{"report_id":"ce38b60d-523b-41e7-8956-deef98199779","version":0,"status":"done","tags":[],"date":"2026-09-29T04:59:54Z","url":{"schema":"http","addr":"chainabuse.cc/","fqdn":"chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"title":"chainabuse","dom":{"size":116025,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"74e69b416a49a150f489d3526bbca20e","sha1":"1210fcf27618653874409b74ba502f35c3e295d5","sha256":"d9874bcd75e4bdc208375c36e9bf574ef27dbd32accd33eb85b7c564cd04a962","sha512":"b023822199bbcf8beb593550599b43634da02eb689fe85f2e7e5b0b36b871aeda2124338d36e0e211fce579272d4bc30203349d7fbe24e344a3df4e7a034a04c","ssdeep":"768:apwmRueFAKwuu95sCrro2F8CXocaI8DeCy1d9u5WCDvg7+/93oSmplvyzX+PFOjP:6RBMplvyauP8oooAKIU","tlshash":"a1b387306308293ca5978bd4f671fb6c51af934dda1b84a8f3bc83a21bc9c959d235d4","dom_hash":"domhash29cb0bf4674f144f9713e9d7b6724438","first_seen":"2026-09-29T05:00:17.195511Z","last_seen":"2026-09-29T05:00:17.195511Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chainabuse.cc/","fqdn":"chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T04:59:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.chainabuse.cc","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":31,"received_data":1791110,"sent_data":15438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-09-24T00:16:39.349342Z","alert_count":0,"request_count":3,"received_data":19174,"sent_data":1797,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-09-28T22:46:51.328008Z","alert_count":0,"request_count":1,"received_data":86915,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"grainy-gradients.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2021-12-27T06:18:07Z","last_seen":"2026-09-22T01:33:38.328979Z","alert_count":0,"request_count":1,"received_data":363,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"chainabuse.cc","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":343,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/ff1a16fafef87110.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","size":282,"data":"","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-09-30T22:08:40.473265Z","times_seen":29120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/82abf2d65f5428ae.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19622580859b19b23901b9a7be2f7937","sha1":"c06faadd6f342879b808413390376b59f7e0b20c","sha256":"bbc0826384faf59b3d35a439a95f7787cd19280ee35469c84cd0b213bc306f11","sha512":"defe2216a1fb2d9b3670710dd2ec27e23fac86ce5e8cf438ddc8038d513c145fc333c0afd051cbf6f1a83d62beafaa5dfc378bbccf26f7eb98bc59c9912f856a","ssdeep":"384:uj/7DGGRPR+rTfIVZ/X+0o3NkOG4+Z47aJUSwT4WGFJl:M+/8Z/X+0o3KZzZ47amy","tlshash":"bce2c7b572d5faa2129341f0c43f2017f3680d7521acb470a7e8cc9b755888da6bafd9","size":33299,"data":"","first_seen":"2026-01-19T06:24:39.223584Z","last_seen":"2026-09-30T19:44:26.401529Z","times_seen":5598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/0875ffb7b36aa30c.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d56e0d5f57ec14e8d85eb7604636e94a","sha1":"16ec6b29af7e7a5e8567dd03b536f98ea6903e8b","sha256":"5ec738fcd41594fdbd9eda439264d40281e4bad91de6182cf0af23d2c49353e8","sha512":"5f56e57a0da5cc577a71cdb243556b6692f8f828e9b2893013ff388e5a7ed06d5bd5f52118920cc30f111cab1a9f01f3936a74f64bc9945e8a2f4bd257286974","ssdeep":"768:fZMSJLJ9GLxBKIhrAzkOaQxc0Ioi2S8yDRokhtgK5KMKRK7Gd9xCYkRSwB8w7SZo:BMSJLJ9emuFohS8bprkp","tlshash":"b7939714e2857e98ea7705a4ba6ec04c612f3f8cde0fc8f5b5b878022e484d57b57b94","size":91115,"data":"","first_seen":"2026-06-10T21:42:07.795998Z","last_seen":"2026-09-29T05:06:08.037147Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-09-30T22:35:57.91167Z","times_seen":275229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"81fbcfcd38c2f8bb724a70e7b425e12f","sha1":"a8f57b0b1c60614d532568e3b869379790d5bcbe","sha256":"1eec36ebd5952d02a87d562036daf627e8e7f16e9a726386c7502e301672aee8","sha512":"8e9ca028a9860a91a8a9a5b0e987d6e325a8d1cf0727a36505ddab4f1041bac8c7c91a4841d3e40073301d328bd7b73254462195b0e67807babade1829e4a4ed","ssdeep":"","tlshash":"6821e559f80bfca13d21cd5f112b0f3b94d9ec7a80306569b25fcac8423587a1388992","size":1358,"data":"","first_seen":"2026-07-27T07:05:39.60025Z","last_seen":"2026-09-29T05:06:08.042117Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7582f5ec5e63cff586e2e1101d5d05f","sha1":"93692b234ad4ed87690fc6317c4c83077b3858de","sha256":"23ac9ad645e93e7fd1609a26ec70366d5f88a725c11ca93acc10d8ac931dd9cb","sha512":"4fa16b734e419638c4116f9ad870ae0614f764cda1371f3eb181f606a1cf62fa60618eb32aa6a30e9e1fd312a01333830950022bee5a247ace58f336dd004a9c","ssdeep":"","tlshash":"8a71df3d7404de4bec6e3c69023ead3b10cc497b43a4deb8869cce150a4247a27d6dc0","size":3512,"data":"","first_seen":"2026-07-27T07:05:39.601194Z","last_seen":"2026-09-29T05:06:08.043148Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c371a1b23c199d7ac65ccb8390f8ab8","sha1":"44e8ed0f13885c921a759ebd7643ea3a95f96eff","sha256":"c7653a63eeff58621c1f9e0e84f8ba6f6f92efd3ede1b3290167936907d51d49","sha512":"c1fa31579ef3b8f388f72307d96d63ea5aa1d9aaaf60536f7d237cf42f9f2e6514b8dc5d99561f5dc4bf9d04bd6d3e50af20fc7ddb72ebb61c9cb2e83dcce8ec","ssdeep":"","tlshash":"59b09b64e015fda555b545616525e445226f504d29581450111791551609d141717dc0","size":112,"data":"","first_seen":"2025-10-26T14:54:28.298694Z","last_seen":"2026-09-30T04:45:04.55068Z","times_seen":3448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ead1170c9dfbf7532937baba62fa5960","sha1":"257de8a3449dba9cf75d12f22dd599eb1918daba","sha256":"a02adeac656735dc917fa4ff254de086511dec279a4898e554ef22a308af0ead","sha512":"607a993ca2896b8cfccb41ceb33f318ba2535d8f92b191f7c51b24f2477728654abcd002cd7b2d64c5e41eafca6342802b5342c8d2e0df0550e47d7ebfd765fe","ssdeep":"","tlshash":"8fc08090cc42cc1dc6660f361c3b1c3521ddd9b4074555469dd5d9381985b3105b5d9d","size":177,"data":"","first_seen":"2023-08-13T20:19:29Z","last_seen":"2026-09-30T20:27:11.743576Z","times_seen":5461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4deccc6b245609e4b0b92a5ff149ca15","sha1":"05797864432ae4db7dcb1abed13b4db5c57901ec","sha256":"e80e26b894d4a4a634ab917f5735bac4c2aee52a334a15a8c17141aadc222cec","sha512":"9c0333e29c6c19f7a174215b1a4076879c80e5fe24e9a44b1c24fe3cb5ebfb5a52d795747cff5da16b29b250e3cd7f7aa5555311ee720f577bce98c5a75b321f","ssdeep":"","tlshash":"caf09754bc0bfc06eb52ee1d01be2cba80cec77841608e29a098ccc48173c746f91e51","size":521,"data":"","first_seen":"2026-06-10T21:42:07.823475Z","last_seen":"2026-09-29T05:06:08.046111Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/c6108499b026e905.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6daa57e77203a8f4de6bbd9433ff5428","sha1":"bd43b79948bea2f313929dbf311b1f1facb5682a","sha256":"06f02d9ea36ba9c82c81317e687397fa74a26ffe0b001bab7482634685183bfc","sha512":"3f2d18a953649197a51cd53a65cd9356093be2456149e3aafdb0aa74aac0f29f3e53120b0afd1d1c393317d9a1817d73aa6f6bab09fa6172c5527d8461dc9abb","ssdeep":"384:bcfbcfl2w4VQRBRxrH8sEkkLNvE3gr11lTceWzJ6otgKniY9PiurGzeGZ1n4lYjY:6bcfcQR9H8sETNqO1lTjTn4lqY","tlshash":"26c2a4a971d5f5a117a354e4803f5007f23e0c7a286db0b4a3a2ddeabda054dd133f9a","size":27050,"data":"","first_seen":"2026-01-20T18:40:45.391046Z","last_seen":"2026-09-29T05:06:08.01121Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/1d45994ef76ea601.