{"report_id":"ceb22e07-2e6d-4d67-9dc6-869ba96ceb7d","version":0,"status":"done","tags":[],"date":"2026-09-25T05:57:27Z","url":{"schema":"http","addr":"fumblbags.xyz/","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fumblbags.xyz/","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"title":"Bags Fumbled — See what you left on the table","dom":{"size":27148,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1109)","md5":"0f038d5ba9c67ef2b86ab439603b6813","sha1":"72f432a6cb5d86cb213f02be6b7e01f7427dde32","sha256":"51b90950ee118a89ad73c38129bc4bf17399916f48d0abc9d5b3d77034b57cf0","sha512":"09f22c3fa08a674455baa78850653640e6723bfac85df96f9b5fec4879ff6b5a31b53d411579be91c6c8657fa4c99076eef06fe3974eec67008e2f15fa03a36a","ssdeep":"384:8cYiNiPi4iTiZigiEd+2nr66+mGF3VFuDb2caFPNsMvERxGJGfGKNGQGhGA1qbOq:8cYiNiPi4iTiZigiEJp+FLoOrPGbOq","tlshash":"97c2a3b164f47273018b90c7faa66f5a2ee0d253cb590044b2fc8bd89fa7c86ed17449","dom_hash":"domhash33b9e986edbe5ce6cbefdb3fdd92c3e7","first_seen":"2026-09-25T05:57:42.597054Z","last_seen":"2026-09-25T05:57:42.597054Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fumblbags.xyz/","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:57:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-09-21T11:53:49.661247Z","alert_count":0,"request_count":1,"received_data":20834,"sent_data":1300,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fumblbags.xyz","ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":18,"received_data":6057112,"sent_data":8894,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-09-25T01:49:58.392693Z","alert_count":0,"request_count":6,"received_data":14010,"sent_data":3457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-09-24T14:32:20.75726Z","alert_count":0,"request_count":1,"received_data":1878,"sent_data":675,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":1,"received_data":306540,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-09-15T05:03:38.382658Z","alert_count":0,"request_count":2,"received_data":1544,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":19554,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1rpc.io","ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-09-16T06:52:32.565183Z","alert_count":0,"request_count":2,"received_data":1899,"sent_data":1041,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":7,"received_data":207427,"sent_data":4140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mainnet.base.org","ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-09-20T07:41:54.112673Z","alert_count":0,"request_count":2,"received_data":2545,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-09-18T18:40:22.463723Z","alert_count":0,"request_count":2,"received_data":1625,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.meowrpc.com","ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2817504,"first_seen":"2023-07-30T16:39:25Z","last_seen":"2026-09-24T00:41:11.268733Z","alert_count":0,"request_count":2,"received_data":1547,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3470079,"first_seen":"2024-06-07T05:17:26Z","last_seen":"2026-09-20T21:54:38.423753Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn-771323a0.gutteuflisch.workers.dev","ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-21T18:50:38.313279Z","last_seen":"2026-09-21T18:50:38.313279Z","alert_count":0,"request_count":8,"received_data":911438,"sent_data":4207,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fumblbags.xyz/chunk.29.6gh2h495.js","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf16644073316776591ff8125888bee","sha1":"a5d2cb797edb4a228d2724936ea319037df2e333","sha256":"219bbddda150ffe260e7d2898f4703da7933f6c982831eb7644db221d975f3b2","sha512":"15000f58058d78145bb23643677e3fb1bf98ca2921a5ee954c85fef1bc408fa8648cf2953287f631a749aa3c83857b1a32dd04bdb0548d8f02083f7bb3034b07","ssdeep":"192:DlWuW0rQVacSLRyfh5pCta+DJzWa8P6tkGT6x9P7BpUPJsFIIJXqDAlAqwnp/7R0:DkuVQsSMaiJZtTg9PlpsxaAnnp/FqN9","tlshash":"0e7219f87676216a03233932207f9102e133db515d5b9050a2d28a857decf6be67bfd8","size":15992,"data":"","first_seen":"2026-09-14T13:46:47.238982Z","last_seen":"2026-09-25T06:09:49.367529Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/f564cf76-5334-47d5-8da7-1df5f824ca26","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"657b088eeb1038d8e34399d9b74bbe84","sha1":"6eb7228a0be2c83d3b4a416cf619e10b96b14330","sha256":"e82675e2a001c02e87589efcb7f29216aa4eb54f115d6ec923b630a77a97a2e3","sha512":"7ae8b6945a00f36a767e397a8db98df520b2fa58c363d88b45787892fa3df46f5c66dba499c6e19230e9168f03f76aaf322afa2c01ccf24b03df4989a55db070","ssdeep":"1536:1b2EZjLYFrWDloTp2ZHymUNRGFjhrT+uJzfDa11xpsHoXv7AVhEbpz64Gk4ymUFB:1COYFrWDKTpuHym66rCOzbaMHoVn","tlshash":"6944edc0be4b2090ffc5318980e6ef54b1130de54aaa6fd6e94d985037ddb60b6ca71e","size":278590,"data":"","first_seen":"2026-09-25T01:19:46.911225Z","last_seen":"2026-09-28T00:41:22.033262Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"335bb47a1b0528e6f63af1480e4efa83","sha1":"2dd6448196f1ed91fed5e8a9efd57637a8487399","sha256":"dbc218e8bf240ba296bcfcacee949d4ad8ff71b6f6b04d1c04095daa1eeec2a8","sha512":"341f316c1a23e1c7873ce7f9889b9b3e1b1b8af63762c65d90f625f21f97f22a19e79ed6e36b496980f8a2312b9cc434db1d4b2f721074893e7e6d908716ee0a","ssdeep":"","tlshash":"8e6000000fcc0030c3303c000c000000033030000333303c000000000f3030000000c0","size":14,"data":"","