122de3a8a90327716e25f","sha256":"e346ce2ea2dddb471d76517d09e5aa7780634f498a378616a14a55f70102b558","sha512":"698da742c13a69f1c31763878d4e5d6142503cf00a17d9620afcb8ad103da354fe5b42f35342d38b7ac489bca966793f01b8006233f1271423310c025bc5e7ae","ssdeep":"384:V3CATsuwLUbuX87K1L3fjhPg2Kt9fpuXkaUIQUcn7:V3CAwuwYbuXcK1LrhPC98XxUIQUO7","tlshash":"2182c03d35b42125ec1ca3f3954c1aaa7a17a33007350d29bed877dd87ade168b150ae","first_seen":"2026-10-06T14:34:19.03525Z","last_seen":"2026-10-07T08:34:03.397154Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/grove.jpeg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.897Z","timestamp":1791361068897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /grove.jpeg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-b43b\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUB8qpyDEGXQZQawBdOGZ4az75SeJwyfu3eAprBLdO7aoJXyEPyGIccjyY2Tu3nCQcUJXWGMu2lIjYjcYC%2Fc9aSP%2F2KpvMPS9rHQJliCiV6lryqqnoNK6Z8rkj5r%2B8o1e8aT9tGkUPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b89d295693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46139\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46139,"size_decoded":46845,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"52c50594b3b4139c254110cc02a93bc3","sha1":"482b870d8dbc975430ced0323d095a407d0c8d17","sha256":"3aa4c5d770041b743894b21d19d4640d044acfa9f6560cfe98832e5b22a06b8f","sha512":"746ce86eacbae86509421f6ef3cb7ee129cc8f15f33857b914c9676e0264814372a97bed1512dfd249bd9301fc8772f27d575bb14c3c0e7a616d960d28f7bef6","ssdeep":"768:H1CO6NnsbPwqh9yyGy2eh3Rot5BnbCL49vPog9+rjAhtrfnxF0O+Qu18LMMbh250:H1mQwq7yz+h3RoHBnbi4FoFrjGtzj+hm","tlshash":"9223f115a5b0fb51fd0d7aad42b837e01bd90fa07339cde83952c89943ee39859e214e","first_seen":"2026-10-06T14:34:19.018266Z","last_seen":"2026-10-07T08:34:03.364585Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.414Z","timestamp":1791361069414,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T19:43:33.472137Z","times_seen":19036048,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"rpc.ankr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/xstocks.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.808Z","timestamp":1791361068808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /xstocks.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgDh%2BKbe4XR1EQ1ATTUHFt9iJz%2BOsdFtI7DGPWKOe2F2Un680UuXuYtVAamI7O%2F6GTatpM6FsQJO%2BBqaqQ1PLWEmistdyeZA0ZttvordoPyYk3NypEuQaPjsk%2FSVDmhLNoACLc5MPTI%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-c46\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b80cd75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3142,"size_decoded":2065,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac081d4416fd5558df6d1a4082bde06c","sha1":"344fb5651f49faccbf8d0279d3b94fdf6d09f77c","sha256":"7e9f71251126aae6e5a5809ee135776ae304bf847c5fba41020912a9d3b2eae9","sha512":"47df3b5d9af2bf7b82315146b12093473cc49c672777cdaf9564605814ccb66c98ca30717fe61b11afdbefa18aaed581bdf10df82fb33a331dc9a246fc3df676","ssdeep":"","tlshash":"765143e06378f3e4f900df7ac1152276ba4a38f3775a8b54c3e09f35750a4aa88999d4","first_seen":"2026-10-06T14:34:18.998494Z","last_seen":"2026-10-07T08:34:03.413838Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/agora.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.836Z","timestamp":1791361068836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /agora.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1e9f\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNnioEmj4QX4wt1MeMuqkddTLeeQlZ9eSQGXetYDITmMkkfWQSBXJv6BMWrp5w3CPBepIx8T7PeDLBvD9HG25UEWL0n8qPhQYbF%2FUgKc3vqX9bxfUVCNF8aBGWPJXprjMMeSq2Pov1c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cf15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7839\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7839,"size_decoded":8539,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"85843aee79f28008bfe721436bdbe95c","sha1":"9bd0176a7fcf93fd68e04bf3c7110c250ec6b3f6","sha256":"1fc53569a5e433822c04580fe561e575115c1013aa34f287520388cea09caee0","sha512":"9ebb2b9e317e0a45cefcae94560b4c641d43b34efe3aaaa92fd874b3371f931f4dfc91eb4010ce3dfa6e93a90b3e3143307189312a276ae1f5b0a8ccdb181e84","ssdeep":"96:pHi1eojqx1OcXgjcSf0GiLckEV0Qqf/bUN/0CPu1Z87pJr2IMUtEhcxJ5TFyklmK:pi8o2xhgjNQEq5i0HZus0EhaFh7","tlshash":"00f1b0d34eb777044773ceb51378a9b75aa48e36c25560112dfce231a4b48474950d94","first_seen":"2026-10-06T14:34:19.081169Z","last_seen":"2026-10-07T08:34:03.420795Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/susde.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.840Z","timestamp":1791361068840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /susde.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1493\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPmc8qBvu7XzuniDPnE5%2B2qkEoCLrzPlAnKmmO8YEY6GiyOdgcXflljAbZFmWRf7NgN0eKXAsDdmjNZVB%2B9gs39lq8EFbzGv0MhBiuOvFsFEMCVZE95lOEuGujYeHrJJvGHKNofkyUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cf65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5267\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5267,"size_decoded":5969,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"45928f6df61b5ad1a2a94dccbf6e4fb7","sha1":"4481c921f536ee12731d5f2adf48273824fd4575","sha256":"2fc893a88416c461299b86c3ad1e13e74e6865b976e8460d825db6a050f6869f","sha512":"eb6dc7641d62651dafbdbfef0da54c81572aff1c652a15a78b6893057c81c551e1b4c439607a55d22587f140299b8034490aa6a31a0453fd9549a23068c939da","ssdeep":"96:ptu4FcCJMWCi/VpS+yjhGRzrf/3m1AvgcHE3nX63vwMzS5x6dRDyBUKmaeZYUq6S:ECJjSkRHXrg53X9MzS5xg8BUKbzz6S","tlshash":"49b18fd373cb5dc32dca92d0c9a880ebbe420ece2c05408b6ebb01b50e8ec765957c48","first_seen":"2026-10-06T14:34:19.105247Z","last_seen":"2026-10-07T08:34:03.435464Z","times_seen":9,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-14.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.858Z","timestamp":1791361068858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-14.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-22b0\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Li01BPoIHOvzPJwkmUOTBSbo%2FXUo6jIk72ol%2FMMlLhIavzDE8DLIcTnoo4F%2Bfyxr6sgE2axPUUpq770v7D01Oy60YhRzHdsoYHPgZJA1Wylf6%2FjoThZkAzVkTrjM2QclEh%2FCLUHhRIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d055693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8880,"size_decoded":9588,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"af50c474b69850dc90c4b990213758c8","sha1":"8afcfddaf52d197161b523972e1a620459ab5f32","sha256":"4fab74881c88d18fef92499f262a4e99b49997ce6439f0fac69172d206c18e32","sha512":"16408c837c224b160d2f04d2bd45a72898048da360d386f4bc0145cbcdfb18cdac57b7688e26b9ea73c5245f8b21dbe6fbc5881a3ff56c4f2444d6bf5b99e2dd","ssdeep":"192:zDL9MOl4dYDSnw/tBR+oy09eHyIWlL0aTh9NAQGUj:zD/KI/R+bHyIva9j","tlshash":"3602afa0a2cb3d1ca939782513174be1e8df35632892bac5c124b65302ebf2f42f1533","first_seen":"2026-10-06T14:34:19.085986Z","last_seen":"2026-10-07T08:34:03.352307Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-17.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.862Z","timestamp":1791361068862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-17.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1de2\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5M8Og9bbCKz%2BgwrCOgdiJMxUVVly8at4gtXU4CDd55KRSuOefq4iE6uO%2FSqkU5Wv7N4KnhQ7UcNtj324TJpafQ%2FbB3l%2BeZYL5OifZJIJ6UROFvCOjdwvwvGXVpUzZ%2FqNKjOuvs0kb0M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d085693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7650,"size_decoded":8358,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9a7fac797be140bcfed02beab5058913","sha1":"6a0da3c5af1b6ed808a64c1f7363d718a4c8cace","sha256":"37325519e4009da7c1d8322a94f94bc31d88945d3d5ce146296f03c92e8fbc98","sha512":"ec930cf748fa3b43605611d88ee55c45607109af1b1d8032c4f7ba72340911e6162a97258b23c4f1639866079ca0085a44b3ae4bcab2230df41e199293ad1730","ssdeep":"192:1eSRQh1LUPIt0iWSuliztgwd2X1WVclQIB3dV:1t2xpt0iWrlizld2lSclXX","tlshash":"dcf1af8a717196afa826ecc248efd258b652f915801fd66c35eec049d428c0007ffbd2","first_seen":"2026-10-06T14:34:19.118595Z","last_seen":"2026-10-07T08:34:03.357329Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-22.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.868Z","timestamp":1791361068868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-22.