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d2d50fc5c2c5e337efe5f4c7e44877","sha1":"a3edff385024e9c2e60f4ce4167a3fa6df3a42b3","sha256":"683cdbd8358f1b3174f0fbcf1aa0c022e880b1a3452b8a1df351a95062653ff8","sha512":"34d3fa22bc866ea29f76dc60d4c72ad753a434b05e254f007140bdafc070527ce48aaa71906bc9a602ddc744af08af7cc64b3028c48987e53e5876b2ee658037","ssdeep":"384:JbKyK6leiaztGvKwm0/V95DVTWSrCCu1jG2uQum6n7C9Ku8lAKFA:mi7aztRwF/VTNjCFpvuQuvn7C9Ku8jA","tlshash":"57c2ca19b2d5ad8ca6a742c4991fd04ce16f1f6cda0fc8a4f3fca8631a4044a7963f95","size":28052,"data":"","first_seen":"2026-06-10T21:42:07.777132Z","last_seen":"2026-09-29T05:06:08.017904Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/426ec9b873380a93.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6072098858c0b1be139396a5c52fe093","sha1":"ad4badacf6ed2b79aac53fcb23e180083afbf1e9","sha256":"992c17dff8cf934069c65dbfc66bc50ad65f81b7ed249c9aa89981daff8d6d42","sha512":"0a886f8abdcd1fe3231d841a367a6ec4e01c64dff01decac67dfe3269b842eb062716183225c49943a08337f184e06f1af59fdba849b3acbd228f9a47f9b550a","ssdeep":"1536:eet9I3dPBQ8aJaRr1jJ3MwZq9tOsATP9zi+Rzltjo:eD9akfjRMLtOssvRXjo","tlshash":"eab309f935d5f4820ba744a6c03f0006f32c5d37189e68a0a3e5ddda746459de1b3faa","size":114956,"data":"","first_seen":"2026-02-11T03:11:09.189993Z","last_seen":"2026-09-29T05:06:08.035678Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/fabdea0d06ffa6d2.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"340c059a5c2fa42f87cdf4678cdd6e91","sha1":"a31cfc657bdf1107eadf065e89cd4e590379f397","sha256":"009aa3d8bfee9b801189c34030a842dfac4b4418e2904918f9cabae8d8784c9c","sha512":"05fe80619675d2eec0369eaa666c2a1ee67126efa58f8381799177707da2186d77f9201702ac02bef7d0630b027b4e7ec38e83f57dfde1b9405248ce5993d445","ssdeep":"1536:K8K3GksteMgDBlxaSr8iPhYvAWHHzZmZIhrxj9Dbri1IEy73ONN/d0uf75Np:K8cJfGUhvWndeIJx1Sj047d","tlshash":"aac3f8da73617565c3cb5199c0af4b41b33b19d8240a403cb67da8cb296058a72fbf7e","size":123273,"data":"","first_seen":"2026-06-10T21:42:07.813941Z","last_seen":"2026-09-29T05:06:08.03229Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/50cb9ea562d9cd28.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e346f31d8bf98e65cfc3db4cd303f29","sha1":"8cc130e517e7eaef1695ecd37c5c3ffda455cddb","sha256":"f4eb40bd8728f51f1179e02d308f0562c9216c22bd9e6d28d30a6459003edd89","sha512":"5c1b8f4d8458f18b99285166f09fa99861d70bf1d6bfff37d37f13359af3eca3f00329d75abd08aad311da43640689a8fc23af9734bc6014b98d6d76363437ee","ssdeep":"6144:PmBrtizIkOw4piAIr995tjj3C5Pf1lWR8dl/PD5rlX4f3RSQYQfIeSk8r5qFU9bW:RK1l48fa","tlshash":"452409d5b3b7a02246e1906594391803f33c7a5db81d842cbb696edb7998948f73bf30","size":214377,"data":"","first_seen":"2026-07-27T07:05:39.596424Z","last_seen":"2026-09-29T05:06:08.015445Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/turbopack-7404bf68ae13a981.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e133328d492ee9bae5745e167b61062","sha1":"65d2471cfe919a8117806333b550bd94e9efcec9","sha256":"690c6ed9054a61befce1d5597bba000c3b9c611fa63f1a713d3caa71dcfb9952","sha512":"ffc9a0d769249222ff88de8e04f9d5efda64e17ac106f15d496391e43776f1b07f5a79cfe5c1429876809fc9222c41a6d0cbc4e4a0a7687c0bd2c96e83cee2ac","ssdeep":"192:yY74eFn8/Esp1U91EG5T1uCO9ledFMhMJg4W9PZcxkUk1IsiyLxsM:yY74e2OvO9len6JZZQLyLx9","tlshash":"a522e8ea33a6f07743afa0e6907f4044f17954a8145d581c936ce8fa38384ae49e3f67","size":10671,"data":"","first_seen":"2026-07-27T07:05:39.56415Z","last_seen":"2026-09-29T05:06:08.01697Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/edf728ade32a04ce.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6030865827039f772a9cbae6ddf6495","sha1":"ad6d3b468296914b6de54ba40f6a7a2a96d91651","sha256":"d0db0d7eed1a2382935448ba98b1a559aafefb2763682ef5d3596129aa316208","sha512":"0a42e98ed3d06ca0723c810e798c0ce24f6025a6ad8ca09225c689b31e377416362aa23e1378f87677a55e07cc5a15eb14d835800948a34db7e4b90dad41f8a1","ssdeep":"3072:AVhLHlPuSSY2UzBRaWcG8TP36kNAHTjWmN6ZXtb96WUpB:AVhLHxuSSY2Uz9rH3FSXtb96WUpB","tlshash":"10241be83955f6626ab302a710af1803733c252b280d4d60a351fdddb57845eb17bf9e","size":224636,"data":"","first_seen":"2026-02-05T15:42:23.280742Z","last_seen":"2026-09-29T05:06:08.031346Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/0e009391b9c7f19f.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85e9fd4276bdb4c43e9e67ba7d5264bc","sha1":"2e01cb9fd1ae129a7f0d9c08ccbfdf2201d7a70d","sha256":"3a9b19e6007bac8ae4179e8b6057ba34efea5476d4794307669a83d84ac046d9","sha512":"9d343459282701800cae3a4ddf20ec923e501980a63e8854d083918a7162b2c66fe0b766eb93edb738d258dd900099cd8e4553f3846e5d66db040de9e4374b32","ssdeep":"192:OTjyHFBI+z2D4QFDtlLsO8r+JEnKnbnUonF0X7pNBf/OC:iyHFek2D4QFxlLsO8/77pNBf/OC","tlshash":"e922d628d2455e9cb8670994666fc00ca04fab4ced1fc8b9b5fca4711f8acc47a47bc5","size":10116,"data":"","first_seen":"2026-06-10T21:42:07.816445Z","last_seen":"2026-09-29T05:06:08.033545Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/d2be314c3ece3fbe.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e189b2054d05a586f4fd6eec2888c203","sha1":"7d92609e0338be85a1f0085efa31f699878f269c","sha256":"a6248517cd3ee53a8186b51c59e1e764e3dc0c512f4acbd50e818f9884663e21","sha512":"1c0e250e62e070ed252776fbd469b27c9c19dc68e695b9e90003b746e3ab6f9c919b39ed1890d581bc0bec54a0b8b2b8a68a415db186d4d278121cbe124a8ad6","ssdeep":"384:735z75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNxErV:D5z9BX0ZMOx3ErV","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b07394dcef368dc89a1fafa9","size":30681,"data":"","first_seen":"2026-01-15T14:11:00.285057Z","last_seen":"2026-09-30T19:44:26.42747Z","times_seen":7728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/57e013d07003281a.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcae2ab6f96bd3f1d229856833eac63f","sha1":"1d9187e17ad48ead77fe0fe214c2f90a352e5551","sha256":"1036006ee40db51f835ab0d2c1cfd3e0004d6db5c1808238c4af194703d7765e","sha512":"3ffdc7b51f05463eb1677c8893ec0056516a1cb0514773cdf7acce27e0d37d4c67db370d79f1fd3ab326b5bc702364636c83777fe606027146b86a004a064fa6","ssdeep":"6144:cBjFmMW5SiXS/jimWdsKuV60HxNxjsR7Tiu:OF4DlN","tlshash":"a814f7fb7680b73774b13b188a0bd24faf9c9c55cc99a08cdae7c8d65d60861207db25","size":198962,"data":"","first_seen":"2026-06-10T21:42:07.760496Z","last_seen":"2026-09-29T05:06:08.0144Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/media/797e433ab948586e-s.p.29207c2f.woff2","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:20.997Z","timestamp":1790657960997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.29207c2f.woff2 HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"797e433ab948586e-s.p.29207c2f.woff2\"\r\ncontent-type: font/woff2\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"cd5b25781181c5c03d99ac2cbf88016a\"\r\nlast-modified: Tue, 29 Sep 2026 04:59:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/797e433ab948586e-s.p.29207c2f.woff2\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::4tjkq-1790657961001-7c7e655050c0\r\ncontent-length: 23108\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23108,"size_decoded":23715,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23108, version 1.0","md5":"cd5b25781181c5c03d99ac2cbf88016a","sha1":"0e04bb6e7b54057d64c421b959c8c22774ae632d","sha256":"5f3d6ad60f29d6cb708414ec6887163d63bf197377ef5417d2483ff31ace6c3b","sha512":"f41989a87c7438a19dff3325c3546aaad0039f2433b4fe8550f3831bb01acfae9956c3e6d402d83fb6c38df647156cab2e4ed2ccc321007e858760e9af7ffe6e","ssdeep":"384:4CAnZnTSz1wLaDPA2knsJ9ufQnGaWPegCLyUrMF97Vg8RWP94KiBjJRMbkcYCaXp:4CAQzec94U9uonMP7BF97V9RWl4KyLMW","tlshash":"aea2d004c129ac1911b6017780694ce99eef64d51cac357f9cbe2cbaddb5252fc3be28","first_seen":"2026-06-08T23:37:37.659571Z","last_seen":"2026-09-30T21:51:50.762017Z","times_seen":17789,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/2bf9b1b724e19af8.css","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.224Z","timestamp":1790657961224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/2bf9b1b724e19af8.css HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2bf9b1b724e19af8.