first_seen":"2026-09-25T01:19:46.912696Z","last_seen":"2026-09-28T00:41:22.033913Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-14T14:38:08.289079Z","times_seen":862940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/a525114e-8904-4556-9fea-d8bfffec8ff8","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1245114cbc7ba61de2660e7887707e55","sha1":"0d084c2fbccbbbc1e2f10661a20504e31d7dc215","sha256":"a9d4cdf2370494b74c854b53d22a7c0538e04e1cd1d7234c6e1904c0039b6033","sha512":"8e2006a85181b818b24ea7a14dcc0cf61f7afd9a3f4e4e8b1de92cfffa36f8812d1fc389b9722daba99ae0cb93a98b40a9336a4c85668d7b3859ef5757118151","ssdeep":"384:peibQIX7B1xHIZINwPma/PaehGwvIhrL/7cB7AtghnP4y0tTIyUu72eq3Bgfq46N:rEIX7BX8INwPma/Pa5L/7cB5hnPF0tUR","tlshash":"1292b8a8a2633d0dc5c73721e0efb40dd1799e7d0ae52486c43cc6ac7eea64983b6d15","size":19382,"data":"","first_seen":"2026-09-25T01:19:46.901521Z","last_seen":"2026-09-28T00:41:22.019732Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/41db64e4-1f61-4074-b3b9-151825cf54e8","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e987d4b7f9ac048fe0005e54bb2051e1","sha1":"7877cab059fef614ca9d3a639ccbc066d02544ec","sha256":"0acbb3128583dd0180a2412ccf6509b6a985ab7f9c9ef5e521e3f4ddc6609e81","sha512":"7387075f82110c24fe3af881b352427fbce0bef8cd6b313bc8dc42982cb759de2a264e1836c37112aaa600dec99634a24dcaa5a85b79ad6d4200e76a704e112c","ssdeep":"384:9vNsoJ3T2rUD9DclLKmjZbz4OXVmpaCHyxcNRczdu:UoJ3T2rUBDclhGaLxcNmE","tlshash":"ccb2d601634b402ee3f362ca21eb139fa5b61d554b951410e64dc9e83b78bfc6ae7e34","size":24808,"data":"","first_seen":"2026-09-25T01:19:46.891058Z","last_seen":"2026-09-27T13:03:21.668893Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/6fa7a47b-e0d9-4f20-9e2b-90203462455e","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8198dd31610f795159a2e81186bc09d4","sha1":"1ed0be7611da85996f438c382b91d07b15f7af97","sha256":"8f011456ececeee81d61f0541dfb0e848045d31ca1ab0298d425767f5f44cbf9","sha512":"8e7dcfac26ad7d07dd9bfbe9002047480063452ce4b436832f834dd48df2addc2d6ebc15e3efaef5d49f14d20afb26f35197a294094984805d05bc1e2878281c","ssdeep":"768:GvE4la660FTNidxkArFszBdIVTvZz54VCThZXWNCB:D4w660ax/F4CtZ94VC1ZXWYB","tlshash":"e823f86ea3d0a2398293107ea1670bcbf17425979e34044af7b794ece5bcd9303b8795","size":47134,"data":"","first_seen":"2026-09-25T05:57:42.631692Z","last_seen":"2026-09-25T06:09:49.395834Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/8883a57a-de1f-4493-a11c-d28a0a503886","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","size":528504,"data":"","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-13T11:29:42.479418Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bodymovin/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-10-14T08:58:46.262278Z","times_seen":2615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/script.js","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"866585650f99cc898608a5ea54fe2a8a","sha1":"ca0078b84ec6d545297bee19067458f80b017128","sha256":"ba8523089e0060dbb0b897733cf7ae18926146d93f6f9a0533b45ee20ee2fd21","sha512":"c298f2dd961be607cff6c2f902654fe1a5bc4a2373ec4c6a8873a55d664e99a9b64114e50dc3cab7cbb12afffa352e8012f90113d1b6fdbe352d7cd58a33dec6","ssdeep":"384:D3ipsBlztWsSPnIJmFR6gKyYo+1eaQgn0BC0a8Gznp/0MjO+XYJE3iqCwEQHpgIc:DB8za5jLct4ceoAF7vCzKS","tlshash":"7823b66dbef735666873307e6baf9204366450434908ed0c3d5cd244dfa0a698bbafd8","size":48928,"data":"","first_seen":"2026-08-28T13:38:10.720456Z","last_seen":"2026-09-25T06:09:49.384716Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/0a630945-5ccf-4807-a160-9ec69645fc26","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb39b84e55eef05c3b7360aca48c16c6","sha1":"d3be1399737f2024fc2f5c99460c7066880af1ea","sha256":"fe5804de5786b04af8b904e76d5c70f01fb3a8986d2345b7687e6cc238b06a67","sha512":"5190a8a7705180f1b40792426cb3fa5d354bca76e20be2f008d0d74159c45ea39b653c8df882a4f537009fb9b0d246cb718ccfaca4c5b1d9f68abd1989e7742d","ssdeep":"","tlshash":"8bf08b194bac579bd18f8260429e6ea9034c10477379ae32c2b6cd2101e26c0256752f","size":529,"data":"","first_seen":"2026-09-25T05:57:42.634946Z","last_seen":"2026-09-25T06:09:49.398626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/b959d5f7-83e6-4670-b398-c6f75fed60f5","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bf4857e469a41734e2332b547fec0fe","sha1":"99c6c12264dc62dce79f1bc1f957e47ed60fbd98","sha256":"9ecd361b8a97c663c30be2a7529b67b223633bbe4d5cb0b87d796a22dfe04f46","sha512":"aa1939345a5c7c818244f1b8d742ee8dd4e9805865639f48a0ea1984f4fbfe97639e008c692469da877452dc9a93117ff5548b5c4fb6c0fa79f1d4bb8dc62ccd","ssdeep":"96:Lt4KlL7qY5/DXWR1BfzhlQE/QyfRuxhfn1qehge5toXuvve:Lt4KlXLIhlQu9kxPqL","tlshash":"388141c6e3561a3cefc25c61382eb63af0787c2f45c54c163b5484e6b19bf8628e5764","size":4161,"data":"","first_seen":"2026-09-25T01:19:46.895408Z","last_seen":"2026-09-28T00:41:22.017108Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fumblbags.xyz/certik-logo.jpg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.044Z","timestamp":1790315816044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /certik-logo.jpg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-3590\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWcuM6q4F4q8Y70TA6kuciAG58tho4WK4qwonUvXXWSUTAnISo6BdZFSsfT%2Fodge%2Bb4ULQVwa9AfdeSRMm9aS6XPK5QhmSuUlThYHYdysTu816qEoi0XVH8WGxUJWzxH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da4db8568