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1bf3\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWjzhkG6XvCC5NgTDSqT%2FxaVfelkbGfDZDF9p0KbSjlGU4YhdJfj6hJOhsjqW4NUdUVKrJ9p945NRfFhsoqrqfKpd%2B4L8eXGllJ2o97vWJU1DjpxkjBoqldcaHD6AbDuPcsDTL6%2F%2FBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d0d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7155\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7155,"size_decoded":7861,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"51ef047658a0c83fb20750c72beb01eb","sha1":"c9ec0dc58be39a5c6a222d0d66f8ad88ce95a1f3","sha256":"43e60e31944743eb67deb4b4e65a3edd602d7158baf15b5ba22a98479b91bbce","sha512":"0a2a95489b50f389bcdfb495c914bc4d3797f9c3ecb31a28fcdda9d96ca27c0b9b3e89a557ea8622f796535a14a2d4f5548a267623adee6e2d2b8c4309b193a3","ssdeep":"192:v2xcUbS3URo1i5TL9P5KIEqT+b2aDmcE0YR+k:ccvK5TL94IEXtEp+k","tlshash":"29e19fd946e53d783adadb4bd576d0987ecc5324d7c06a5a38e0e0370a018a1176b7d8","first_seen":"2026-10-06T14:34:19.077368Z","last_seen":"2026-10-07T08:34:03.400192Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.410Z","timestamp":1791361069410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U93c2chlLyGpUq1lOGskDwS9MRrdUsSezcHtDt6CBsfhdRWhLFWc7N57kFjdag9D9KlNTPzl2DFZovWvi0z44qyWw7apXmUpFObi6qbB3ImEBjfE6wDM0FYW0IUUrJiyJCY%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a46b78bc4d205a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":708,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-10-11T12:33:27.894859Z","times_seen":864,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/favicon.ico","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:50.648Z","timestamp":1791361070648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:50 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MY6R2LBPoIFLrZAcmpZwhibu%2FR2WZI2z1c8E54iElzoYLi9jf94uVQV3LzeEypxLf2TzWZj9d%2F%2BRArE%2FXAJPFKrfbhKvrODJs0jvDblduutmnJc%2B2RSsv0bR4s82532AeNWYkHLw4jI%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-68f\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78c38f015693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1679,"size_decoded":2383,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f14e948d3ad7cbab5cbb2dba84c935c6","sha1":"d8fce03782ed1c04ddff9891a6f5905cab04e124","sha256":"f8572d7c93f49ec2ddbca6db4550a63108e1dabd7ff62f5d1b98638183fbe0a2","sha512":"11f765c744dc2a964b7214735502a60e0830ce0cb71aa309a514a108e1fbb0274a5cdfd103ffeed533f7b989e2237436a3d1dad96ac531532bcf0409e8084be5","ssdeep":"","tlshash":"1a31f8e7ee9375eff63d5822607f4b2ed1a2c00b943775454d13214f0d202e568b7912","first_seen":"2025-10-02T14:03:17.267439Z","last_seen":"2026-10-07T08:34:03.448157Z","times_seen":20,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/cook.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.832Z","timestamp":1791361068832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /cook.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1e46\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRjv1R7PgbX3K3emBbbiuPzth7RJdBklP6PYOavcy%2BDfEG6KtTCurdHpbcbqY%2FAjUosfMkhu5UWt88QJ0KJH0x0umMOhTMHXRIw7fCcypYdRiBlqVzZNg%2Bfg6m9ustKd03mf7rDmUoc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cee5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750,"size_decoded":8454,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"828ac7e5120f437c45ab46bd2fbc2737","sha1":"22856dea187581c7d4915949cb4b3ce7e4585653","sha256":"0dc68ea79ad3e651147133923698741c37b413d61d4344667074a685574c4d2d","sha512":"7496e4152c85fcf81efd891f0e951b8a060f42c7e39fec9d1f1065abbce99c5cf33cceeaaead23f25086984e6fc09ba75a721d984fa5832f4f6a4c721075e8a9","ssdeep":"192:pULANJeUi5/nIYh/UnmUNovlWXjY1B3FwkcTdUmfwqwfyY9:BAmY2mUNoEEP3FwkcZUmfwrfyY9","tlshash":"19f1bfc09de04e946e76d6056adb9724c756a020ab4071e13f6fe73af481dc6f209fc1","first_seen":"2026-10-06T14:34:19.125546Z","last_seen":"2026-10-07T08:34:03.380294Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/syrupusdt.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.838Z","timestamp":1791361068838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /syrupusdt.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1331\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FECg2UzQDuNk1A7yfpbpYkCwSc0z35yrVObgztOidka8O1SKlgUWqXE7q2YIQ6XI5UaVioPNZCEQlLilSzTasBYQBIWmv%2FywT4Lp8ERieVje5sDMc2mp2%2BpGGp%2FhJDHUK3iNOzkJgis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cf35693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4913,"size_decoded":5617,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"89a4f62bd8d50f854453f406770c88e2","sha1":"6176e1d3bc29e19a847ed01b38e0738a4a7583e6","sha256":"66c3c419b1d6e9774b10c5462bc0b5909d655a76a2826d88b33a4b32c377c59a","sha512":"e02cc5f0c1c6dba8e9c3a3e414ccc107bb4b8df163c09b62768ef64c307b917fbb800b2a59077d889625cedac97c8e0a619f10a0308704237273de1e7a7f72dd","ssdeep":"96:p7kCIfgOt76kX323BEbYLZjPcGR7SLeZKSIgSZuJj91dyyFoCcKc89jPtA1:NkCIfgOv32RESrcGeeZK8SZuDrF5i4M","tlshash":"8aa19dcd256392090b3ee98608be680e412b31b00299417f460cd93c787af741bfbada","first_seen":"2026-10-06T14:34:19.100582Z","last_seen":"2026-10-07T08:34:03.369174Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-05.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.845Z","timestamp":1791361068845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-05.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1cdb\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pl5BpF12wxPINI9gKVVaicmtouKXJVnbZPBFYpikgwK9SNjwepmi4tvE08ZE%2BjffeIWcQ0sroj%2F9f6%2FBF6YsXF2Bl7klVxNTrlLxBgWFac3W2oyFpp7%2BOC6A9QTWTjKZ%2FUOIe88xznQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cfc5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7387\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7387,"size_decoded":8095,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"16517066c6df01d1858bd65375272c70","sha1":"cdc0c15024aab19ff90392fff79f46053786817d","sha256":"a458f7e9e4a93e0028ecf78041543cf4137029f4b77005e7abf4168703d7076a","sha512":"1eca7079a46ef3e11681f34f46b20e71c8f20b20b5c8d4a3c13cd1fd435ad404f347aa37d0215b4adab7352e8ff63442b1b71219c7dc5dcdf1dd5f472a58512a","ssdeep":"192:ExwHO4XbXdqIlqPViBUvOZwHCwtxD93bavnptyMFBc6:EcbNJUPVLOLsxD9rCnau1","tlshash":"15e1bfd7f89b739319dd4c19d1b70a802f9f224f74ec066ecdc82c5a30195de56d2288","first_seen":"2026-10-06T14:34:19.092533Z","last_seen":"2026-10-07T08:34:03.436635Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-16.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.861Z","timestamp":1791361068861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-16.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-30f1\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykTlK%2FfxFLNKT6shU5%2BrSHfFwJq4d%2F5vju5GzFZ8%2BPlpdIG5zSYOnjd604ZmVun4tN59NXuYLRKjtPVnV%2F9KQvS10CyL5NljP80QSoTz94VDUn%2BDi7V7KsnopDGWeGAmshYq8QTWM0M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d075693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12529,"size_decoded":13240,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1294385c8255b6f77c145517a6508045","sha1":"16ad442d374e31450ac832a2eaa8589f2cd12b2a","sha256":"68f3caa265b068e01afc80cf00e8fc6ee3410378f980f5b324d95a039a4c80e6","sha512":"858434963d0894cc24a6412b2b4350f7c6ae6dfa485920fecf930f876cc1554619d9730a3b0ea370390e757ff0b8b21f5a48ab0a491cbce6f8b5ef8a9d651427","ssdeep":"384:ZxDTA0mXPUyawm/hR1RS6jwualxNNqT9SbGOp:ZdM0iUUahR+6jCxNN0SKOp","tlshash":"9242d1ee2752a041c7b4768403077d0277b92ef9430e056aeb8f3aa1ecf51c697b4936","first_seen":"2026-10-06T14:34:19.131773Z","last_seen":"2026-10-07T08:34:03.398384Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-30.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.879Z","timestamp":1791361068879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-30.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2094\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fD%2FP4nOtMzRDh7mO7KYwDCJ1hidD%2FbtFMd4Vr2ECQwTb4DvOtjI%2F5cWiQP%2F%2FmR%2BfSz0Gq19s7Bls9jOgsPtspSdcp%2FRWx78exZrAdNSJ0WBS0Fb1Jz3fi83qCnS9lXPyhxWj62rsnSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b88d185693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8340,"size_decoded":9052,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f8588018a3c1b9696472987742ebbf38","sha1":"39baf58380e08558665496334008858df4c34b07","sha256":"c428732d8e8193bd15533e3dec1df4c0c3e9944594d73cd9d709898a724404ce","sha512":"36dfc4d99baa21b3bdc45e6c53951b993366b11494d0c7d2c66483af8d873a326a5a4bc1e21e46d853e195ddb6d25806e8f5ce53127dc2f340216bef78d7798e","ssdeep":"192:b1bvLR3suvNElkc7U8TL7Uv2/HqZVNMbMxi:1aaNElkP8TUv2/HYip","tlshash":"3302bf75ab33942b8694dede6726192066190e887740b533b2a687311f07cc726db3a4","first_seen":"2026-10-06T14:34:19.005904Z","last_seen":"2026-10-07T08:34:03.418783Z","times_seen":9,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-31.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.884Z","timestamp":1791361068884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-31.