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"9a0f4dc8cc1c8998ba23bc42d6a537cc\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2bf9b1b724e19af8.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vlh4q-1790657961232-ecc7eb6edf89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":174379,"size_decoded":21154,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a0f4dc8cc1c8998ba23bc42d6a537cc","sha1":"f7b5548b9ccdcd88901411927d898ef131441544","sha256":"8f015ad465d4e8eae4e0d90211cab2040b0f93439a48e55faf28a5285f0d720c","sha512":"30c4cf9b6649cf246ab2471ed81c98d9c7d1f092ca73100980cb5dd58f28c9178ef4142d7625398f1af1052976c331299b51c88d1e747549c30a3656f36f4b55","ssdeep":"3072:Neux9lhUabWaN/Gg9nf+RWvS39JHVqrYlnYVrxNEymG6KHKY:sux9lhUabWaN/Gg9nf+RWvS39JHfnYjx","tlshash":"f504fcb4a060d17bbd1774fd535ce48fa20a7196ec2a43d9be52a10277e7bf61ce2900","first_seen":"2026-07-27T07:05:39.586337Z","last_seen":"2026-09-29T05:06:08.010267Z","times_seen":5,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/turbopack-7404bf68ae13a981.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.232Z","timestamp":1790657961232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-7404bf68ae13a981.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 2326774\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-7404bf68ae13a981.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"3e133328d492ee9bae5745e167b61062\"\r\nlast-modified: Wed, 02 Sep 2026 06:39:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-7404bf68ae13a981.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5k5ph-1790657961237-761485df44e4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10671,"size_decoded":5015,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6402)","md5":"3e133328d492ee9bae5745e167b61062","sha1":"65d2471cfe919a8117806333b550bd94e9efcec9","sha256":"690c6ed9054a61befce1d5597bba000c3b9c611fa63f1a713d3caa71dcfb9952","sha512":"ffc9a0d769249222ff88de8e04f9d5efda64e17ac106f15d496391e43776f1b07f5a79cfe5c1429876809fc9222c41a6d0cbc4e4a0a7687c0bd2c96e83cee2ac","ssdeep":"192:yY74eFn8/Esp1U91EG5T1uCO9ledFMhMJg4W9PZcxkUk1IsiyLxsM:yY74e2OvO9len6JZZQLyLx9","tlshash":"a522e8ea33a6f07743afa0e6907f4044f17954a8145d581c936ce8fa38384ae49e3f67","first_seen":"2026-07-27T07:05:39.56415Z","last_seen":"2026-09-29T05:06:08.01697Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/1d45994ef76ea601.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.237Z","timestamp":1790657961237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/1d45994ef76ea601.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1d45994ef76ea601.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"82d2d50fc5c2c5e337efe5f4c7e44877\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1d45994ef76ea601.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l6865-1790657961241-9f6bab00a054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28052,"size_decoded":9867,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28051), with no line terminators","md5":"82d2d50fc5c2c5e337efe5f4c7e44877","sha1":"a3edff385024e9c2e60f4ce4167a3fa6df3a42b3","sha256":"683cdbd8358f1b3174f0fbcf1aa0c022e880b1a3452b8a1df351a95062653ff8","sha512":"34d3fa22bc866ea29f76dc60d4c72ad753a434b05e254f007140bdafc070527ce48aaa71906bc9a602ddc744af08af7cc64b3028c48987e53e5876b2ee658037","ssdeep":"384:JbKyK6leiaztGvKwm0/V95DVTWSrCCu1jG2uQum6n7C9Ku8lAKFA:mi7aztRwF/VTNjCFpvuQuvn7C9Ku8jA","tlshash":"57c2ca19b2d5ad8ca6a742c4991fd04ce16f1f6cda0fc8a4f3fca8631a4044a7963f95","first_seen":"2026-06-10T21:42:07.777132Z","last_seen":"2026-09-29T05:06:08.017904Z","times_seen":7,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/0875ffb7b36aa30c.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.240Z","timestamp":1790657961240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/0875ffb7b36aa30c.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0875ffb7b36aa30c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"d56e0d5f57ec14e8d85eb7604636e94a\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0875ffb7b36aa30c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t4clz-1790657961244-8ab52c960f0f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":91115,"size_decoded":25962,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"d56e0d5f57ec14e8d85eb7604636e94a","sha1":"16ec6b29af7e7a5e8567dd03b536f98ea6903e8b","sha256":"5ec738fcd41594fdbd9eda439264d40281e4bad91de6182cf0af23d2c49353e8","sha512":"5f56e57a0da5cc577a71cdb243556b6692f8f828e9b2893013ff388e5a7ed06d5bd5f52118920cc30f111cab1a9f01f3936a74f64bc9945e8a2f4bd257286974","ssdeep":"768:fZMSJLJ9GLxBKIhrAzkOaQxc0Ioi2S8yDRokhtgK5KMKRK7Gd9xCYkRSwB8w7SZo:BMSJLJ9emuFohS8bprkp","tlshash":"b7939714e2857e98ea7705a4ba6ec04c612f3f8cde0fc8f5b5b878022e484d57b57b94","first_seen":"2026-06-10T21:42:07.795998Z","last_seen":"2026-09-29T05:06:08.037147Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1507003211169-0a1dd7228f2d?auto=format\u0026fit=crop\u0026w=100\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.250Z","timestamp":1790657961250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1507003211169-0a1dd7228f2d?auto=format\u0026fit=crop\u0026w=100\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 33669c166fe61965003de6eed9526681280e68a1\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 28 Sep 2026 22:19:14 GMT\r\nserver: imgix\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\nage: 24007\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220150-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 5449\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5449,"size_decoded":6072,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5819f5cb4db5bd11dd7f15d28acdab05","sha1":"a625ecbb0cc1fa8886955fbeb9a14d212412f9d1","sha256":"adcf5b2bebe836e6df5c1e6a0ea48e41a6d221792c70d2413a7578d6837ae7b7","sha512":"b9ffd926e9064e1a6e8e9ecd9baa60212a2468515478053eb6f42faa002648f704f5bc64ab4a812dd0030e203183487ba79bd22140557716e9feed6a58d9f419","ssdeep":"96:+NL65N26MT0D5MdtbZPAVwzVIlOPeT4whSxEycCd5+nUCgS:+Z6oYNMtKwkQep0WxCf+nvgS","tlshash":"c0b14c79af769653f174c97844e12bdda6f3b738d720364d31107b110190ac1af4e2ae","first_seen":"2026-09-29T05:00:17.203652Z","last_seen":"2026-09-29T05:06:08.027584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":20,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1494790108377-be9c29b29330?auto=format\u0026fit=crop\u0026w=100\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.252Z","timestamp":1790657961252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1494790108377-be9c29b29330?auto=format\u0026fit=crop\u0026w=100\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 