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13712,"size_decoded":14628,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"3cd84d623b137afa277ad068178a3297","sha1":"d94a653c30eb6991f8670db8c12097cc923ead6c","sha256":"b29c4ea4e42434424b476eb555b7a3b1a56be5fd42ab39e2a78dcbee523d2aac","sha512":"9474dbb1e3e32ec81f529120a3e95841dd60bc34664cd3862770095f705288f04681d54419f9fb3a110f688f11e0a0fd87f8fe24f374afc2681b4b9b88458827","ssdeep":"192:sSBuMcfgMGaT/gWprgMgG4Fh1fkgP+Cr3fFqPWhChUeppZ0pyloQP8KWCmm:sEuT7T/gWprZg71fzP9rvFPepSQP82mm","tlshash":"f152cff14deec700f94f9c32a4421ba54355be748613f329e4c30d52736c6e5c9ad5a4","first_seen":"2026-08-28T13:38:10.728543Z","last_seen":"2026-09-25T06:12:41.8723Z","times_seen":18,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/asset_platforms/images/131/small/base.jpeg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.057Z","timestamp":1790315816057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /asset_platforms/images/131/small/base.jpeg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1633\r\nx-amz-id-2: 7QdPt/gRev0Ix5LePEdGKn5OXJICks7kaBMDj4Mj2hpT7m83Flhr79bld5lm0t1HWK/Lguzfi9k=\r\nx-amz-request-id: 95KH6XYC9WH9TXG0\r\nlast-modified: Tue, 23 May 2023 01:43:16 GMT\r\netag: \"0e2765a3a70371c22b762c4ca7ecc66b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BXm09yGaZ8WsXPXLT9g47OiUK2iGSQr7\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept-encoding\r\npriority: u=5;i,cf-chb=(851;u=5;i=?0)\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nage: 680083\r\nexpires: Sat, 25 Sep 2027 05:56:56 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a407c9daeb3da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1633,"size_decoded":2536,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"0e2765a3a70371c22b762c4ca7ecc66b","sha1":"3e24526a157fb22fabc0d2d35796349f2f82eb17","sha256":"5f05a67e916ed562321ca2d5078090fb270673bbcf886ca25ade7d150794a77e","sha512":"c976a301691d0c29e513643c87f365d56a7cd3aa9b1b87000132bea015d7cc3c02c50583821b2b2ce7b8458d6a69983fa9e489cbca4db0b7214d8158b7c7d362","ssdeep":"","tlshash":"f3319464238ca60cea1d17387a54db20c7693e3ac5ab978a4950825abb390c09d6c396","first_seen":"2026-04-21T08:45:58.929389Z","last_seen":"2026-09-25T06:09:49.369878Z","times_seen":20,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.339Z","timestamp":1790315816339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 309374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-14T13:30:50.287526Z","times_seen":21167,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":87,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/logo.png","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:57.195Z","timestamp":1790315817195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-dc1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3ksJjXR0rNKqe7tgOaJofdGrb5lI%2Bsv0wDQvZvyuowMhXOHyttXQwzUhgkWbpu%2FnqZkhG%2BeQpqPFSvUfzeGYYk9tiE5IM%2BHErk6VbYn0Qly%2FvH665fGT3xXxfwN%2Fak8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a407c9e17e37568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56348,"size_decoded":57281,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bea08e9347fb688092747b6d78a9adee","sha1":"44e5dc0e6124361f5385405be04aeefed38b88b3","sha256":"8873fc6320ebfbffc698c2f649b6bcf7b50a453d5ed3e4c2b7c3458401666f02","sha512":"fd867d9327f58551d57f6c48fff00094504cf3b721d6733432f6a6f47694bf64d535f689a44ddf9e3f3c74ee7b012567938f5f25cb2479fb70cd4a380aefc001","ssdeep":"1536:+dPSVagbUggOIF1MPp5osuhE2bTO3hcc/t:+qrE1MYrbn0/t","tlshash":"7a43f2977fa0ec8d5b4ca83f979c00dfd63caa82405ce065e3e64956820635f26e5e1f","first_seen":"2026-04-18T14:17:41.368946Z","last_seen":"2026-09-25T06:12:41.888306Z","times_seen":25,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:56:55.296Z","timestamp":1790315815296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:55 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 07 Sep 2026 19:26:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcjLnkW3Xb4jJFTjutZX0AM%2FwGSN2SGL%2BQHGYM7LAFJSc4a%2FKb6NwGVVDuMCQlwMGJi45ee6EOWFaTv7jgcYmPNEok%2FPzG%2F%2BWv8hymLrIy86QHNhRw71XIpC2z56N5%2BD\"}]}\r\ncf-ray: a407c9d66d6f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":26201,"size_decoded":6971,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1103)","md5":"41a79820edc0a9f2215b0b1cb58992d1","sha1":"63e515555096bfb5491237bd6545eb50d8eaabab","sha256":"63f80d857f3d444be78e087bff5c9ab8bec45718414eabe001cd8d3360742274","sha512":"24683b5f32228471350fa89cf78aa28b5b1a3a61cd822434ec0e63e1bbd5d9a354dc882dc12778401f621f8137265dfee1d766bf399652245af5707e676d70ba","ssdeep":"384:QVXd+Mnr6zlRfFurFJDe2cbF64mMvlbRxGqGdGKrGCGLGa1WbM:QVX1IlNwXfkf9UbM","tlshash":"53c283a161f47273018b90d7faa62f562ee0d693cb590048b2fc8bd89fe7c85ee17445","first_seen":"2026-09-25T05:57:42.60265Z","last_seen":"2026-09-25T06:09:49.382996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":106,"connect":17,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/bagsfumbled-iphone-hanta-2.png","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.045Z","timestamp":1790315816045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /bagsfumbled-iphone-hanta-2.png HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-21d988\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W75vUKwe5OvjhvUmKBA%2Bfyvsof%2Fym3EcyG2HW8HYXZezwzZgMD%2FCaFt%2FMMBsk69NsycQOiEEUCTo1I3dTP9Nn2fEv3BooA%2BJ0wmxnSg0LkKxtrKq6vOisawWlTqf1GtM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da4db9568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2218376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2218376,"size_decoded":2219301,"mime_type":"image/png","magic":"PNG image data, 1080 x 2340, 8-bit/color RGBA, non-interlaced","md5":"3749c3a1c943c5e0df677fb4091f1f0d","sha1":"6f992c7931ffb0cb83b514dc63b56e0b96d9b623","sha256":"24742ba2d37de288a295267ebc4462c7f93b4587cedfac2a086609b70854f5fd","sha512":"7b7f30569546868241c54e3ec38cd0ffb49533d52771c0f8965eb6970647756e80be936e5b6df331c9ca2993e0a572dd311ce5db9643863e4bdbdf0842add110","ssdeep":"24576:RbhiPgDxwAlWGYuGvpu4/qzLGWrWGVhl9koB93H4fx:VhiHUqucpu8qzLGWrLN97P3H4fx","tlshash":"372533b784d4fbe3fb973761806da9a3c252b6810f3d9325c2f7449b1586318a221e9d","first_seen":"2026-08-28T13:38:10.722689Z","last_seen":"2026-09-25T06:09:49.385817Z","times_seen":13,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.477Z","timestamp":1790315816477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zMAYJeiCkdb8ll25vps%2FqKAW8%2FOKt2YiNT4YtujaaQv4H%2FXPt4wCNWZ8i%2FdvZ6HLh2nFXjjnVFzwgujh0MCO32OlIjSy%2B2ML944SaPfdmxYMNmLaWeLo10L6Ah0faQv2QQY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=3ZR0Qh52mIPBfrSFFp8tYWlM0pdFD_2JqPB7fvsMzTU-1790315816.6451044-1.0.1.1-AnCft_gda2coTOGL05wm8Dt8Zv6_sogSy9KxYz7uZhxEhQg4eZhKbuiEx2HlLkGdzo6fTTPocZJJWYe5kxwNwM69T9HfRGLG8nZCXhqSFY35DBH135rBk3ngyjvAleQQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 25 Sep 2026 06:26:56 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a407c9de0d7356c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3ZR0Qh52mIPBfrSFFp8tYWlM0pdFD_2JqPB7fvsMzTU-1790315816.6451044-1.0.1.1-AnCft_gda2coTOGL05wm8Dt8Zv6_sogSy9KxYz7uZhxEhQg4eZhKbuiEx2HlLkGdzo6fTTPocZJJWYe5kxwNwM69T9HfRGLG8nZCXhqSFY35DBH135rBk3ngyjvAleQQ","quoted":false,"path":"/","domain":"base.org","expires":"2026-09-25T06:26:56Z","raw_expires":"Fri, 25 Sep 2026 06:26:56 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3ZR0Qh52mIPBfrSFFp8tYWlM0pdFD_2JqPB7fvsMzTU-1790315816.6451044-1.0.1.1-AnCft_gda2coTOGL05wm8Dt8Zv6_sogSy9KxYz7uZhxEhQg4eZhKbuiEx2HlLkGdzo6fTTPocZJJWYe5kxwNwM69T9HfRGLG8nZCXhqSFY35DBH135rBk3ngyjvAleQQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 25 Sep 2026 06:26:56 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":487,"size_decoded":1213,"mime_type":"application/json","magic":"JSON text data","md5":"1ee6ff57810d0fe9a1937db3a45541c4","sha1":"53282de564aa18723d657697c9925d28ccadea1d","sha256":"0029e5bc9ca76b92e835d7f8295bffbff284e9dab1223fb236bc798630e484e7","sha512":"aa5bc40221da58fcb3b3e8e5df15b62a143001a34664202e9d39173ddf3d4223582320e79a755e6359c9affaed7fa46b3fcc8fe961b481e61b3a1b58c04a1bf5","ssdeep":"","tlshash":"22f08cf8bc269664f8987cd6d0c4bc4610103c6da2cf2f18400ab73d39ea0996f1cacb","first_seen":"2026-09-21T18:50:44.025152Z","last_seen":"2026-09-28T00:41:22.02449Z","times_seen":43,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.480Z","timestamp":1790315816480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"POST /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":944,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-10-13T21:12:30.897372Z","times_seen":3569,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/base","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.501Z","timestamp":1790315816501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":681,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T14:43:16.655664Z","times_seen":19101188,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":19,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/logo.png","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.061Z","timestamp":1790315816061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-dc1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8qdItdPZFrRnYiOUyWx92C7xDplUBNYHq%2BgQPAM6XBQfJOIiWs4jlkYX3WzpmSqOfy4WPVM0eU3C5la20IiwSwwSGzNy36Wl4TA72NyhRhe7LEU8X8C0%2Bygn8a5XZ9f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da6dc5568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56348,"size_decoded":57263,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bea08e9347fb688092747b6d78a9adee","sha1":"44e5dc0e6124361f5385405be04aeefed38b88b3","sha256":"8873fc6320ebfbffc698c2f649b6bcf7b50a453d5ed3e4c2b7c3458401666f02","sha512":"fd867d9327f58551d57f6c48fff00094504cf3b721d6733432f6a6f47694bf64d535f689a44ddf9e3f3c74ee7b012567938f5f25cb2479fb70cd4a380aefc001","ssdeep":"1536:+dPSVagbUggOIF1MPp5osuhE2bTO3hcc/t:+qrE1MYrbn0/t","tlshash":"7a43f2977fa0ec8d5b4ca83f979c00dfd63caa82405ce065e3e64956820635f26e5e1f","first_seen":"2026-04-18T14:17:41.368946Z","last_seen":"2026-09-25T06:12:41.888306Z","times_seen":25,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.338Z","timestamp":1790315816338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 309374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-14T13:30:50.287526Z","times_seen":21167,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":78,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=solana,ethereum,binancecoin,avalanche-2,jupiter-exchange,bonk,dogwifcoin,raydium,pyth-network,orca,jito-governance-token,book-of-meme,popcat,helium,msol\u0026vs_currencies=usd\u0026include_24hr_change=true","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.496Z","timestamp":1790315816496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 