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1f76\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4LGbhbBB%2Bvvcu3%2FPFT6TfDCErpCAQGLFDnfXrXt1wSFYBlwtLZsGqHsWjNfx0Upe%2FA4gNo6zI5UzGi3Uz8YKyrE1MYB3Oxd7osEEDnzMjng7cqXgPCV76b6bGxPuXYP8F80f%2FZmsqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b88d1a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8054\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8054,"size_decoded":8760,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"018f314967f66ea424684e7910ccce64","sha1":"7154ace89ebc3aeb6af428a8b610202a76c45110","sha256":"c558c49a2a0501142c4ef7c756febbb097cc2d0199a5c14f8a55369156b97649","sha512":"28f9ae41d678f1962b7a2a0423851ca6680e7b7381962bba442252b08242b6b6ff84e8f11c15cc103eec7cf4669831d5e30e4268274f286f24ef869d24c496fe","ssdeep":"192:uzCrCRxG9lsD15rPZzbDpiENBDdmENrGxsx5GT2:UCrCOlsDLVbDpfBDdm4rGxsx5GT2","tlshash":"4ff1bf77636d48ebcd6960d7592fcf08e086c49ba8211dc3d465121dfe3bec201582a3","first_seen":"2026-10-06T14:34:19.02888Z","last_seen":"2026-10-07T08:34:03.421763Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.417Z","timestamp":1791361069417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2QoIdnZVbW6PxzVtFRJDVdzDbFXPijC85wph87%2B6j2fYuLVLpl9xc3xMBEGttAr%2F8DztldMqAzTrK5GO9EmJLDlQZVPJXXqRNdtTzRjeiNtUKuy5S5IOodbafwLiMDfMlY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a46b78bc1ca55a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":807,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T19:43:33.472137Z","times_seen":19036048,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":4,"connect":6,"send":0,"wait":29,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.843Z","timestamp":1791361069843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"ozA9FWaqU02pEetNqP7IsJSvxwDG46Ka-f8l87RiDwYQN1v_CXBODCwzbQPg3DtpIH3Ee8KfOGPWKN6mgVGhkyIFEBwkGF6pIuLO-aI"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IL8fDiZoLYW5KacFfJhhs2sHCCsTilzMWUXb1ZF5hvx1%2FgJmPASL1Ba67MvmsBlqI4aYmZ8XmB0Zw99nKi4amT%2BMlOO3RnP9EoXU5gGqoJ8PcUOOQTC8AgqD5xvngm9MDpmdkbjd14tvvtyvrpdSBFABEtcqCYHGjwhb\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b78be89100b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16644,"size_decoded":6123,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16644), with no line terminators","md5":"0807fd5eaaece4f5ff428c55e35548b1","sha1":"35d10e27175a61fc8d3c9cd18388928a9f396700","sha256":"2c5394be022e61f0aeade534aa2c446b4542c030031a2283d707e8c466de0e87","sha512":"95159e0b037ab9f520b3cbc1bb759b54915246be614bc27cc791ca4ec924bc0d55910335e8d4b546a2bea80a921d97646591ccc7d3678a5962e4fe3e64f8a77f","ssdeep":"384:r8wvE2NsoJ3nYWIfSmmE/XUCJ7cX9AyUZGl+:r8wvAoJ3nkXUu7cX9vi++","tlshash":"c1722b390315423c419302da32d9978d96b72842f759109efba8d32d8ff0897d67b7e9","first_seen":"2026-10-07T03:41:39.894119Z","last_seen":"2026-10-10T14:22:55.091737Z","times_seen":206,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/anchorage.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.815Z","timestamp":1791361068815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /anchorage.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGItDYzHEnF665yOBtv6tFUrUbaGdJLYQBqJfSXwiNCDHNXaePshXBq05uWH33Y0Kv%2BT0UnvAonEJhAbbas2kAcuBty%2F8frl%2B0z%2B8%2F3Oa5%2FrnFF4FEqQOPHMysXX5DyVJW4tvbO3BxU%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-2b91\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b81cdc5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11153,"size_decoded":3782,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06e465c699a985be9ba16ea6b29e6b2a","sha1":"2310d8cce5adcb8287c88ce6b881cb52fa6e1b6f","sha256":"e6a8276f21927cd10cdc68c0ee306dc0d5a6aa317598af4226f767d247360042","sha512":"74bfbb83f4efb6275cf464c84dd30455257f96459dd8904c546dc373877ada923b01d62117d4369d672a46d2eeac052446a8ab12c3baa1e560b09a1c4195acbc","ssdeep":"192:wJPyVFBxyg2mSIFUZbUd0WO7nl9sqopg8SqoO5gnaJqoL76cVj3:qE35aZbhnlHWf6Lytj3","tlshash":"98321d570338177df9875d95993810a33fc2a8cbd364e1eceab3aa01a54aaf18475d3c","first_seen":"2026-10-06T14:34:19.057897Z","last_seen":"2026-10-07T08:34:03.391272Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/agora.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.823Z","timestamp":1791361068823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /agora.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJZGj91J3E8bkqUqH6iTjNhisnydCM4yXq1or4tdgTW0PV%2BYMFU332l4n6Dwm%2BcpTKPPGd64joze0GwQH42KRHzxbutprW3Qi6j38GzDQrRsN%2FR69dQR2%2FWUvzgH6tExghU3rsweT08%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-c17\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b82ce35693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3095,"size_decoded":1885,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e2a0f76a14f606e6346fd3e87911a8","sha1":"6e145b4baa5cdb6e440153397f3c6b0ec8fe1e11","sha256":"4c225e5d222802da8c75661ca200544a55f36dd30fd99ba22268bf6ac813fbdf","sha512":"f38f5e495f6a426fd937aae9f489a5281a95eea55f0c41f1b974c566d7c86bcbeba295b2f6bf67e569a24a2764a648733ff54c668ac1b74493618744bed89e1e","ssdeep":"","tlshash":"295194da371ce144f500a7ff8a0a7039ad0b85e2faa4d296c5838e5db14245d5cacef6","first_seen":"2026-10-06T14:34:19.114019Z","last_seen":"2026-10-07T08:34:03.353103Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-08.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.850Z","timestamp":1791361068850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-08.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1cc1\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNx48tjXa2Z9C1OP8QNoAPE8cNW09%2FCsiv1jLTul43iuwblVaK3ASasMrzHOzvkeSXKOShPjZARNyiyW1CXSQO0favMMNaaNlhhJhUNrX7eHoPtxYyskUKjXX3t6EneIiNVFpxoJrUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cff5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7361\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7361,"size_decoded":8061,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0f356a763413cfb57b3895b91378b906","sha1":"63018bbe2a65605c190ab323590977e9fa7ca512","sha256":"861c359a6283ae947b99876ffd13f0bc60d5b3a3f9c044488a5604b8f6920da2","sha512":"b624a67c60d1e69928bf745de9824e13a592817907bcbecb39a94cf30cb6058b934b3214497a1a69d6e1cb7a7a2a6dbaff8d48a9590c707bc4e5ce9a5eb756f5","ssdeep":"192:FsDFziQRfjcerCn3ANaaoL4Xmjge6L9anELgWc:FsDFz9jc6CnD7L4WjgL9PLlc","tlshash":"87e1be49d99ef1059df92732685c7125b2059b421aca200cdf91e9a783e80b2bdbdf63","first_seen":"2026-10-06T14:34:19.130115Z","last_seen":"2026-10-07T08:34:03.356626Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-09.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.851Z","timestamp":1791361068851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-09.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-2074\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEWaqsKL5xurPSrFVrcMKRqnmHGeOMvQavpKKbbQYoSxocemXTmSNdHXTq%2B8AaaC8LmW6EWN6k7MpuB1scYa2Xt0CBMkRMuWaSzXygsLLqYd%2FiPcSDyUKot4hnh4sVaCitm6uCgXHTg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d005693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8308,"size_decoded":9010,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6cc92f7b515886794464fa243ca87fff","sha1":"1d84df7acbd2b72126690a16f5e7538369f30a51","sha256":"2a1b8c7cc96b74cd77c0ab960aaaf26a3e24f16915f443631f9e8135a9d656f4","sha512":"c88609035ac91ec627ea58d259c22a5d2693a97c16a36b8c6e347c2487c16b0137de4f5d6c45b361a1f2e71cde20276b1f9cf8854e41c6f0f15e77653f1247fa","ssdeep":"192:qFWiavbe2cG2TXRVUbPVkRQQaT2REZUGhQDWkmPkuuWQQdwBQ:ViQe2ITAbdkRQ7XQ3Cd6Q","tlshash":"db029ec6d74164657c5cd6a475e5bf44aa2c93a2079e1ac3be26c83bce3b3713e43280","first_seen":"2026-10-06T14:34:19.106333Z","last_seen":"2026-10-07T08:34:03.363047Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.413Z","timestamp":1791361069413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 04:50:58 GMT","end":"Sun, 03 Jan 2027 05:50:48 GMT"},"fingerprint":{"sha1":"B9:E0:10:33:62:33:2B:C3:9A:8C:F4:F9:95:7B:0C:7E:30:BA:B8:AC","sha256":"6A:97:70:5B:67:0C:62:9B:54:B2:6C:34:D1:9D:08:5B:7E:A5:90:C4:4B:CD:6A:CD:B9:54:C3:F6:A0:3E:0A:69"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a46b78bc0aceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T19:43:33.472137Z","times_seen":19036048,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.844Z","timestamp":1791361069844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"hXKUaxE63lX2yO1MJLF-7lJ9tMA8JPxKylDBFQwCE2weBaS_D_rnGZZbxU1Id7RZqNIq4kbrmMS_p8zmZVbrO3dVVOuSov2Z4Jz7tRr3"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hxLSVsgMEFbhnQXhpmnq0FbI%2FVCXOmcWeCGBKTJB8WbFv2hQok%2BZx9K5u1TGbSaWiWJ9N8U5U5NhK1pKEw7yja9Ppz4JLqECa6R4cPn2SDDIFOQzzdyWWotbSXtbpCkFC5FhUZPBAuumCtS%2B7edKcWtfv39qq8am%2BdM\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b78be89130b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3269,"size_decoded":2154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3269), with no line terminators","md5":"0190d7487909c929c1ad1efca7a82f74","sha1":"df4df2bc9598b11974efeafc3bcf58d8cc0b8e77","sha256":"ff50802447aaf86238e0d5dc9ddc6e1c7f41799235a5dd8ee3cebe14cfbf4d5d","sha512":"0a97748742be2aa60d4ab9d9116d226324cfc4eb56c6418cea46e4c6ce28a39a764fee03c0b773fed99687343c5816117955edaf140beec6c67bdd0cbc01546b","ssdeep":"","tlshash":"ab61978f72f616de0bd79171285f2b17c3f8a82c140568e43938dde5a96ec49ec25374","first_seen":"2026-10-07T03:41:39.886267Z","last_seen":"2026-10-10T14:22:55.099119Z","times_seen":230,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-11.