9f494361436850dd1a018d4b45569dca45394cc4\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 21:16:05 GMT\r\nserver: imgix\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\nage: 632596\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230045-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 5659\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5659,"size_decoded":6283,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0f7c737de35b9f08d17192f313894c96","sha1":"c9ca55f04e769939e8ba99a2aede51af0a3c0ac1","sha256":"76a242d7f0296cab37b948c4d4f60f9f8b0ca973c8be1614fbccf26cd55fb934","sha512":"ec1994633f1c0eb523dad98bba95eabe96f43cdaed17ea82c5ac481b78748f4be962c8bda2a44f3eeeae3a582695f95325b466d65e7e66eb8d2e74b66c0cbcc3","ssdeep":"96:+NU65N26MT0D5MdtbZPAVwzVIlLSl7ilqMn23aic5cW2C9t:+q6oYNMtKwklJnL9t","tlshash":"29c16d71bf62f323ea6af37854d52f91a2837319d7a07a4570643b3882419c1aecd0ca","first_seen":"2026-09-26T05:31:37.037203Z","last_seen":"2026-09-29T05:06:08.012382Z","times_seen":10,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":15,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/favicon.ico?favicon.0b3bf435.ico","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.430Z","timestamp":1790657961430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /favicon.ico?favicon.0b3bf435.ico HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648543\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l6865-1790657961435-81a278e21f17\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":9836,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-09-30T21:40:00.426707Z","times_seen":47224,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/8/80/World_map_-_low_resolution.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.314Z","timestamp":1790657961314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/8/80/World_map_-_low_resolution.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: kmsvgk0bu3b9s83byp2udqa2lpfv9co\r\nlast-modified: Sat, 30 Sep 2023 12:04:50 GMT\r\ndate: Mon, 28 Sep 2026 19:10:26 GMT\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 34\r\nserver: envoy\r\netag: W/ecf31683c22ca1f5b63931a1c913b611\r\ncontent-encoding: gzip\r\nage: 35334\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 hit/136\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=omwIMdoTEOvHg8z_uvWa-wPqAAAAAFvdwIxPl6jKlKlL1kG8WCPKQoszO8pYC0jk;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Wed, 29 Sep 2027 00:00:00 GMT\r\ncontent-length: 30047\r\nx-request-id: 38ace028-76ff-4743-b2cc-f068c46addae\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"omwIMdoTEOvHg8z_uvWa-wPqAAAAAFvdwIxPl6jKlKlL1kG8WCPKQoszO8pYC0jk","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-09-29T00:00:00Z","raw_expires":"Wed, 29 Sep 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=omwIMdoTEOvHg8z_uvWa-wPqAAAAAFvdwIxPl6jKlKlL1kG8WCPKQoszO8pYC0jk;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Wed, 29 Sep 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":84823,"size_decoded":32139,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecf31683c22ca1f5b63931a1c913b611","sha1":"b0a38cf256d8584f3c6d3652085b8c56b39b8418","sha256":"697f94bdc76a095a6f000014436e3a847324d2fc20358ffd795ba40eaf190de6","sha512":"d35faa60ae572be98d5fbee37d668638610c6c77c61257540d586a0de1b6d2c8e0df4c30662873e1f86c257fbfc288bd06e0343f221c524a479b310f2a305a93","ssdeep":"1536:6NErGPpicjW9ixNs8Usqw4hUnI1ws8dWbVqddlh/fcqg+9eoeU8Po:6LHT6nJo","tlshash":"388373d243bc22aab55f06905dd02d92276568f7c358e1ccfd2e94a79f53ab182b0f60","first_seen":"2025-12-21T19:16:06.094786Z","last_seen":"2026-09-29T05:06:08.022393Z","times_seen":30,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":2,"connect":22,"send":0,"wait":32,"receive":18,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grainy-gradients.vercel.app/noise.svg","fqdn":"grainy-gradients.vercel.app","domain":"grainy-gradients.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.318Z","timestamp":1790657961318,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /noise.svg HTTP/1.1\r\nHost: grainy-gradients.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::q9tzc-1790657961354-4ff4a05e6017\r\ncontent-length: 78\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T22:35:45.430768Z","times_seen":18743512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/?_rsc=1r34m","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.734Z","timestamp":1790657961734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /?_rsc=1r34m HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"93a33f6221024cfb4c394ab114aac28b\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9n2k5-1790657961740-3a16a1747b76\r\ncontent-length: 624\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":624,"size_decoded":1283,"mime_type":"text/x-component","magic":"ASCII text","md5":"0d88e6871ea4967ee36557631902a0dc","sha1":"122a16cdfcb9fa5d6253ad0c169780555da4904b","sha256":"a1e4c2c406a427536e68c9fe055a3ef537d8d017594eed5987d828d767a3d60b","sha512":"cc0fdb50a7ef7ea25a0bec423782a0a0b84ada91d93f6cb4e516c84b5d5589ad037bae0e48d5c18fc9f8682d4329cbd83a4bb99ac7c2e8d783f5662ccd6984a5","ssdeep":"","tlshash":"04f0a21a8814be9958e5d44c118be70356589b77f0640db9d48f8c50066e0340f8ab43","first_seen":"2026-07-27T07:05:39.58288Z","last_seen":"2026-09-29T05:06:08.00893Z","times_seen":5,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/0e009391b9c7f19f.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:22.237Z","timestamp":1790657962237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/0e009391b9c7f19f.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648545\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0e009391b9c7f19f.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:22 GMT\r\netag: W/\"85e9fd4276bdb4c43e9e67ba7d5264bc\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0e009391b9c7f19f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xq6q6-1790657962243-3251ff9acb83\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10116,"size_decoded":4269,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5729)","md5":"85e9fd4276bdb4c43e9e67ba7d5264bc","sha1":"2e01cb9fd1ae129a7f0d9c08ccbfdf2201d7a70d","sha256":"3a9b19e6007bac8ae4179e8b6057ba34efea5476d4794307669a83d84ac046d9","sha512":"9d343459282701800cae3a4ddf20ec923e501980a63e8854d083918a7162b2c66fe0b766eb93edb738d258dd900099cd8e4553f3846e5d66db040de9e4374b32","ssdeep":"192:OTjyHFBI+z2D4QFDtlLsO8r+JEnKnbnUonF0X7pNBf/OC:iyHFek2D4QFxlLsO8/77pNBf/OC","tlshash":"e922d628d2455e9cb8670994666fc00ca04fab4ced1fc8b9b5fca4711f8acc47a47bc5","first_seen":"2026-06-10T21:42:07.816445Z","last_seen":"2026-09-29T05:06:08.033545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/50cb9ea562d9cd28.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:22.241Z","timestamp":1790657962241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/50cb9ea562d9cd28.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648545\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"50cb9ea562d9cd28.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:22 GMT\r\netag: W/\"0e346f31d8bf98e65cfc3db4cd303f29\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/50cb9ea562d9cd28.