17:41:37 GMT","end":"Sun, 29 Nov 2026 18:41:33 GMT"},"fingerprint":{"sha1":"AF:2C:42:9A:79:10:B8:27:14:C9:00:42:5D:31:6A:C2:E6:36:52:D3","sha256":"E1:48:0D:AE:71:35:F2:0C:8D:1B:58:67:01:07:1A:9F:9F:40:1E:A9:80:CD:29:A0:0C:EC:4C:75:20:A6:EC:40"}}},"request":{"raw":"GET /api/v3/simple/price?ids=solana,ethereum,binancecoin,avalanche-2,jupiter-exchange,bonk,dogwifcoin,raydium,pyth-network,orca,jito-governance-token,book-of-meme,popcat,helium,msol\u0026vs_currencies=usd\u0026include_24hr_change=true HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-data-source: 2.0\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"2b5813a676af7fd5399723bca3d1e4a6\"\r\nx-request-id: b34abdf0-7e23-4183-9723-d30e661a4daa\r\nx-runtime: 0.008884\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a407c9dd4e3d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":895,"size_decoded":1401,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4ec8130e46ed31e6ba3b683da4f7f29b","sha1":"4fd115d965cd105440ea546dd5459c4596deb138","sha256":"5785042808e6a68b126dca0444a1f07a7e9fb0218c3f949458a47bef72fe3f18","sha512":"a303a2cad1c216837b5ba2a179b38e7d5fb80366d80bcbf9734a9b0f144b048479145e2eea36f113f14b9e0b8b0b8406aa6561aaff7d52498f3722687c79b3c2","ssdeep":"","tlshash":"0c1120831270c4ab8da58f724e9933a0de1b29f5cc4d8204022fded418481ae179fcc7","first_seen":"2026-09-25T05:57:42.608576Z","last_seen":"2026-09-25T05:57:42.608576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":3,"connect":23,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/logo.png","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:57.194Z","timestamp":1790315817194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-dc1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9T%2FxBEXNTIvGMCOcVtITvFGk%2BsWfBqADJIK3iJXtAWL81clF0uxIhppyMm6rNV4KM%2Bb%2BeXyywazwvELjGnLf4GHif50%2FvL8iJU5p%2Ftdrj3QTPHyNH8QVxyBbt1ClFqgJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a407c9e17e36568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56348,"size_decoded":57281,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bea08e9347fb688092747b6d78a9adee","sha1":"44e5dc0e6124361f5385405be04aeefed38b88b3","sha256":"8873fc6320ebfbffc698c2f649b6bcf7b50a453d5ed3e4c2b7c3458401666f02","sha512":"fd867d9327f58551d57f6c48fff00094504cf3b721d6733432f6a6f47694bf64d535f689a44ddf9e3f3c74ee7b012567938f5f25cb2479fb70cd4a380aefc001","ssdeep":"1536:+dPSVagbUggOIF1MPp5osuhE2bTO3hcc/t:+qrE1MYrbn0/t","tlshash":"7a43f2977fa0ec8d5b4ca83f979c00dfd63caa82405ce065e3e64956820635f26e5e1f","first_seen":"2026-04-18T14:17:41.368946Z","last_seen":"2026-09-25T06:12:41.888306Z","times_seen":25,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/4128/small/solana.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.054Z","timestamp":1790315816054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1430\r\nx-amz-id-2: zrJQrzWK6TXupd8NPzGdeO09QgAXyu1fVYwPt17gvAoKK1cWMwQAu8RZJ9ovFNQHqf1CRit1iWA=\r\nx-amz-request-id: 8J611MVZBGQM8TF5\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nvary: accept, accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2225\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\nage: 568665\r\nexpires: Sat, 25 Sep 2027 05:56:56 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407c9dadb33a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":2388,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caaae432aba5384b131797a8f9386fe7","sha1":"5594ebc7f633811ab3332d53e7dfd94d9c81a4e8","sha256":"c261f5492b11374ae6a6cfba49718ec139f562122bb4ff534cb4f7abb24d7f42","sha512":"182eff64777b491674afb9134591a1ec4ef187e4385624c80f5fe346daa84aee85e335b93187d2618d5c4b523c40d9fb9cd474d869ff1f70bb1d0e4837610ada","ssdeep":"","tlshash":"f321e6141ac6d88a86fab1a58a608587d47c34ec870cc931c0d2b14a33b044fdfc8b9e","first_seen":"2025-08-06T14:01:03.720041Z","last_seen":"2026-10-11T12:55:33.243343Z","times_seen":118,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":74,"dns":0,"connect":1,"send":0,"wait":6,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/index.html","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.060Z","timestamp":1790315816060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 07 Sep 2026 19:26:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtQCzdm8JvALIMnWbUNfrKI6I5Dm1%2BP0Mya5FvTh13gXlqdNome5tYk7EdEYzx3A4ci9SpBkR%2BLL2PnVnA0F7%2FZxwtTEfD%2BXwac3USTQRYRjyLaAm19H%2BtbXYFKuRm9o\"}]}\r\ncf-ray: a407c9da6dc2568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":26201,"size_decoded":7046,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1103)","md5":"41a79820edc0a9f2215b0b1cb58992d1","sha1":"63e515555096bfb5491237bd6545eb50d8eaabab","sha256":"63f80d857f3d444be78e087bff5c9ab8bec45718414eabe001cd8d3360742274","sha512":"24683b5f32228471350fa89cf78aa28b5b1a3a61cd822434ec0e63e1bbd5d9a354dc882dc12778401f621f8137265dfee1d766bf399652245af5707e676d70ba","ssdeep":"384:QVXd+Mnr6zlRfFurFJDe2cbF64mMvlbRxGqGdGKrGCGLGa1WbM:QVX1IlNwXfkf9UbM","tlshash":"53c283a161f47273018b90d7faa62f562ee0d693cb590048b2fc8bd89fe7c85ee17445","first_seen":"2026-09-25T05:57:42.60265Z","last_seen":"2026-09-25T06:09:49.382996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.485Z","timestamp":1790315816485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWVBI4vKz2FLKzDzRrzRS3ZhI0k3jYrfPHz2X2986vB2GxayqtLfqu4R0r1nv4bohHijddKIB%2FsFK8ImcGVwU5vxsGAUeicx7oUg5uISgQm%2BoKuqgyJH9a76YAAKFRovwew%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a407c9dd99c2568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":712,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-10-13T11:29:42.465186Z","times_seen":897,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.meowrpc.com/","fqdn":"base.