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.854Z","timestamp":1791361068854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-11.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1811\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKYEeez6kHWtVw6A%2BIDkYREFLGqjh%2FSfMMDorawxDq9HwXOetfLaON5QZQDygMhJWve%2FR8SYSI27bmTWiySuWTyMJW4Fsdhj6jHvQID65t%2FdCWE0lgQt%2FNz96l4FEQzS1cSuWitpHCw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d025693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6161\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6161,"size_decoded":6869,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"dc1e2d7e12a00c52c8aee08f9309ca0f","sha1":"8effaaad405d56aaf3424fa1921404ff2d61945b","sha256":"3981e3bdea2676cdb98b54d32055235cd7ac7cf3014dcdb03055a14c99baee7a","sha512":"b8ef8293482866ca7b1636da2856efdc98c8016dfcd78314252b4806442c0e22bb149615987d4dde101de5ada307a93e6ebac676233e1d2a504ed4641d8fc5e5","ssdeep":"96:rW8iwvlpWKPcGH01TpKPZVmUwn07PZkW5wnt1pN/2H7xiCjCvweg1433dMJRXdMT:E4lL2NKBVm/0aWqt1/20v42dMjmR1","tlshash":"25d1aee05dde898204cb062231b87e781d373f60048e875fdb8da90696516462ff6b64","first_seen":"2026-10-06T14:34:19.074069Z","last_seen":"2026-10-07T08:34:03.442735Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-12.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.856Z","timestamp":1791361068856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-12.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1e03\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhN%2FPQO3s26ln1JRNpe45Xt71IscrdMojjIlx6z6CflXYQyjHsNO1QlC%2F7byJyh48HF7FfqI5yC%2FySpWIgL8jk7ogPPYxseEQc%2BnIqZTbifKBLt36pdxprqV2CuovTuWJoNBbXIWc2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d035693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7683\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7683,"size_decoded":8389,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"12976e51b2538a842c74253499a2cd2e","sha1":"987716d6de1ae58ecf5cd5ae7184a934063ff63f","sha256":"8aae14f69472cdb60c5d6e6873b58b796e46f2b945ccaf056dbf5fe1b4f28a30","sha512":"b78d9a9f2d59ed3c53fa3a99f450745784bf1171204e7682dba812407dba25909ea78bd5d03972aabb8825aa44e4508f732edae901ef33b7c6383bd423faaf53","ssdeep":"96:rY7NPwfzjM9ke0/r+7BCzsRXUH1MKWwJ0ZSpVMHqSNYpV/i31L+JVUUrEqQuO+55:pjMGeZdqWwJ0ZWy0V/i3WPrET203ix","tlshash":"f8f1afc02857c7a89ec0ee020b1d513185985e5f6e9de43d9096ac3ed39f5ecc0ba6ac","first_seen":"2026-10-06T14:34:19.107374Z","last_seen":"2026-10-07T08:34:03.374789Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-21.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.866Z","timestamp":1791361068866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-21.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1d70\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BH0KiaQHPSgn644mplA%2BrUZJMwyn%2BlsoZwIY%2B%2B3spTDi5bzGKj1J0UuZgQkXtCjCfRoTdjQ2QUIxriQrjMhfpbJZ%2FmUGYcJdPw0wmfY2lzs8e%2Brb%2FzjqPKVBbFEopz8pv4ywoCoB0w8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d0c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7536,"size_decoded":8248,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f3d75caf66a4b2668f371700302eb528","sha1":"375fc3965a77d8f935f5666e6d849383948da149","sha256":"849b11467cd5d2ba9bdf65e46a91866e90bf46eb946edaa68bb428766e93e839","sha512":"4a4dd0c40614de6ff79da00218b363e343bfd519933732646850ad791d32a84a0f7451aa388c268c64d0b135b99a18a93725976c20f0a3ca98b9b7a5d3642be7","ssdeep":"192:L4u6SKne1jCbaY7rMzlMoLC754bxaBjLVd4MbukY0Eimql:L4pln1bl5oLWNBjoMbukYfimql","tlshash":"b3f1afbc5bc29df15f9fc08b45e6b0ac0862d2c19200962d7e75f52b50225deb3d02fa","first_seen":"2026-10-06T14:34:19.108378Z","last_seen":"2026-10-07T08:34:03.399311Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/heading-glyph.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.888Z","timestamp":1791361068888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /heading-glyph.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2F77%2F0eeacIUVb8RLlkUWBnihx1VZ04EEC1GbdR31Q1ZvZHvQjq3JjMQgIhQqP7XbujoMau740ADtu9g6rQzpqjnfqTJ6NMq8szP7UPGayl0%2F7yybC9Qr0FR77dtNQMc%2FsjONSuv0cw%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-f20\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b88d1d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3872,"size_decoded":1199,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c45aece8ab0b685a8b1a16cac7095a20","sha1":"9f093e367c33a7d932ec38728901b132cc3a651a","sha256":"5ee65441a9372238e4a24d66e295a4e86d291f312a64e880bc1accd06b8eb0d1","sha512":"63d95f8ea05ee451a071c69840e6aefe3613f24ed46542407590e1210bd9bdb1daef031a611ed842abfbc796c94edb2eb13b1a4567f0149069df62a34cdc9691","ssdeep":"","tlshash":"d781401c303ce4156f02649cb54fb586e61f13ca8f7d4fa62049a93eff845e619462fa","first_seen":"2026-10-06T14:34:18.986084Z","last_seen":"2026-10-07T08:34:03.454606Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/HMN3opxbcAACXq2.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.904Z","timestamp":1791361068904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /HMN3opxbcAACXq2.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-4b61\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YE6M0AMQy61n%2FbytVy6kq3oKNLWXghtUNdNcfS9dMed60dFv1DT06a4h1F8lWbeayH17aasICwL5EeAdREgnk5KCTA4WclQJ%2FUqsBrUElM1stbLmX4ORzfFlBAY4Y9gETsRonAhq77E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b8ad3c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19297,"size_decoded":20000,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"ab1d5d0b8eb0820522bb1397b399640e","sha1":"b5788ee67831a03895373ede6fad9a8a8f2672d2","sha256":"a85fc2aae534cc1bdd4570ee6e452e7ff1b792de7e1430a6aba7c0e07bdb69d2","sha512":"7857e3aa4bd63e002ba93f1e2442f75bac1a9f2d812dc03c63eb8e5ad272bf999410b3a164212b1d85a370790d99c0d5048995164c77e798b05e685bcd8198ea","ssdeep":"384:sri2UHPQuuyi0n9uPgRhvZjtHXIskFEwWEWuM8rQPHBPLRFfRCjwJSnHYp5X:92MR9RBdGsk1fMYQJP7JuHG5X","tlshash":"f782e05c49f2539a8caa3567d0d6f44b0f82db0ab4f13c8fabcadd4e8741068102a786","first_seen":"2026-10-06T14:34:19.08739Z","last_seen":"2026-10-07T08:34:03.361538Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.409Z","timestamp":1791361069409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"POST /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SM07VL2Di3pRaA%2B7IRFuyQ2ZkUpAkA2KSNyb1cyDM8%2FOS9omJa%2BTpukfm%2FkEBOKBUFhxgz67bDX%2FzeF68BUlLpBmdbAggOfJGPlfYLUa6QSMLdNblwDNc4FO\"}]}\r\ncf-ray: a46b78bcd933b4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":842,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c9005ca82db3647eee7645fdf824f70","sha1":"251b1caf8c9e49be52d3dff8ffb282c569622d91","sha256":"c2afa93006ed9d738957bfe6b6b86e3f30eaa3eac180ff054e0f1f360d32b04f","sha512":"4b6420666fe8c25484111208c4e0ab28b47aa6e055700c9f29ecfba1e6e0eb7ef83d5de0e76e9e7defb7ebe5576ea7a074ef5edad896da93d1620645a1e6c063","ssdeep":"","tlshash":"98f08cf0ec06e899f8899846e8d0784600013cfd34dfce0c4549ba2b3ea21284f84aef","first_seen":"2026-10-07T08:05:27.608274Z","last_seen":"2026-10-07T12:36:00.953947Z","times_seen":98,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.417Z","timestamp":1791361069417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 05:07:12 GMT","end":"Sun, 03 Jan 2027 06:06:45 GMT"},"fingerprint":{"sha1":"26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94","sha256":"D3:B9:D6:46:D7:15:C7:31:22:E3:F1:1E:7D:33:32:39:E7:6F:4D:04:1D:79:CE:C9:A9:E6:17:8C:DB:A4:1E:8B"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-mantle.cfd/\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6IwbHIyAExdjLXu5jIlwkda0VPeRePt%2F6vfGLn679stv%2FPvXJTGtWDjbf%2FLTqR6IXhLlCfU3wg8%2FnRZTr3VpRxcoqhZW1Y6CXqY6Xb4d2bbgiTJ%2Bvg3b62t\"}]}\r\ncf-ray: a46b78bc0925b4ff-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":757,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T19:43:33.472137Z","times_seen":19036048,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":4,"connect":18,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"1rpc.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/tether-gold.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.822Z","timestamp":1791361068822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /tether-gold.