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nxcht-1790657962246-c4820f8445ef\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":214377,"size_decoded":58466,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29572)","md5":"0e346f31d8bf98e65cfc3db4cd303f29","sha1":"8cc130e517e7eaef1695ecd37c5c3ffda455cddb","sha256":"f4eb40bd8728f51f1179e02d308f0562c9216c22bd9e6d28d30a6459003edd89","sha512":"5c1b8f4d8458f18b99285166f09fa99861d70bf1d6bfff37d37f13359af3eca3f00329d75abd08aad311da43640689a8fc23af9734bc6014b98d6d76363437ee","ssdeep":"6144:PmBrtizIkOw4piAIr995tjj3C5Pf1lWR8dl/PD5rlX4f3RSQYQfIeSk8r5qFU9bW:RK1l48fa","tlshash":"452409d5b3b7a02246e1906594391803f33c7a5db81d842cbb696edb7998948f73bf30","first_seen":"2026-07-27T07:05:39.596424Z","last_seen":"2026-09-29T05:06:08.015445Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/media/caa3a2e1cccd8315-s.p.3b6cae6d.woff2","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:20.998Z","timestamp":1790657960998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.3b6cae6d.woff2 HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1648544\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"caa3a2e1cccd8315-s.p.3b6cae6d.woff2\"\r\ncontent-type: font/woff2\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"f4634c3bc1fa7cb53247e1f2872adb5a\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/caa3a2e1cccd8315-s.p.3b6cae6d.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nxcht-1790657961002-8fc977f296a1\r\ncontent-length: 29288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":29288,"size_decoded":29900,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-09-30T21:57:11.52313Z","times_seen":17849,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/fabdea0d06ffa6d2.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.239Z","timestamp":1790657961239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/fabdea0d06ffa6d2.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648544\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fabdea0d06ffa6d2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"340c059a5c2fa42f87cdf4678cdd6e91\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/fabdea0d06ffa6d2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mvx9w-1790657961243-f4a2e4ea4ba3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":123273,"size_decoded":43519,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"340c059a5c2fa42f87cdf4678cdd6e91","sha1":"a31cfc657bdf1107eadf065e89cd4e590379f397","sha256":"009aa3d8bfee9b801189c34030a842dfac4b4418e2904918f9cabae8d8784c9c","sha512":"05fe80619675d2eec0369eaa666c2a1ee67126efa58f8381799177707da2186d77f9201702ac02bef7d0630b027b4e7ec38e83f57dfde1b9405248ce5993d445","ssdeep":"1536:K8K3GksteMgDBlxaSr8iPhYvAWHHzZmZIhrxj9Dbri1IEy73ONN/d0uf75Np:K8cJfGUhvWndeIJx1Sj047d","tlshash":"aac3f8da73617565c3cb5199c0af4b41b33b19d8240a403cb67da8cb296058a72fbf7e","first_seen":"2026-06-10T21:42:07.813941Z","last_seen":"2026-09-29T05:06:08.03229Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/login?mode=register\u0026_rsc=1pn8p","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.798Z","timestamp":1790657961798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /login?mode=register\u0026_rsc=1pn8p HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"44f725cae5023b52a1139684d86d201c\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mvx9w-1790657961802-6b536f10e835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":1170,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (749)","md5":"9d280aaf58d7963165b9457ccc615937","sha1":"6877f60474090bf58a38e4c71f2ae5591014b8f2","sha256":"82aea23f12e6ca9d1c33849b729fd35f01be64bb84cd0535b4cfcda2aa58dc72","sha512":"d72ac13dcff2e6183692bb72456557bd2efb51e45cd2c0fc3247dd2c8955e5e2a4b7f35fded079d7329c814a4e7658e598c8ba1e371624d117b4cdc186c8f934","ssdeep":"","tlshash":"6f21dd3a9909ec2f7f678d49005bd31ba36d023b86345db6811ece6c079e13a1f062f1","first_seen":"2026-07-27T07:05:39.567822Z","last_seen":"2026-09-29T05:06:08.01947Z","times_seen":5,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/?_rsc=ivliq","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:22.034Z","timestamp":1790657962034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /?_rsc=ivliq HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:22 GMT\r\netag: W/\"27d9cdcdd318567cf90023212a08a124\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvsn4-1790657962040-05b1d9cc4a2a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1089,"size_decoded":1147,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (588)","md5":"fe0f3c1cedd2ae22cc171bbab81a7cbc","sha1":"d7b3b7d283f7af414df5be99d8b5f027f6dd5a2d","sha256":"16585f8c7408c13cd420202305006db1bf140b77113877f98389545a3b0a7ec2","sha512":"75aee2d5466dee807746b632b9734ef4f4272aee86266cfa809bef4e32662d9412fd9de3fc92a493958c03ba610293abf230f74f33ac70da0e7a5f1851b61966","ssdeep":"","tlshash":"e4118c2bd90efdae1ca2cc5d342fa727529d58338534cca9d2aeccbd024586e1f44080","first_seen":"2026-07-27T07:05:39.56319Z","last_seen":"2026-09-29T05:06:08.006158Z","times_seen":5,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainabuse.cc/","fqdn":"chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:59:20.587Z","timestamp":1790657960587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainabuse.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"DE:63:76:FF:D3:B5:90:2E:49:62:FB:23:37:CD:7C:6B:26:5B:03:A5","sha256":"20:21:81:85:23:3B:8E:D1:09:4E:68:A5:4D:2D:A9:29:2B:F8:35:DC:59:60:D1:C3:34:1B:B4:DF:B6:18:01:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Tue, 29 Sep 2026 04:59:20 GMT\r\nlocation: https://www.chainabuse.cc/\r\nrefresh: 0;url=https://www.chainabuse.cc/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::xtwbx-1790657960650-cff3d7323b09\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T22:35:45.430768Z","times_seen":18743512,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:59:20.671Z","timestamp":1790657960671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 236575\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:20 GMT\r\netag: W/\"676138ffafe13fa493f713348ccf54ac\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8dks2-1790657960727-775efb4e824b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104788,"size_decoded":16461,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"c2a84fac3ea27d9244613b0175865807","sha1":"29113e03741285bad69e147ca9623c47e40875b3","sha256":"ee08cff26426b1a588da8932d8abd95f63d04116f05cbe1f6f93b59df7d72683","sha512":"f16af7d44dada791705b8c83fb05ea09dad220f605b6834f938430e15a7e19a0d4219ae44b8a0e37f8d68fb4202f9f487d566e4c87b7df065c1a617f7bc02f47","ssdeep":"768:EuPXsOtlhbuCz5sCrro2F8CXxsaI8D7Sy1d9u5WCDvg7+/ayoXOX+PFOjSYs8P9N:Lh3ZrP8oooAk9M","tlshash":"31a3983063082938a5978bd4f6b5fbac51bf938cdb1b84a8f36c83621bc9c559d275d0","first_seen":"2026-07-27T07:05:39.590702Z","last_seen":"2026-09-29T05:06:08.024089Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":20,"connect":1,"send":0,"wait":10,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/34d933785a17edf3.css","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.222Z","timestamp":1790657961222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/34d933785a17edf3.css HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"34d933785a17edf3.