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.505Z","timestamp":1790315816505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:47:47 GMT","end":"Sun, 22 Nov 2026 08:47:46 GMT"},"fingerprint":{"sha1":"74:73:5A:84:FB:C1:87:58:EA:41:06:64:73:93:F0:28:1A:17:0F:DB","sha256":"F1:C0:DD:FE:F2:42:6C:EA:ED:A5:DF:AA:AE:AF:DA:EA:A7:D9:71:42:41:9A:2F:D4:59:AE:C1:F6:CC:A8:58:D1"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLtboZKP94ymUG0DYYPvH17nZXm%2BpD96odZBAqqZ4DrRONfmGj0I2n8jihyhxBkZVR5W0%2BbKe1BMDNn9xz7loj7LrMT%2Bg8DHt0%2FxAQjzniVByfkqm9XFU%2Flh%2B%2FvTsq46kLU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a407c9dd5971568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":817,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T14:43:16.655664Z","times_seen":19101188,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":31,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/chunk.29.6gh2h495.js","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.037Z","timestamp":1790315816037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /chunk.29.6gh2h495.js HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 03 Sep 2026 18:03:58 GMT\r\netag: W/\"6a99b68e-3e78\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdPPMHNZnJNXv70SsB2yIQLg%2BlnfDTNZt4FKSWofFLULjAU11hPXNguOVXbdzowRlyEhD5KNJlWkGzzXs58OwtX2az%2Bn3hrVZ%2FRZ%2B00fqe394AQfW8oLU0vtqpCbWj%2FB\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a407c9da3db6568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15992,"size_decoded":7569,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8384)","md5":"7cf16644073316776591ff8125888bee","sha1":"a5d2cb797edb4a228d2724936ea319037df2e333","sha256":"219bbddda150ffe260e7d2898f4703da7933f6c982831eb7644db221d975f3b2","sha512":"15000f58058d78145bb23643677e3fb1bf98ca2921a5ee954c85fef1bc408fa8648cf2953287f631a749aa3c83857b1a32dd04bdb0548d8f02083f7bb3034b07","ssdeep":"192:DlWuW0rQVacSLRyfh5pCta+DJzWa8P6tkGT6x9P7BpUPJsFIIJXqDAlAqwnp/7R0:DkuVQsSMaiJZtTg9PlpsxaAnnp/FqN9","tlshash":"0e7219f87676216a03233932207f9102e133db515d5b9050a2d28a857decf6be67bfd8","first_seen":"2026-09-14T13:46:47.238982Z","last_seen":"2026-09-25T06:09:49.367529Z","times_seen":4,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/weiland67.jpg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.047Z","timestamp":1790315816047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /weiland67.jpg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-25bdc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c1%2B7%2Fo3h09gssnJlxIWTDxhmqgqDOM2h2lTO1vm80LRB9Cm4ocASjLJUtOyGnUxIlK3UlEBO5IIHt8KfkYZc9pMg%2FMW3Au6eg1tXBjL3XVjvSlAOSsC8eJePkQImQbY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da4dbc568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154588,"size_decoded":155508,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x1186, components 3","md5":"efb83f7f1fefccea0e20ec51315c9df1","sha1":"0faf53ce27c37bfbb0fc31280894e6c0e35abd4d","sha256":"5182e993fb6c66c68ebec4f419c6e9a9cd0ffefb8f8d41eee0b1359e6f292e00","sha512":"ab43778afcd2869de827b7c6d96e067514d8d249fc843680bac8ec56c2d73c496bc0c75544c16936339b1418c7968fa2a78c152768cc07541eca36f4d22ed841","ssdeep":"3072:GfMFpEfV/TvM6nsxCE7CI1p1t1FarVHJe8ejyAK73Sookd/eX76P:IMwfV7vM6UCE7F15ae8D7M0/euP","tlshash":"11e312623a355dad7419556cf7cfc96b4ad980d032bb27e43cd87e419a178ca29840f1","first_seen":"2026-08-28T13:38:10.716099Z","last_seen":"2026-09-25T06:09:49.374836Z","times_seen":15,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.341Z","timestamp":1790315816341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 309374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-14T13:30:50.287526Z","times_seen":21167,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":91,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/styles.css","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.026Z","timestamp":1790315816026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: W/\"6a846a5a-ea8d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ld0oYD2guk5Nq%2BH%2B0%2BE0G9UvNfE0f3Rsgz4HLm6nSVKd3dWju4tSPofPU97CRvqmKcFJXIYIHVxDL27evi%2BJoqQZp1dApsI4Hx8Eq6LdiQO1tinOvwGNm%2FMC2A2ow4L\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a407c9da2db4568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60045,"size_decoded":13361,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0182a111c14ecbb8cbd8e08a21588eaf","sha1":"c857d1a691e53f27776b94cfe4c878ebc88ca6b2","sha256":"e7e3b8cc660fc11d6d4589425310d3838018cff7e6b6657e100bab149c42673a","sha512":"0d81654669d36c69b65779ece437a1a5e4ce042d06af394f53ae17033b41ed1938d2b29dba5204ecccb6fa5b3fb90369ac08668ec3de5ee127c722294661931c","ssdeep":"1536:SmsX6yTjOqyw5kGdD1hCI09kpS/v+ph1/Hvro0LeKlocslRHaHqcCl5kRCKi5O02:SmsKvSCR9+RCGCl5VO0LS","tlshash":"a14376543a6d1448382fe168b597aba8631cd0058d0ecebcb3df156cdfc92e865b27c6","first_seen":"2026-08-28T13:38:10.718126Z","last_seen":"2026-09-25T06:12:41.895767Z","times_seen":18,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bodymovin/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.030Z","timestamp":1790315816030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/bodymovin/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 