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ci4h9%2B6DiNKYO2TP9nip10GqQei85tcbIy2M1h4MgK5CVlPGP%2B5b6AhccDR9PdlNh3y%2F5u%2FSO1o6%2FDcM58xlm4kATRoJHYSlRHB78w97ENNkrVwP%2BYqKWHG%2BoX8VpxwQe8Z%2FrrDYjGg%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-157e\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b82ce25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5502,"size_decoded":2911,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f272f5809bdd13d7f6d5738582704b75","sha1":"a85cb222a9c99ace6d2c2cc746213e42b57eb06d","sha256":"0cb8a0dccf7f87dbc768e0443cc6bf7d40cd559c6e1c76d9d6e250b4cf0dfbec","sha512":"00a413e8f247577e2e0f7888ad551a4527d932943a7c4f5743b92f499e8e53db4a632a7aaa08e56ee377967bdb4d987f90083b3248fd85ea78f4bb02907fcb8d","ssdeep":"96:+lnd2f/gVyVHKMuOgjDxVY2BNOHk8I5nGOuD6ikY8+Sxq325nTX8n4eNu4:YwPuO8VLOHSnGx7kw6m4eB","tlshash":"3bb1daca676873f0e107f7f8d91b89b16a5e2cf65f82ff18c3616d597a8102c98544c2","first_seen":"2026-10-06T14:34:19.090086Z","last_seen":"2026-10-07T08:34:03.433172Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-29.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.878Z","timestamp":1791361068878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-29.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-27c6\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bO1ZXcbc%2BlqdT%2BdcAvgepTszcG66bgQr58c4c0S%2FBUMzonwZE410zfNjV4rnV8pa7cP0NSAZXC5yCMndz4RBm4jHn69iiF01DV5D6p5fKJyExmRus5LWE%2Bo8TEm12QbQiA5r1Av3y4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b87d155693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10182\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10182,"size_decoded":10889,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3bc8915deb0e9365fe5f3ad44291ac2c","sha1":"130d89e6df79c878711645530905b10b139cbc9d","sha256":"d7ff7d13c1f1a0ee9c451751b53549c82d8df64b09a2dbed84ee5b51de4eab44","sha512":"b78d08f42b9f3d4a93985a2018279a8641d1cef59bf14f5c6c3ee67d2e1ab4a1855237f1930d603fac0f4908094ee503edc24d24b461fec7e766eec60d41c8a1","ssdeep":"192:tAPtDzURhUDVWbZjhlfK0mC7em4fJ0UVixEfzrNkc5:tAPBCmoHfrmC7+fzmi","tlshash":"a522bf8866d131f2d4ca9e80b5cf1ce13d69757a36005388b064c18167caee4be17aa7","first_seen":"2026-10-06T14:34:18.979221Z","last_seen":"2026-10-07T08:34:03.446749Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/meth.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.835Z","timestamp":1791361068835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /meth.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1329\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2B8VmQQ9I0jpRuZNDMVr%2BNkM%2FzGGy%2Bcxi9KuDmPHJKPp9E2BBbINpEPzwv62GMV9vkTg2XBwSAi5xZuKDZiKEV2DlyhOriXrioC6UEvMj3X7npCmhgrCVQgxnVfF8LZJWdGQMrgk4Mc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b83cf05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4905\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4905,"size_decoded":5611,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"20410150c1d62728314005e7a4938289","sha1":"7fe73066daf8a7597efecaca0a56a3b87fa99415","sha256":"f659be3a7bf43f0cad320103f672d716f51559e595eb5ac2de3a10c15488b9f7","sha512":"5282826fb97ecc1bfca4d3e53bddebea0d84bdef4f4c17d058552070e3860411f57a6feab255c32f878ed6490ff2723733ffbe5c3a5da266d4eb3e939142644a","ssdeep":"96:p+XGbCaIh9r2au4uuC57u6aDqCQIA8SyfYU+NUbQAs5ExfVIh:IXdh9DcFSQIAlyfD+Ncs5+dS","tlshash":"6aa18e70798950f5301f01ad86cfa93e289b3117ec0702c179295f78592dbbf3866a4c","first_seen":"2026-10-06T14:34:19.099372Z","last_seen":"2026-10-07T08:34:03.419794Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-01.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.841Z","timestamp":1791361068841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-01.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-24aa\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8ffzfzzvvXkaGQ3OO8td7cQV3xmlbc4GTYZ3zcdGexjBhInclRkH5mNP%2BY0joeRWTz17x3ZqdI1bWrDUemp6oZ3eUJTXYbb5GqYJNYdp1s9ugsxbY5G4z%2FNY%2FLaNgWHeZgLFSm37OE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cf75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9386,"size_decoded":10090,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2cf875a94b49089d0ffc9f7fbefcdf33","sha1":"6edd885522377692f5191a36864cd2049de5e6f1","sha256":"ee704a4e8580c3bce8e5e8edc6f9e9797e7092bb7e74d17e1745869f7f0fa4d5","sha512":"a962d62a30d78255c1247747f24e0492ca4e3cbbc31019378b50f35d03ab3ffee8f9597923d85a593f8253052f28c7726209e39a8c6995b8a7e3fac0605c1958","ssdeep":"192:pUiZns5zzNGrW5FOlYppZUTf03JEwK74sHhyzoslodQcbbkmpW/:pU/5ca5ElYppZUaSwUP4zoEoKcfjA/","tlshash":"7512b0e6d4bd3d71d5d46364259f410cc92288aff1182ae96f9ea3f7717b49b0620307","first_seen":"2026-10-06T14:34:19.09137Z","last_seen":"2026-10-07T08:34:03.372447Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-03.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.843Z","timestamp":1791361068843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-03.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-270c\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQ86LfFw8cbI3uRk9%2BPN9ZebX3xXF4eq0cVHLowAwyd4kbXPQhyoCSmVtvLPmq0NQiOE5RGjOUxms8cgUL51ERXsOmmV0t%2FwwmUlUlW%2F0kahyrC3edRlD3qLO1RT2O3pu6qaziC2CpM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cf95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9996,"size_decoded":10700,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"bf4c93b7c6fdf27b3c0710a50b51c911","sha1":"6a18931de5701d0ab92d106a523dc6ea4f9eaeb4","sha256":"a760f44e9824fff97caa1beba6b3b8533b6a6d87e2607945f14c642db34fff34","sha512":"ba20fa8461c338043fdc9365fd14aac7c56d1753e7e5363a1a7851b4348924ec41a43b76263bde37e53f7f483d876cd1c1339164b4e17479a7dc9319fc1e18d0","ssdeep":"192:r1pQObiT/nBD6Bs3XLbcEsl8Sl1CYCvdR1HM1PGGu8o2G+MfBvOjpv/7Pg:XbOR6BWVsl8SN1OGu8o2GXWVrg","tlshash":"b422bf547c98eed2593e8fa6b0e55ab830602320951b4bb012544d6fff2e561cd453ff","first_seen":"2026-10-06T14:34:19.117265Z","last_seen":"2026-10-07T08:34:03.417909Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-10.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.852Z","timestamp":1791361068852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-10.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-299f\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXE1ZfRuYOqANSHEPJsWFseLdrkfqHeM6xal7khRxWaQp9Tu4G%2Fl8ft3mwFxdRiv%2Fx041%2BLj%2Fi%2BEeRxuybKOHQ2Fk9QIsREs%2BzywILHs9ChYYh%2BMJsDuZYrfwtyW33hsFOOlK0R5Jnk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d015693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10655\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10655,"size_decoded":11368,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"90c864520a1047f23c35b276801c2f07","sha1":"854d0a52fd0b8d258f07fd45a6003af622e09290","sha256":"b0f7c0bbb3eb33aecc4149a078596cf56e5d09cadaa7c268d587628d3b1944ef","sha512":"dc8d7409cea0b97689bc9d3e329a3d5afa0d901787d4e28205662716b7e4e29e6badb812405250db40cc7f8dbca5bde5b03de0e5033c08dc146d1d55b48c8265","ssdeep":"192:94JoOcdO0lE9VuC3QJbsDNCcDdIJBG1avjZ76g85GOoVS8UzPjHIlf7yV:IzWE9Vb3WiVdIJo0vjZ7785xoFwjHGW","tlshash":"1b22c0c45169a07e388d5bd0141f1d1fa316da8e2a181eb77b3d3ee1760025facbf210","first_seen":"2026-10-06T14:34:19.082982Z","last_seen":"2026-10-07T08:34:03.387107Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-13.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.857Z","timestamp":1791361068857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-13.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-205e\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjd9eV1oakHpjiVbNvYlmujTmbPAO4vFGY82c2dmoVRPJhgxqRscacqWZPzPrNACzrz6jyNsN%2B4UnHPw3%2ByXdvwdzedC9X%2B6Mk%2FYHKYbYND6tW%2B2SiIUm5WuX4LJZveIjN43TNS19LA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b85d045693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8286,"size_decoded":8994,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"29262f88ae6d5c714b21a036ece6bd05","sha1":"1fda2c7788209092c59f920b37e846d05af1b5ab","sha256":"5e4ad74d97ba93d79eaf69fc795da4277d7669bdd621ac7832e701e8bc2d1c34","sha512":"2568811966984b3f35ab29c2576022222988d988c218535e3a083f5a3dae605dc19ab753dfb3b058aae9f6e6711f12eec9d94f8126edbec345a35dee972f1c85","ssdeep":"192:UNTo+zasfxrnxVJ1QwAm56ItNLmO9IqY34VB+Qm5s:UKka0rxVJUmIuNq3fo2Jy","tlshash":"5c02b0d7f3ed96cab277f23154671a446060dad9012818e104eafab77058e90713ff59","first_seen":"2026-10-06T14:34:19.084533Z","last_seen":"2026-10-07T08:34:03.381532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-20.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.865Z","timestamp":1791361068865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-20.