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"77a4ab64ff5dc3ec2618a11e583e5a57\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/34d933785a17edf3.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mvx9w-1790657961227-40085c106fcd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3656,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1970)","md5":"77a4ab64ff5dc3ec2618a11e583e5a57","sha1":"34ecdec928509e6b457d72e0cf902e066e439f07","sha256":"c5138d67dba56eea3446561e9315c111c90efd3d159958220b07015c047d75ae","sha512":"095c72231ce40aaa13d71fa48f8809179cd0b6099ac2620e8947653309f149ec49e8fa262dd0894d1f94dc40b743e792f079d52502f756d5020ec608c77fd252","ssdeep":"","tlshash":"e771b035402fa40ac6e3dc6334ce7ea32819642547ae56679d7d1e784eeb53f13e0b28","first_seen":"2026-06-10T03:01:24.679054Z","last_seen":"2026-09-30T18:00:49.580948Z","times_seen":205,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/edf728ade32a04ce.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.229Z","timestamp":1790657961229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/edf728ade32a04ce.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648544\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"edf728ade32a04ce.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"b6030865827039f772a9cbae6ddf6495\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/edf728ade32a04ce.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvsn4-1790657961235-8662b02a8079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":224636,"size_decoded":71983,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b6030865827039f772a9cbae6ddf6495","sha1":"ad6d3b468296914b6de54ba40f6a7a2a96d91651","sha256":"d0db0d7eed1a2382935448ba98b1a559aafefb2763682ef5d3596129aa316208","sha512":"0a42e98ed3d06ca0723c810e798c0ce24f6025a6ad8ca09225c689b31e377416362aa23e1378f87677a55e07cc5a15eb14d835800948a34db7e4b90dad41f8a1","ssdeep":"3072:AVhLHlPuSSY2UzBRaWcG8TP36kNAHTjWmN6ZXtb96WUpB:AVhLHxuSSY2Uz9rH3FSXtb96WUpB","tlshash":"10241be83955f6626ab302a710af1803733c252b280d4d60a351fdddb57845eb17bf9e","first_seen":"2026-02-05T15:42:23.280742Z","last_seen":"2026-09-29T05:06:08.031346Z","times_seen":38,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/ff1a16fafef87110.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.234Z","timestamp":1790657961234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/ff1a16fafef87110.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ff1a16fafef87110.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"5458632ee5cb3da028baebb11d5f70dd\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/ff1a16fafef87110.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9n2k5-1790657961239-a694452b0cab\r\ncontent-length: 282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":886,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-09-30T22:08:40.473265Z","times_seen":29120,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/assets/logo.png","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.244Z","timestamp":1790657961244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"e35b205b54f5c2eb952058cd5d1105ea\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /assets/logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5k5ph-1790657961248-85c8d8539ece\r\ncontent-length: 265211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":265211,"size_decoded":265756,"mime_type":"image/png","magic":"PNG image data, 727 x 303, 8-bit/color RGBA, non-interlaced","md5":"e35b205b54f5c2eb952058cd5d1105ea","sha1":"ffc758ce6f6c9e7441d09c3a39e23606e45451a2","sha256":"fcdb77c61e9702ffa5157681a1f53d55ecadd50eaf27d50bff30382355da3052","sha512":"ccd864e782344c043b6ee72aba02dfeccfd89d75245d9da8cc8b4319c60ee3c48084367ba6dd9db20b91a4671f59a03ff8c9d3c89c316f690f6f5d56b3a3caea","ssdeep":"6144:PeQx2BgbnnLVpyADMvSBnP2xP5S0pBjMM0ZmZyOm4:DogbnzyAI6BAbrwfZDl4","tlshash":"4a44234274ee0f31f92da00c6d68fb83227aa9fb03714c676517287aa0f7d776527894","first_seen":"2026-06-10T21:42:07.8055Z","last_seen":"2026-09-29T05:06:08.038319Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/login?mode=register\u0026_rsc=1r34m","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.731Z","timestamp":1790657961731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /login?mode=register\u0026_rsc=1r34m HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"b87118c57b8855ad36887ed72845587a\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvsn4-1790657961736-4e86c4dda2f5\r\ncontent-length: 803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":803,"size_decoded":1462,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (413)","md5":"77d39956f440295648cd4c8b81157ebf","sha1":"f6d82a920080350332faf96874db4ef91c1c48f1","sha256":"0237c86e7298d77259545f3c556f05001078704e04a6db19d90de4f3c870e946","sha512":"44829c7bba79411678766a1c367712c1ec1b79b5799581743fccac75a326809a31c33d7316f51d0b30a06910fc5da2de2d00a76aa174e1df70634b0f10fa8070","ssdeep":"","tlshash":"5301891e8d58fe9d58e6d48c228ae70716589a3bf0644dadd4cf9c5002ae0340f8ab43","first_seen":"2026-07-27T07:05:39.574566Z","last_seen":"2026-09-29T05:06:08.00751Z","times_seen":5,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/login?mode=register\u0026_rsc=nn07o","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.799Z","timestamp":1790657961799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /login?mode=register\u0026_rsc=nn07o HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 234353\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"c14fb554b59703e363f395ef4ab12e52\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_index.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvsn4-1790657961803-3481db2a5f3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2089,"size_decoded":1614,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1735)","md5":"db644966323ee030d6f0a46bef1db1ee","sha1":"253cd4837f764f9764923e15d6544975b1dd0c2a","sha256":"b98c2bdab46a708743ec08695f363600d21900179201d69f78b8430ea167de93","sha512":"6511596521c0cf19cb8983c48d6551542b2a9cc71f1c5aca51f211ff9e92a52c0ff7e64040c0307713f544266e1c6d0da818958d096eac17dc45e2d5524f70fc","ssdeep":"","tlshash":"574102359648ab3e7d278188505fe30ba15d003b63340e78d37dde28429513a7b86bd2","first_seen":"2026-07-27T07:05:39.570758Z","last_seen":"2026-09-29T05:06:08.018756Z","times_seen":5,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/c6108499b026e905.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.225Z","timestamp":1790657961225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/c6108499b026e905.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648544\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"c6108499b026e905.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"6daa57e77203a8f4de6bbd9433ff5428\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/c6108499b026e905.