121843\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 09 Jan 2024 01:38:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LoAROaXCCsS71Qn529oWI9nAk%2F2cgnwpSv0VTs2%2Fo6jpSwABJ%2FMYUNCCND%2FVx2tadgsOPVdcG9jjw9DUMMvsWM9f%2Fx8gwYTbypruQL8TJOwszwSA9SMbAin0qjDBeWLbN6TJwQuE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a407c9da48115a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305543,"size_decoded":64674,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-10-14T08:58:46.262278Z","times_seen":2615,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/vmooklpfp.jpg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.049Z","timestamp":1790315816049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /vmooklpfp.jpg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-6c4d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLELhayB8YyXIVMXL0%2BrN3P%2BXPpZNbNKpNvMA6Q7NdGB6%2BWNtPmyuVu639CqRSFPJwY1DWeDyobAfBbdPnrfYT5lzt%2Bt72XSqYLKRf18gsR5%2BfPCFTlXelw5%2FwEHgMqP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da4dbd568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27725\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27725,"size_decoded":28649,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e63f2431e1e7c468376b16c77bd2b943","sha1":"0d65c61f15fc72983d10fc5ce0ed0e8239729367","sha256":"405b9fda1963cda009143167c35fb7fe1d3fea58073f7a618c54c66c790ddb9c","sha512":"3db33241134fb8ffdb2942714361c0983842f574f075887011bc97fc35e8587ebb544d445bacb7b96ad9b4754882cfdfbd529ea980ec3b5b651e0f4caaf36a8b","ssdeep":"768:5q/DVKDpZ5T2sylRU0tE0xLJsLySo5grufB:5wV45T2TRyo+5QQufB","tlshash":"cbc2e0e793247c26c47ee3794dd7bf9667032c78c45befab2a321da213a21105c99348","first_seen":"2026-08-28T13:38:10.688808Z","last_seen":"2026-09-25T06:09:49.375643Z","times_seen":15,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/jiawgngpfp.jpg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.051Z","timestamp":1790315816051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /jiawgngpfp.jpg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-2cf1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2kn%2FZVkV9qG5s84dWQctAcvUoRUtk%2BUJIzdR4idVKh7iSmgu%2BtE%2Bg%2FjBAER2%2FFOpVTcHm3zoMyBaIZNiFM9WSVtw5IXo68RaeKHW0%2F6GWHcQro59WL4dlZP9lqH%2F6tx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da5dbf568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11505\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11505,"size_decoded":12433,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a172c86925acd8a54a74985a5c5cc9c4","sha1":"bbad453905fc35dd54491f51a150637a55b5ec47","sha256":"3b39e39ba3c5eeafdeb8844b529e2a44bdc33f99b6dd45c12b8077f23b0ba084","sha512":"7088c596994bb2cff5efa98126ccd0492a46d6169db0ca38ac92b0606c77fe83790e17129c10142da114824e6be3403228ef999b6507ab8d718e449c6fe309bb","ssdeep":"192:sn5cbv6uPqm211g+A2F1cmxlKS9NYeLf2BH1LOvcRefeO41JT/4lYWkTivI+j9:sn5oCOb2DNA4tx4S39upEwoP4j/G/j9","tlshash":"4e329e3f334a2c45f29c27b0d4d54ba3af32bf6acf59da270088910993758c95c8c1ab","first_seen":"2026-08-28T13:38:10.72672Z","last_seen":"2026-09-25T06:09:49.394737Z","times_seen":15,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/279/small/ethereum.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.055Z","timestamp":1790315816055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 948\r\nx-amz-id-2: qiKzw2+1j6QbKhh/apuyXDxv7ot8j/Ctjhfp+ErNvlZUb2spjoJ3SqH0rW1GoruJZHrL/CBsfsI=\r\nx-amz-request-id: Q805GTDV9B8SQJH7\r\nlast-modified: Tue, 21 Jul 2020 16:28:02 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=31536000\r\ncf-polished: ok, orig_size=1887\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 266822\r\nexpires: Sat, 25 Sep 2027 05:56:56 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407c9daeb45a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":948,"size_decoded":1802,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31e1aba01328ea90f32d232f715ed6ee","sha1":"78bc3af43f1f851a185985e3eb68c3592be97978","sha256":"8f45cd0b346a8c0f81f590955b0543d96e811e03c85166854aed6cd498ac095f","sha512":"0f618acb05c9f7b4eb219d2c794d189826bfbf8c61bd9a1a59dc6eced364cf5dd154f870a54e227ba14f7c95a218e6d48c8d7d84d7de1e83b7db52361cab138a","ssdeep":"","tlshash":"921194644260a0268abbb00036db414a0134d8e4ee56c54e49b28f07094833e2c84775","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-10-13T15:59:13.542155Z","times_seen":167,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/12559/small/Avalanche_Circle_RedWhite_Trans.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.059Z","timestamp":1790315816059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/12559/small/Avalanche_Circle_RedWhite_Trans.