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-237c\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBlN4HPr02ZWXlXZIerpKB24DFue99DI9z5QD965bHSxUk3RTJ4YIDcPVeQkJ90GxDdD%2BHm1pVX13JYc6X38ZsmIeSZ5ljty2Rgi9GzzydA1zz%2BQlUfoCzWedgWxjpMIxiifLFEUgdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b86d0b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9084,"size_decoded":9786,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8930740094fb2f172b7f5666906c36fd","sha1":"c973b8e78366bd28dcdd78f1f4a00d7f1254ac62","sha256":"e111aae1f6b463ad8fa9fdd5f1e5171ea735250dbcef26f0e58e8906aad2775c","sha512":"d04076e580236b5469b2c32e4ddef8f587c4f266e39da9158c3644d21d50c167341086eab73eb65f184750e582c82bcd4b6ac877b6c5251c5a7041de1492a818","ssdeep":"192:n7tRTTVRCnzEhjwOzgpZuUGEa/8fXG6Dk0TKWGKSdg:7tRTpRuviKaEW8+o1K3dg","tlshash":"da129f0e76df748f26e481e0cf1756bf3978583d1c84049688b314bd19d7a428b56b1f","first_seen":"2026-10-06T14:34:18.975233Z","last_seen":"2026-10-07T08:34:03.360801Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/institutional.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.893Z","timestamp":1791361068893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /institutional.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bcnun1lsY2TUl0k6yUJehNd%2FbduYbissE0FDMyISt%2B8Xq2H5gO97REXJ1N2%2FBg8XkUUBeH2aDmDEo%2BzWblbPG0tIJewSV3srxAQUC6DeiTvVjaXir%2FtIyeZw04HGtnQiEU3N96C7Bt4%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-8cc0\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b89d255693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36032,"size_decoded":4534,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"121ef75ebb89bd6a64769684b8a204fc","sha1":"60c36836ae9b94b8cae2c54cbcfafd6f1951f20f","sha256":"5ed9820a4797c9d72c16ac39e4dd9f04355cad4edb8d922d4e05ef26ff0afad3","sha512":"052cb3897c988d13d78d3556bbf36aa03b265779b0fc9d996dce5faa00ccda86e354271fef713cbbe7e860a859e6eb8017cb0a25efa0d81307aab93d25c06eb2","ssdeep":"192:AOxmSg0SgZgTg5rPyy5iAzj9ebCJIemcUQdNYd/KE0SR4DAPhuJ/8fES4zcuQ81o:7RKhGLEdvdT","tlshash":"d0f256fd71acc420288991b8e6d7fea94e4ed977230073e220254e9dfce4d665b31366","first_seen":"2026-10-06T14:34:19.109703Z","last_seen":"2026-10-07T08:34:03.466632Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/20260818-173059.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.900Z","timestamp":1791361068900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /20260818-173059.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-be2e\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8P67rT0vbyBO0s9%2B3fRZjmNSwxcAADn0KT57atTQ90fNj6AketrGlzcX9rhKwkCZNbbnUiPa6QyllUDjSaSIwteywDkMzfBXv7YDvsG4FfsXlgZq13HyY%2Fc4JWxXzT2SaaSLDEk%2BpHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b8ad345693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48686,"size_decoded":49391,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"fb98729788dbbcd81bee054aa61ace3c","sha1":"45575a187766e053f2e7a63a9e378e0cc257c68e","sha256":"83cb47896b4f9ee58466d2942ae7a198452ba1e3e4a48bb463efe9d6249aeef1","sha512":"14d39ef8a52f7682694fa128ab3da991543385f4809a39a550669d1ceb3670ffc98407ff43e0091ccc0116b7a9d6ad9f5fecae0235e926b78c6c7b553176cf57","ssdeep":"768:kaF599Sjy2uGTsV54yGvNS+QiVWgGVthpTfF/ahTo4b2eDYZywNOlXQ1dTVutS8s:pFH9qyFjeVq6WgGVNRaL6wYZrVL8iJ","tlshash":"072302e8f0f4e8932ded23d2265ea4639af28f913db158600c999ce941d54d3d812fdb","first_seen":"2026-10-06T14:34:19.097321Z","last_seen":"2026-10-07T08:34:03.424742Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:17:48.487Z","timestamp":1791361068487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 06 Oct 2026 10:18:07 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SwxjxCNzBbYHG2FlC8RIfijajEPQ2nOMPpOLnVliRqeH1Guz%2FNQyOrqm4%2Fpyg5yR8VrUrV9zJXf62y8dfKNjI5RYnhGy%2BnB9hKKzc8KQBxBGglwqSg%2FcYlSn6t9jKLDNXdEX5sPYuM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b63c735693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166307,"size_decoded":20768,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (448)","md5":"8875a470b83bf6ad236227a53824887f","sha1":"e7c28ca3305f7d7a8bdf2ce341523f315d894c36","sha256":"d76a9215212b299859087deba8c794b38135cd3060cba5acda36c71b38c13cb3","sha512":"070604af5e7ff04ed8fc6a9339c7635ba9330b4e6f4b1c477f73e772b1bdeab15f3948f46220342a42f44da42e6b4863d62d195cbcfc41fcca62637936ad5ec2","ssdeep":"1536:gEBF7BCr7kY1JXBWayn9TOEgCMeyNN7DCd29Vd2dCd29V9f9Vd29V9f5z9f9Vd2l:ROXybyONW8dx","tlshash":"dcf3c76062b1263f224bc3e8f871eb0a6e999617ca5f494cb3fc21973f85d95c92315c","first_seen":"2026-10-06T14:34:19.030507Z","last_seen":"2026-10-07T08:34:03.459208Z","times_seen":9,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":5,"connect":22,"send":0,"wait":58,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-02.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.842Z","timestamp":1791361068842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-02.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-294b\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqBGz47JcimRNA9F9WbgQ2uYH9yGUcHcKchUTwruALhwmRdrFwRUws4LRTWRtTea5y3Rrk5NuyRudjVw6Tb7eWGgfRjm0Udqrv1Jh9EPXN%2BGCoynywZ6g7YE0%2FmawGWS25j5pKeu27M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cf85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10571,"size_decoded":11274,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5692becfa7d7906f1adc45bccb309db4","sha1":"bc4bd3b74700671ed37f15f9918365875627db78","sha256":"d3e352267668a8c1e6c33c1b71ce5f84b3d35ef27fba6132244661177f41a27c","sha512":"8b29c854518b0972614b9922f80991ed1a3addd958da35037509a3b07da18d7a512ec16579dd26d45433019dbaa20c4d174a1142f2033a74e4c86f0b87b347a7","ssdeep":"192:fhtI47H5muWlvNfwGLCz7FR6IcqQVQdmqsxNe8OV/2Qg/d:fhtIuH5muWl6OCz7FEPQdmZxNlOVOl/d","tlshash":"0122b0d09862a0c9bb6a6388ad3e2c556bbf0ffd6e4c5d6006b644a475835613dcd04f","first_seen":"2026-10-06T14:34:19.116068Z","last_seen":"2026-10-07T08:34:03.373705Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/composable.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.892Z","timestamp":1791361068892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /composable.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3yqQWmE7GWtCtX1XbNc9RwRBhWlaV7ENmj6ULvwj%2F9hPKiohXFhg29mkoPISbr9%2B0hFf1PtC673KcSJuGrJd4HqGRPxYjsHDraPt2hqccLmhHfut%2Bg7B1C3rdrbPG7HgnxJIUchWVI%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-862d\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b89d225693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34349,"size_decoded":4082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e1f555f3d6f30109f89fd00bcd303d4","sha1":"2a07cdca1f47a21c2da74237c92d04b38c181524","sha256":"3750264d91c1fbe2cdf056415c25af324b63701adb6c367e0065259de7fe5102","sha512":"1dc4ceaf048e7edda0f4b1f5fb1b25d5b04f8e9aa58a305753f04dfb0fb5b773d98d160d39e47322d7ce760756013783adf58d5cc92cddfafe29b884e095673d","ssdeep":"192:zOgCYmnR5OJw0y2P6jvAiH1Hii8bhezQmqg3Svat0dJ4tnyNkB0HT62vxEWzuVQM:6BXgdY","tlshash":"0bf223fd71acc410288991b8e6d7fea84e4ed973230073e620254e9ef8e4d661b35367","first_seen":"2026-10-06T14:34:19.04581Z","last_seen":"2026-10-07T08:34:03.464669Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/20260818-173105.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.898Z","timestamp":1791361068898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /20260818-173105.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-97b2\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRFlB6Re8iLgOc36jxTEYObjKoS%2BwiE%2Fh0xqhUhI6WjMMpNi3poNok%2F%2BFuzwjyC4AP4Y2iDrgiwMzBG2%2BX0wiRezogkvIQ%2FPAGg1SAdF4Coj9EeIhYrmLjYBCdGC%2BRgOCZQxA8SXzmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b89d2d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38834,"size_decoded":39547,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit colormap, non-interlaced","md5":"f2916ac00ca24e8e96efb27254e0887f","sha1":"0726ab009318dcff4934800ed067011aa5f5a8fb","sha256":"47444552a74790d8ecda69ebdc0c571060f2be6cd6c68433ce02d5d927b534c2","sha512":"024a164d9db57278990a5ab5c006298bafde6f21069ab27a7f12855aaa800802a0d989b0dbfd2e3de80250153e541252a4e0d21f186e1446d2523e3a41398357","ssdeep":"768:6vS4xsjf/qgqoMmuHv3GlojyL8VDZ6uaxIucwc0+3tksRE/NziOuPOF:ex2agyHv3+TQF6/6wlaziNzRn","tlshash":"b203f1295d74fa3b362a7a415bd4883e1b4733f4b0d1bae1809d8fcd46661e8c41b673","first_seen":"2026-10-06T14:34:19.09641Z","last_seen":"2026-10-07T08:34:03.42328Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/HMnypszbkAAw_nV.jpeg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.903Z","timestamp":1791361068903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /HMnypszbkAAw_nV.jpeg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-549a\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcHR1NYmPdsLtVDugrX6zoYK86Kl3fJ%2ButNQbRG%2BFF1DZuYo89PAJEdr5kUc%2BPgOz81bX7sBgCmJ0PnaU9ROY91GZDwmPzIGtwDKqY74br%2Fm3%2BS2k34Zr7%2B%2B6vTykA29XHl1HX%2Fq2oc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b8ad385693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21658,"size_decoded":22374,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x450, components 3","md5":"78f36aa46ff3c908fac4204ae1b6857b","sha1":"71acffc63451e44e8d27843f683b26ed55fb8017","sha256":"9d2a8ac4077cdb7ef44df664d38873034e147c3b520d053d31e5f70beb1213ff","sha512":"9b8b10ad1cbfa52a7ae32b342a34a137b01df355c2b1279e463ceb934536a38d542d778f9faf7090fb0a9fd04c12e9d5d1fc4e8f9b65b9ffcc94dc5f56ad65da","ssdeep":"384:3kThrcibwbIwOU9KSgPaSFxp5BdkEHDcE/n9R6nWqGHNKsahRxCLIj8wF:ShrcnMVU9jyFJB2gDLlBHNJahRxCLIo+","tlshash":"8ea2e1bc0b0d1879d94ea8fd106600f6ac20f30adb7576f2b6c656b44b58e4a9dc87cd","first_seen":"2026-10-06T14:34:19.019842Z","last_seen":"2026-10-07T08:34:03.385739Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/corner-dots.