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4l9td-1790657961230-bdf36644047d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27050,"size_decoded":8865,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27050), with no line terminators","md5":"6daa57e77203a8f4de6bbd9433ff5428","sha1":"bd43b79948bea2f313929dbf311b1f1facb5682a","sha256":"06f02d9ea36ba9c82c81317e687397fa74a26ffe0b001bab7482634685183bfc","sha512":"3f2d18a953649197a51cd53a65cd9356093be2456149e3aafdb0aa74aac0f29f3e53120b0afd1d1c393317d9a1817d73aa6f6bab09fa6172c5527d8461dc9abb","ssdeep":"384:bcfbcfl2w4VQRBRxrH8sEkkLNvE3gr11lTceWzJ6otgKniY9PiurGzeGZ1n4lYjY:6bcfcQR9H8sETNqO1lTjTn4lqY","tlshash":"26c2a4a971d5f5a117a354e4803f5007f23e0c7a286db0b4a3a2ddeabda054dd133f9a","first_seen":"2026-01-20T18:40:45.391046Z","last_seen":"2026-09-29T05:06:08.01121Z","times_seen":110,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1500648767791-00dcc994a43e?auto=format\u0026fit=crop\u0026w=100\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.253Z","timestamp":1790657961253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1500648767791-00dcc994a43e?auto=format\u0026fit=crop\u0026w=100\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 07ae81bcc02bbbcd1dcd76c8851dd33b7605f486\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 29 Sep 2026 02:28:30 GMT\r\nserver: imgix\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\nage: 9050\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220038-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6196,"size_decoded":6819,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c73a150bfa03091a7c41c01b1ca4d895","sha1":"a9cfaafae694c65f155b620c1f693bfb83ff62b0","sha256":"884d466aa528aac69d7e9a9db0946238bebc056fed0afb3f34776f2136e68328","sha512":"10df3b3f68a8e379933a808df22dcdbf8be826b826a11c56a7766cc8788c979ece281f3fd017e665798d4b6d8e73292dff5b22a418ac4ba06bd987380630ea49","ssdeep":"96:+NF65N26MT0D5MdtbZPAVwzVIlhymcSl2UGixAG4Cj0dLVklnUrZ:+r6oYNMtKwkh7cMXGUBd+LVWUV","tlshash":"b1d16db5f7a0bbb3ed60db3844b553a952db77a8c32177422954672c0a942d54f4c0e8","first_seen":"2026-09-26T05:31:37.05591Z","last_seen":"2026-09-29T05:06:08.039583Z","times_seen":5,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":40,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/favicon.ico?favicon.0b3bf435.ico","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.431Z","timestamp":1790657961431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /favicon.ico?favicon.0b3bf435.ico HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648543\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvsn4-1790657961436-3291a3ad0924\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":9836,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-09-30T21:40:00.426707Z","times_seen":47224,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/426ec9b873380a93.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.230Z","timestamp":1790657961230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/426ec9b873380a93.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648544\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"426ec9b873380a93.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"6072098858c0b1be139396a5c52fe093\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/426ec9b873380a93.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xq6q6-1790657961235-06c78c438838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":114956,"size_decoded":33064,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6072098858c0b1be139396a5c52fe093","sha1":"ad4badacf6ed2b79aac53fcb23e180083afbf1e9","sha256":"992c17dff8cf934069c65dbfc66bc50ad65f81b7ed249c9aa89981daff8d6d42","sha512":"0a886f8abdcd1fe3231d841a367a6ec4e01c64dff01decac67dfe3269b842eb062716183225c49943a08337f184e06f1af59fdba849b3acbd228f9a47f9b550a","ssdeep":"1536:eet9I3dPBQ8aJaRr1jJ3MwZq9tOsATP9zi+Rzltjo:eD9akfjRMLtOssvRXjo","tlshash":"eab309f935d5f4820ba744a6c03f0006f32c5d37189e68a0a3e5ddda746459de1b3faa","first_seen":"2026-02-11T03:11:09.189993Z","last_seen":"2026-09-29T05:06:08.035678Z","times_seen":80,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/login?_rsc=1r34m","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.733Z","timestamp":1790657961733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /login?_rsc=1r34m HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"b87118c57b8855ad36887ed72845587a\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l6865-1790657961737-dac1d967b5cd\r\ncontent-length: 803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":803,"size_decoded":1462,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (413)","md5":"77d39956f440295648cd4c8b81157ebf","sha1":"f6d82a920080350332faf96874db4ef91c1c48f1","sha256":"0237c86e7298d77259545f3c556f05001078704e04a6db19d90de4f3c870e946","sha512":"44829c7bba79411678766a1c367712c1ec1b79b5799581743fccac75a326809a31c33d7316f51d0b30a06910fc5da2de2d00a76aa174e1df70634b0f10fa8070","ssdeep":"","tlshash":"5301891e8d58fe9d58e6d48c228ae70716589a3bf0644dadd4cf9c5002ae0340f8ab43","first_seen":"2026-07-27T07:05:39.574566Z","last_seen":"2026-09-29T05:06:08.00751Z","times_seen":5,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/947b6a80bcdd8921.css","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.796Z","timestamp":1790657961796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/947b6a80bcdd8921.css HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648545\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"947b6a80bcdd8921.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"3672d2b3c8ce4aa9bd28daec2de8ce21\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/947b6a80bcdd8921.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l6865-1790657961800-530da9d7e21c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3201,"size_decoded":1317,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3200)","md5":"3672d2b3c8ce4aa9bd28daec2de8ce21","sha1":"f6a70eb175f3b98d61860fb967d3ecda29193836","sha256":"5544b6e31e0cf2f7f1d96f47627719f22e186feddd0dace71f4b30579f7e27a3","sha512":"bff59fc92507bc354769f7879a97194506b51825a02821f590a7ca5a658571471392573f7f3d9c734611f6ae41ba8c6fa359ac8eb6ad555479778acaa6f70dd8","ssdeep":"","tlshash":"1861debeff2047bbe93776267bdc954bd24de8581f7ac14224a013841ac25e04f54bae","first_seen":"2025-10-09T23:39:13.761211Z","last_seen":"2026-09-29T05:06:08.040601Z","times_seen":123,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/login?mode=register\u0026_rsc=1tdii","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.810Z","timestamp":1790657961810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /login?mode=register\u0026_rsc=1tdii HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /login\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: \"da425fab9e0bd38732e78c79146363a5\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/login.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nxcht-1790657961815-3f4439b9469d\r\ncontent-length: 432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":432,"size_decoded":1091,"mime_type":"text/x-component","magic":"ASCII text","md5":"a544d0286295102dbb735b9b501a1abe","sha1":"4486fdd3d3e0d9bdabc0bbb3445ef1d92d1a79fc","sha256":"cbe25f03459c57f6eeedcd3d4e6160eb1bf7c68d22187a1c73065d59bd6f9314","sha512":"86b6403076caf51bb0b3d1f45a23652c05d5a5971fd9fe1becd24bb93116928935df5fc3f47cf8ba8bbbc37acc5adfd2c3c8ef3feb08726d628983dcd7d8087d","ssdeep":"","tlshash":"f4e02266e51afd7b3e36cc0c001a932b921e883b51306974d26ecd9c43e513a4b8a2e0","first_seen":"2026-07-27T07:05:39.575476Z","last_seen":"2026-09-29T05:06:08.029384Z","times_seen":5,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/login?mode=register\u0026_rsc=9gbhl","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:22.011Z","timestamp":1790657962011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /login?mode=register\u0026_rsc=9gbhl HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /login/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:22 GMT\r\netag: W/\"feb7c27ecb0b53246eb8fd766faaf4b8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/login/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xq6q6-1790657962015-87ccb7390e3b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1388,"size_decoded":1241,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (787)","md5":"f5defc61ea5afc5bc04645d41f4f5fa0","sha1":"bcffc668ad7c7eee7ce83819491a20eb2c0324eb","sha256":"3fa0bcb47944f14329dfbefd343067e2e6c5f372cf8f8cc78309532ddb9a190b","sha512":"2c1a07b9dd43ea58de7bd037089615d36b6028647ea85a550d409dc6ae0436bfdbb8e2d9d331966d8c676960f2ef9914278ea24d0c279d18b374456364536eec","ssdeep":"","tlshash":"6b21432bdd0dee5e5c62cc6e295fab27618d59378934cc6dd39eccf802589660f841d0","first_seen":"2026-07-27T07:05:39.571629Z","last_seen":"2026-09-29T05:06:08.013073Z","times_seen":5,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/?_rsc=1pn8p","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:22.016Z","timestamp":1790657962016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /?_rsc=1pn8p HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.chainabuse.cc/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 245860\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 29 Sep 2026 04:59:22 GMT\r\netag: W/\"c48645e788ed98db7c1d1caeb95f1426\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9n2k5-1790657962021-eb1d0cb85bf8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":1170,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (749)","md5":"9d280aaf58d7963165b9457ccc615937","sha1":"6877f60474090bf58a38e4c71f2ae5591014b8f2","sha256":"82aea23f12e6ca9d1c33849b729fd35f01be64bb84cd0535b4cfcda2aa58dc72","sha512":"d72ac13dcff2e6183692bb72456557bd2efb51e45cd2c0fc3247dd2c8955e5e2a4b7f35fded079d7329c814a4e7658e598c8ba1e371624d117b4cdc186c8f934","ssdeep":"","tlshash":"6f21dd3a9909ec2f7f678d49005bd31ba36d023b86345db6811ece6c079e13a1f062f1","first_seen":"2026-07-27T07:05:39.567822Z","last_seen":"2026-09-29T05:06:08.01947Z","times_seen":5,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/82abf2d65f5428ae.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.227Z","timestamp":1790657961227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/82abf2d65f5428ae.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648544\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"82abf2d65f5428ae.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"19622580859b19b23901b9a7be2f7937\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/82abf2d65f5428ae.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t4clz-1790657961232-c3b7efcf05f2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":33299,"size_decoded":8226,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19587)","md5":"19622580859b19b23901b9a7be2f7937","sha1":"c06faadd6f342879b808413390376b59f7e0b20c","sha256":"bbc0826384faf59b3d35a439a95f7787cd19280ee35469c84cd0b213bc306f11","sha512":"defe2216a1fb2d9b3670710dd2ec27e23fac86ce5e8cf438ddc8038d513c145fc333c0afd051cbf6f1a83d62beafaa5dfc378bbccf26f7eb98bc59c9912f856a","ssdeep":"384:uj/7DGGRPR+rTfIVZ/X+0o3NkOG4+Z47aJUSwT4WGFJl:M+/8Z/X+0o3KZzZ47amy","tlshash":"bce2c7b572d5faa2129341f0c43f2017f3680d7521acb470a7e8cc9b755888da6bafd9","first_seen":"2026-01-19T06:24:39.223584Z","last_seen":"2026-09-30T19:44:26.401529Z","times_seen":5598,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/d2be314c3ece3fbe.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:21.236Z","timestamp":1790657961236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/d2be314c3ece3fbe.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 24789\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d2be314c3ece3fbe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:21 GMT\r\netag: W/\"e189b2054d05a586f4fd6eec2888c203\"\r\nlast-modified: Mon, 28 Sep 2026 22:06:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/d2be314c3ece3fbe.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4l9td-1790657961240-82746df1c76b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30681,"size_decoded":8364,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30679), with no line terminators","md5":"e189b2054d05a586f4fd6eec2888c203","sha1":"7d92609e0338be85a1f0085efa31f699878f269c","sha256":"a6248517cd3ee53a8186b51c59e1e764e3dc0c512f4acbd50e818f9884663e21","sha512":"1c0e250e62e070ed252776fbd469b27c9c19dc68e695b9e90003b746e3ab6f9c919b39ed1890d581bc0bec54a0b8b2b8a68a415db186d4d278121cbe124a8ad6","ssdeep":"384:735z75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNxErV:D5z9BX0ZMOx3ErV","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b07394dcef368dc89a1fafa9","first_seen":"2026-01-15T14:11:00.285057Z","last_seen":"2026-09-30T19:44:26.42747Z","times_seen":7728,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainabuse.cc/_next/static/chunks/57e013d07003281a.js","fqdn":"www.chainabuse.cc","domain":"chainabuse.cc","tld":"cc"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chainabuse.cc/","date":"2026-09-29T04:59:22.240Z","timestamp":1790657962240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainabuse.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:00:43 GMT","end":"Sun, 22 Nov 2026 13:00:42 GMT"},"fingerprint":{"sha1":"5E:F4:0A:46:7A:39:EB:C6:A8:13:19:29:2C:D3:BE:0B:13:57:36:C9","sha256":"3A:44:5D:73:4F:1E:34:BD:0D:60:A7:12:B1:F8:ED:FA:BF:47:26:F5:1E:8A:3C:03:3A:1D:5A:9C:0F:4C:3C:78"}}},"request":{"raw":"GET /_next/static/chunks/57e013d07003281a.js HTTP/1.1\r\nHost: www.chainabuse.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.chainabuse.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1648545\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"57e013d07003281a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:59:22 GMT\r\netag: W/\"dcae2ab6f96bd3f1d229856833eac63f\"\r\nlast-modified: Thu, 10 Sep 2026 03:03:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/57e013d07003281a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vlh4q-1790657962245-e9c54d3f16d8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198962,"size_decoded":51945,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dcae2ab6f96bd3f1d229856833eac63f","sha1":"1d9187e17ad48ead77fe0fe214c2f90a352e5551","sha256":"1036006ee40db51f835ab0d2c1cfd3e0004d6db5c1808238c4af194703d7765e","sha512":"3ffdc7b51f05463eb1677c8893ec0056516a1cb0514773cdf7acce27e0d37d4c67db370d79f1fd3ab326b5bc702364636c83777fe606027146b86a004a064fa6","ssdeep":"6144:cBjFmMW5SiXS/jimWdsKuV60HxNxjsR7Tiu:OF4DlN","tlshash":"a814f7fb7680b73774b13b188a0bd24faf9c9c55cc99a08cdae7c8d65d60861207db25","first_seen":"2026-06-10T21:42:07.760496Z","last_seen":"2026-09-29T05:06:08.0144Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"www.chainabuse.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}