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.905Z","timestamp":1791361068905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /corner-dots.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ugi%2Fs2eRb1maNW12cbbSSPPTJqjlc8Lg9fzJctCq1UKoTaApJOfUPkhM%2FLqzJEe%2FvFxhUDUztDqwjY%2BQMNUjTrg5Es1tuT4JXMYbTRgmwQ62oZKZhleCz6b3k4HYGqbLinDa8m06uEM%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-1416\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b8ad3e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5142,"size_decoded":1085,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"905f2aed0c35cc53498b800ef46ece37","sha1":"aa38e259a6029138258c40b2dacfa6e59eec327d","sha256":"c7ee18a9bc27e21911f9b7fea932b5461cc53b8de72e1b71be67c161e4c40a49","sha512":"a7809299b05979f9230bcd5eab555f854414ba5dd6350953a934aae044cc4204f5f6c544886c50b215b7130fde99f10acc0e20ad9cf866dae9bd9acacd1dfff5","ssdeep":"24:tXVS6uYqXq9qJqqqTqLoqkwBqbq8qBqaqbtqwqsquqUmqoqnVq2qLAIbdqzqoqbM:TS9oXvA28NuHb7n","tlshash":"52b15225742cd0580b06848de19f6a66a60ec2c30e5543fa916e3d7fe3288df6c637f9","first_seen":"2026-10-06T14:34:19.007405Z","last_seen":"2026-10-07T08:34:03.427856Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.20.46.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.407Z","timestamp":1791361069407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 8c7131d8c129c6006efcbc1bdb860f60\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46b78bc8dde5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":819,"mime_type":"application/json","magic":"JSON text data","md5":"d0d3e93f6148aed42e358238dad3e74d","sha1":"eafc690e3ba9019156190084b05b57bf84bcbf66","sha256":"61afcd2ad8f60ba57d56d262f6a721c664dd7cb5c977705077994cf93c5730db","sha512":"2473758058395929e9eeb1facddd746654e429636f1a453de84e1a16a466b4841b821e4d7db6d63cb923d7b618723a8a104bfea9714268cab837bad7583bfe0b","ssdeep":"","tlshash":"41f08cf0ec06e899f8899846e8d0785600013cfd34dfce0c8609b62b3ea21284f84adf","first_seen":"2026-10-07T08:05:27.605579Z","last_seen":"2026-10-07T12:36:00.911261Z","times_seen":135,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.836Z","timestamp":1791361069836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"CPeysYX8pq0v-CS2RMVwxaaKcawgkMA7hjxP78SfSy5OAMYNnpsbziZEb9Tc8FE0MRklWWmlqePD-LVfEiX4JO9YWjfYtr8Gbip5VX0"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=penLWmL3aSvDZgQWJylRBYDEG2eHHXmAZDSdHWi8Z3EBHCUul8zBMw4qST%2FvCE1pjbaR1ES6sK31Ilw%2BxTEMFi%2BPlNKli4uF5KAZrfe25cGL02TI0xM3kDPuQoN5kB9sswZNzrYi9RU%2BNQ1VO7MY7FACyWiOdn%2Ft6jUl\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b78be790c0b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70200,"size_decoded":21586,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15cf84cc634da8d8db37999cc528a0b6","sha1":"f49e3dfc73933c09eafcd4fe4e6fce0f39740be1","sha256":"7c3bcfbfff204c24a3292bd7db1876ff85b37e32e31c804a8c075168bdd197a7","sha512":"d089c07d7585a64509115849090b8286833175a0cd53a4a7a0347dcfb63297bfefdc1b51e3e2d692ad0cb3c85bf82e0952346e42f90a46975253dff369e08b02","ssdeep":"1536:2T/LALBJpx+NYI+Idw+BtjhqJ3dMKN1/wjyAgIdymax95M:2DoJ3CKP/wjyAgIdfax95M","tlshash":"1d638d210778713c404333e7279805cd7b35706aaa91115fe6a88a38d797cead2edede","first_seen":"2026-10-07T03:41:39.891258Z","last_seen":"2026-10-10T14:22:55.094653Z","times_seen":209,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/39q9it-3_g9gf.css","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.779Z","timestamp":1791361068779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /39q9it-3_g9gf.css HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qqp5dFWSzMBf9myuk2x7YRY6FGDLPbDc1Vr%2FnQV7Qe8xBD9JxfWV4mGmciFQRzYDGgGzxRyBVLkG4x6Sr0os%2FzrbpunvN%2BQxHb2cGhywElSJsk9hHd2iA4TnM5mEhKmvERTBE3g%2F9yM%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ac418dc-e453\"\r\ncontent-encoding: gzip\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b7ecce5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58451,"size_decoded":14695,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (57573)","md5":"ca7efadc491a7862653e0ae6dfefa73c","sha1":"0500d34e44af034e1358a9b107e99050972b5230","sha256":"df945093a16f9f34740c854a4a4dfb61bd40897b8a22053c41e5638bbdecbffe","sha512":"2cc730ca3f6df89049acb3aa674f3c0a9f5ce130fb39ebaabf5016b9beaaa59e2411aa4b46c9a5797bf68ac976a2a6fea0b9b8ee25cd9480cc4c4697c5309dd1","ssdeep":"768:G7R35iKMLMdRh6nhdU31pyZ0ZjaSlDxxtI0H:QtD6nhdUTyK0SlrW0H","tlshash":"0543b6b0732ed93fec3394a1e35cb88ca618b195df265ae8fa12321317c63f54d15629","first_seen":"2026-10-06T14:34:19.053454Z","last_seen":"2026-10-07T08:34:03.401733Z","times_seen":9,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/usdt0.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.821Z","timestamp":1791361068821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /usdt0.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmbF7YUSEn8N5keA0k%2F0fD%2BxVPiW6uKta%2F5SyF2A668vqw6FyMoy6F3pCtjFM22lTPlQiU1Ox3Z45itDbdbylzQ8kVyGAy62pseVluBzDgXCWqqvP2LDzcSv6DNSUlWozofEB26ZQdA%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-844\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b82ce15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":1585,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fcabeb2c428e8e8541dc80f55d8bad7","sha1":"c757be01b50e387504566eddf1f8c631e6c1fa7e","sha256":"b205af10e1d457edda3b91813e4582e7400410ff747c00a898a68b2e8e4227a3","sha512":"d54182da94a4e0550572bf3ffe566c432e4854829f9c4162fc5b64b5982dfb7928c5c7e59dfd2738590762aacb2ae01416a36753a47067a43c0fb2de7c7b455f","ssdeep":"","tlshash":"3941cec903cdf6d8e986fbb9863d31697d1e20d6be10d0a5c9c53e26a9118ef5a089c0","first_seen":"2026-10-06T14:34:18.968177Z","last_seen":"2026-10-07T08:34:03.409794Z","times_seen":9,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-04.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.844Z","timestamp":1791361068844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-04.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-4207\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHjCvdPHWSKU%2FoANkwPbutbuQbV%2FIaU94AKP423XCA%2BHgiRKLSK%2FBqK5xx7g0fVqQbezTEkKL6N%2BxMfaoRssdOj7B1vpodMngdg6YDmmJlVbJAFJCAqwzGInEDS3h3ntn9nJqN3Pa%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b84cfb5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16903,"size_decoded":17614,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cd2f4fc9a7532bdc71b1114e09c0f230","sha1":"00cf4812e0c46a6d43e2c6d6016f11aeb887926e","sha256":"1aae0282c126fe5202aca77036830d4ae33d70c7b8cf9d7cceb79b645e0fca84","sha512":"e4a5302e5283bf2f9582da8772f06db566cf36e7898b438722722d6794d2f72e544dff5d3163f51d8ea8e0ceb8db1ed6a81c40502407699e88c3fc3f22a9288f","ssdeep":"384:kS9TFplNKz6cwy5DM8K18IeOqvHmjL+a+yci8Ac:kETphuD9KqfOqvGjL+ici1c","tlshash":"8472c0eb96be723386f601c0ecce876af55c1730d34895a1899090ee7c52557b50aeb3","first_seen":"2026-10-06T14:34:19.101674Z","last_seen":"2026-10-07T08:34:03.412771Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.582Z","timestamp":1791361069582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 127\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"kDRYzch0pOt1PoXLbzhUpH83GG0yFu02LEuzc10CuhOblTaii9C_3RAi_54PcLUWZnlCuQWLB9Q0-A8FFNt3QBGcKTphXKft0oG4YNcH7W-lsyTlKCBSxICQsXJlAjs"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQN1Vo%2BX3OFAQ%2FAZtNQbOxVlAD%2BDoMSy8aOSu%2B%2B%2FP%2FYf4jX3N28Pw7DPSthlOXGO1KIG2y5NYOAAgP0QGiUaJpolK7GPak2ma%2FWiNJH0aybSA8oSrraQ5RVLaG8CY9r75Wrmp7bzHZl1GznKPHF%2FgytcJzXsaU1a4AO4\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a46b78bd08ff0b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313498,"size_decoded":74889,"mime_type":"application/json","magic":"JSON text data","md5":"c7eae451995dfa84becf63d935083197","sha1":"37d7a86190a29532026c4f95f946895a768e9db1","sha256":"f5a126b99d8177aa9ff85e2cbee16fe6acb9293d7becc8a336c4441f1f4adad6","sha512":"c33d37bf00eca9af742bd6ad7008715f6695d9167a514585ff844c86bb0dd008cacc00fafb5611216dc3f6204eb121ecb4d8f8f0ca31b9637388a4f827b8b24f","ssdeep":"3072:Lw6Pks7Wi01mbkS2fhBJJjDRli4/5hgPTW+0aSfdV:kHmbGfhBpk4BhgPS/aSfz","tlshash":"4164a1d4184691d0ce4711bde4af9448f0783b638b9d61f6a83feab0b16cf6045e71ba","first_seen":"2026-10-07T08:08:16.438448Z","last_seen":"2026-10-10T14:22:55.093134Z","times_seen":107,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":4,"connect":19,"send":0,"wait":84,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:49.841Z","timestamp":1791361069841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"HZTyqi6EqBBqcOJT6tEBLEj2cVYHp4JlKL9FMahcr51Ew5ErDH6qKgQyW4_ahkbwP3FcXtTFnCZ9QmMih7AYftGL8npWmPZ4RIBHRn63"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dECDod14p0c13nYudBkKODyZl430SGs9E9tg6BOdVkcfZcjjW1TyMBA8GxHkj8FVWfiswS6E5QQMIHMWcNHciFVvfKOeZVhXAsdG6Q64C4b1pmjedsFQPMGW3GLoizP1K6MZTJYyhwW4kdxY%2FFXi9RXdW9OHV7Xxsbw9\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:49 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a46b78be890e0b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30003,"size_decoded":10211,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30003), with no line terminators","md5":"48f600e822b12dc08275a3c29ab2527c","sha1":"6d31f0eb886c0bee5d1134b252ff60c51e8c56ca","sha256":"cd6396ed403fd5578aca82dd8b0e9e8827115976cc26cb1ac4a607b733212821","sha512":"a80331c2c6027260292ae0e125baed2bc1124cb61dbec3a80809fa2becc341c3cbeb941dd80f5b7a37b3cdfa0c25c548e53529842beb47dc17dbb56d4c4c809d","ssdeep":"384:FUUB//cES+GpvR7O64kpWS3xtb4wnm3z0bfnCWhEBWXp4p+0e02AgrGQNnDVz2n2:eUBnTSz793X4um3z0bKWhjp4pgSn2","tlshash":"d5d2821e7b9294c0b2af2124b3eb2eeec42c1c954fc41094a4bd4550bd79ec953fbb29","first_seen":"2026-10-07T03:41:39.892466Z","last_seen":"2026-10-10T14:22:55.095779Z","times_seen":230,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relay-9427b68d.paul-maze.workers.dev/","fqdn":"relay-9427b68d.paul-maze.workers.dev","domain":"paul-maze.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.186.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:50.238Z","timestamp":1791361070238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paul-maze.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 23:15:25 GMT","end":"Tue, 08 Dec 2026 00:13:54 GMT"},"fingerprint":{"sha1":"A0:88:37:80:0E:9F:13:F5:13:EE:33:35:B2:89:B9:98:B7:64:6B:F6","sha256":"7A:46:35:8B:0D:9F:29:1C:A9:DA:3C:EC:4F:B6:D9:BF:35:65:4C:C0:98:55:9E:6D:AE:4B:28:70:24:BF:D7:42"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: relay-9427b68d.paul-maze.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allocation-mantle.cfd/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 747\r\nOrigin: https://allocation-mantle.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":747,"data":"Rc\u0026UQWnYPcw#HB$WhcG@GmVFwEDW#q^eRdp3uhN4N$cD2MVMzDL%TxNgeZTq7^cVVdVVc0J%mgp!pYs7^k5reSqM5H!D#qk@mKqV!VanpUXb7Z3#7\u0026Tbm0JGyXmq5rqPd!VYFQY@Nu55jreN@U^mCfnZAK%vekD^Lf6hPS9xxATeR35SEk%^Sue\u0026YgnBb8M1TpS$%ArTB#^tBAdGeEDdemRUxTrMFw8#@JMPcnbvL57j1GjsVQhT4#RGxBmgH7MsNL4Vh2w8\u00260!NHdPk!qd^$Jv%62TKg\u0026U1TL#9Ctt$cjdm3P99jDQB656kHw2!\u0026ZS^EbTX@dhvz9dpr#7y\u0026ggtE0g9pfSLTR%DAwpmp\u0026$38SLKg1Hu2t2gyX$#SDbX4qcG@3@FvU#1bdsh0A500f%3zpZnCa^BR@CFDydXfqA1e%D1k5hNDV#c2XA8Ms7kZ!FM5hHjgZQ7sc3Ypk@XzqP0MMbj5^zEs$PXe208Z9x\u0026BuW02rT2Qm7m8%r#0\u0026Uc67cyNwBw$PRBZJd2vaeM$!b@2X%v3f%cPB2AC9QfEVGmqMpU$kBen3x\u00265MVv@f82axzUqbQfPed6w2u1eNDSz22aN4t^#51BN9ERbqWWTcHJZUSEnDPXRP!Q5mEDhStJvSJy#fn4SUga$qTVf4MEDe@1N^rK#$xuKB2@tZ9p\u0026N$FpzxN\u0026B%Zx1#\u0026Jg98bL3Rjvw4bmCT90fnZ3h\u0026jCsB6b5zGbF4PgcNq#P9rT8Vtr^6FY9"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swRP8ukW33VFfBhBED8m68MlEMjZE7Sc%2BW3v1xINiyUG2m3Soa6748a1vFPPIdLLO2JHzntJ2wCkspfStyDR09u2%2FrqzCXmnbdoKRCt4pezLVKL0KOsn3bdK6bKrwrQfJVsYWJW0Ytez0TbLmwmQ3IAKRIw67WDJ7nwR\"}]}\r\ndate: Wed, 07 Oct 2026 08:17:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a46b78c0f9260b65-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":870,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"293bf088673d20c292f04047c92430b9","sha1":"d536da3bc947199d05291687c065a25a49570867","sha256":"b72ea8523ea1b17235c2ebd5434f3ddc74d417f23112e90b80ffde1719347939","sha512":"5adabe060b54aa1e9cbe22897491457cd2d68d4133c449b9979a62a86d98d3d49c8532e21bc25044b1aa3404553c33b99a9d9c5b3d48034bf78e256ac9f3105c","ssdeep":"","tlshash":"f0b012014520203520101961e900186e603b4d020e3d4a07ead45b97dae80091308850","first_seen":"2026-10-07T08:18:37.712216Z","last_seen":"2026-10-07T08:18:37.712216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/partner-27.png","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.874Z","timestamp":1791361068874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /partner-27.png HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\netag: \"6ac418dc-1f1c\"\r\naccept-ranges: bytes\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DS9yfD1vxteXmqsT%2BO3HTI%2FS%2BebGqp3kEQ6bTOz2jAJrwWseOhTCcFcDnR8t8grUJ4qeheyfIRClkj2m8gFc%2FJWl66N1tiNqGXUr2%2B6%2FcnhttcLKQ8RJYy1ks9r5MruMsNmGhDkkYYo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b87d135693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7964,"size_decoded":8674,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2560f1fce4be05e7e7103b20399f043d","sha1":"4fbf20f0362d3e173deaf6ebaaa82e3d66175ee5","sha256":"64c81e656d7c41b6ac9ab86b8b0ca166503ea18500ef0338d3a59e302aa8a668","sha512":"9fb51cc657a297439fed43a62778a966154e872028ace157bccdb17bb1450b94aa90d9c340a9ada09555574cc3189727cba6cca1a980bb74b75a85389757b034","ssdeep":"192:imtd0eGte9ES7burwGRSHBzoQz2T1nnExjlftgnY:i/jyEuWwGR8Bzz6Fn08Y","tlshash":"11f19e8a5ccb850ffdc6c8752c7c0d215416b8af33e992a7b49a34a40751d5f5abc283","first_seen":"2026-10-06T14:34:19.004157Z","last_seen":"2026-10-07T08:34:03.46292Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/chunk.42.28748q25.js","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.802Z","timestamp":1791361068802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /chunk.42.28748q25.js HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 10:18:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Fh2CpZ6pArylHrwDPPpRcAVnCdSjOYSgZ9whPs2urPxk5Jo6PWi%2FN373VfaY7CdHpHyFprQtQJsKq1bJhQP4Yf6xttfVwR%2BsQUz3%2BYT3whQszZQXGRznnlufiSqDWSycDINL9IB6eI%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6ac4cadf-42b7\"\r\ncontent-encoding: gzip\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46b78b80cd45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17079,"size_decoded":7802,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8594)","md5":"b0eafc2bda81241b5da3694f08b52b89","sha1":"193eb0fdc40f0d45f4a63bc846dd6e10d09acb6e","sha256":"f68d6d8ce951a55c900e2f0b10726c1a1ef97f7074536ef9641f8214b1a74159","sha512":"3a598b9297a859036d51c8a4662e6d8c67c7f69682cd9ee6a26519e7f4efbe02cb2f33b72342b8e9d406c4699cacf42d08a49c9a99d90df41040d1b421a76201","ssdeep":"384:D9grrNbSeKaCJlcK1BTg9P0pB1xAvnQ7D+sjNU:CvNbSpaSWK1BTg2pvxAvnQ7yspU","tlshash":"717219f87665206a03633532207f9102e177eb118d5b9050a2e28a917decf6be677fc8","first_seen":"2026-10-03T20:04:04.24929Z","last_seen":"2026-10-11T12:33:27.709577Z","times_seen":200,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-mantle.cfd/maple.svg","fqdn":"allocation-mantle.cfd","domain":"allocation-mantle.cfd","tld":"cfd"},"ip":{"addr":"172.67.222.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-mantle.cfd/","date":"2026-10-07T08:17:48.818Z","timestamp":1791361068818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-mantle.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 19:40:45 GMT","end":"Mon, 04 Jan 2027 19:40:44 GMT"},"fingerprint":{"sha1":"46:0B:12:0B:0A:EA:E9:09:9A:F8:02:E7:90:6F:24:B0:AF:B6:E2:EB","sha256":"76:2B:A8:48:7C:0D:99:4A:2B:BD:FB:D4:14:2F:3E:09:EC:72:75:E9:D4:F1:32:D6:0F:2C:92:FE:C7:E1:D9:A5"}}},"request":{"raw":"GET /maple.svg HTTP/1.1\r\nHost: allocation-mantle.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-mantle.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 08:17:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPWROnKQYi7InTPK04qI%2BYfZD1tIwUvJ7KNwkFf44kevxzMv8Md3g%2BSDNWEj%2BLcUukIYukyuk7UQiwcQYlpSDbiixr6lLeOqiNrEYFG0TOoesR28J0lHxQTm2tilzWCCVmJIZbS9EZA%3D\"}]}\r\nlast-modified: Mon, 05 Oct 2026 21:38:36 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac418dc-bad\"\r\nage: 37\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46b78b81cdf5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2989,"size_decoded":2022,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fae55597f663dd4cf76d5053218ccc4","sha1":"69f832d5a52d3613ae9d69d91748bc694d6376b3","sha256":"fb5062f58af6cf57dfa89e72a121978b2154dcbeac680e33a952cbc79af444a1","sha512":"613b19b1931c8c86f874a8f2a3956b577efaefe77a2582e33bba264840c8d6d642a664e8936b7be0dfeda44be9a2fd79c8bf7ca044d0fa79215bbfcf17630831","ssdeep":"","tlshash":"ce5142cc333651a8f488a7e85d5b962abf0668d4df89c58ac310ad15708359d8c7a5d3","first_seen":"2026-06-30T21:35:28.644868Z","last_seen":"2026-10-07T08:34:03.371072Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"allocation-mantle.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}