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1252\r\nx-amz-id-2: wLhVjfkACW79+dkcGLOexPAntnwGKt3SYMZgBiGgJjBiLEYJ5lDhxzvwekYaTIz2Ko7RkvfYwtQ=\r\nx-amz-request-id: AKPDEG1PDVFEXG79\r\nlast-modified: Wed, 14 Dec 2022 04:36:16 GMT\r\netag: \"b96ca6f624d7e517b9b0bcf7d4c70a06\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HC_Ey0u5QoRsg7G_3rFd3SrEP7lTkrR5\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-polished: ok, orig_size=1966\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 793611\r\nexpires: Sat, 25 Sep 2027 05:56:56 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407c9daeb3aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1252,"size_decoded":2172,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"de75850bfc901792578485f0f5e0e23d","sha1":"a58fe09c6c650a5464f2d5aa9565f3aca0437c98","sha256":"73f99738b2bbc3d3fe834936dc3638733bde9a54fe53824ada882e7d3f2cc253","sha512":"2dec5c6bd9d54e43bd36869a92bbc0a69b946e40b2fbde81d328f286efa95e9d9b80afee7a06541cd010e7d1b66888142015fcc90844e98e71b25ddf64ff64f2","ssdeep":"","tlshash":"7d21e75b2a20cf1090ae3cbdb41eac61e0a3155926a20435351daea9811b7e3c49e3a4","first_seen":"2026-02-06T18:57:36.496215Z","last_seen":"2026-10-11T12:55:33.234051Z","times_seen":51,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.333Z","timestamp":1790315816333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:02:26 GMT\r\nexpires: Tue, 21 Sep 2027 16:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 309270\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-14T13:43:12.264216Z","times_seen":35555,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":44,"send":0,"wait":32,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.500Z","timestamp":1790315816500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a407c9dd4968b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T14:43:16.655664Z","times_seen":19101188,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.942Z","timestamp":1790315816942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"ro3s09rDVBzzlmWSQTaOrmk2klW8pJqPACYkTTkwW8FWyZCMrnuAimEUyXu21hzggWmqsQm4N1PA91iI8oz_vSjQxOlUhCxOFmKq9kHk"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFW4H7JkjUMwUbQd3T%2FOHH%2BocSaOeNIeiAJGizioG%2FtdBm2haJIfeWpokxrgc%2FfntDVyi%2BJuYQNuMt5YxZhqpaGc7EPU3C1RwEkHzxUg2OpleYOG2kdlRxgQdTBBYbEPLYZ21FBXXB0yuplpS7RaSz4hO5z7zbGdVP%2Fy\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a407c9dfea1d0b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19382,"size_decoded":7306,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19382), with no line terminators","md5":"1245114cbc7ba61de2660e7887707e55","sha1":"0d084c2fbccbbbc1e2f10661a20504e31d7dc215","sha256":"a9d4cdf2370494b74c854b53d22a7c0538e04e1cd1d7234c6e1904c0039b6033","sha512":"8e2006a85181b818b24ea7a14dcc0cf61f7afd9a3f4e4e8b1de92cfffa36f8812d1fc389b9722daba99ae0cb93a98b40a9336a4c85668d7b3859ef5757118151","ssdeep":"384:peibQIX7B1xHIZINwPma/PaehGwvIhrL/7cB7AtghnP4y0tTIyUu72eq3Bgfq46N:rEIX7BX8INwPma/Pa5L/7cB5hnPF0tUR","tlshash":"1292b8a8a2633d0dc5c73721e0efb40dd1799e7d0ae52486c43cc6ac7eea64983b6d15","first_seen":"2026-09-25T01:19:46.901521Z","last_seen":"2026-09-28T00:41:22.019732Z","times_seen":34,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/bags-fumbled-ada.png","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.050Z","timestamp":1790315816050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /bags-fumbled-ada.png HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-3081ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anA%2BgxCl7A7yvHZc3BvvWy6RlqRpxRduoo5eVM7skDMrHkoGPdvon6KZEVesJ4AGO74%2Bo%2BgAhOSk3ZRR1oVuYnU%2FbsHQ6yKiU9XrMYosy4N9yn3Tpgu5F%2Botn5yHI%2BqW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da5dbe568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3178954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3178954,"size_decoded":3179881,"mime_type":"image/png","magic":"PNG image data, 2160 x 2700, 8-bit/color RGBA, non-interlaced","md5":"cbcd6a14271bca9e40b417b3359d2137","sha1":"c613ba3b20d11ec63bdf71dd6422b2ced6e0606b","sha256":"d403768d93ac993f04eb3f9b088bff68e04f828b6c3ce1092f060b66f1bf81f2","sha512":"907fccf5bcac1143463e08d37055d5d07ba9b6598fe53cc6afbe767a53696f4efb49750b744060e1a1f19ed242b9df0c1ff558001c77611de11aacae1a044255","ssdeep":"24576:jT6OQuH1JPznOEYiiBV8PI/4d6Viv9ygzaI6heSoyjHN8:jmst6EIBV8KTVivVzzbh","tlshash":"cc252396c0f260b6b453957e7d72a548438c3aeadf2863738ab0c6ba75d5d50c062fcc","first_seen":"2026-08-28T13:38:10.676353Z","last_seen":"2026-09-25T06:09:49.382368Z","times_seen":15,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/825/small/bnb-icon2_2x.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.056Z","timestamp":1790315816056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1746\r\nx-amz-id-2: 3ZalYzKQ4RtQ6A/I8dhK2bA2zx7+2VINnI1S0ATKHAVnItP76yG/nhx32K0CLG8+aQUO6kayOxTrw3lPFQXUZunYDKmeKe0P\r\nx-amz-request-id: CCPWTVY2709W7TYY\r\nlast-modified: Wed, 16 Feb 2022 02:50:52 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-version-id: v33bpgYG6.VLwv9VTOSZhRGSlcErU9GS\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=31536000\r\ncf-polished: ok, orig_size=3237\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 75743\r\nexpires: Sat, 25 Sep 2027 05:56:56 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407c9daeb3fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1746,"size_decoded":2648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13190e0172162efbc92046d2b3b70127","sha1":"c84f2e5c71aefe20d8db2c18ba060506b8e1e13d","sha256":"74e54f284baf48aae2a5d7d6cd87131c1c3fd2294f4f2c2cc646716e4210a57a","sha512":"b1b7372a973ca60b231d34b204858087ecd912951d9f9accdef337b7ea7ea0943cb1098283eb324f815bc9dd40ad75edde82fc6e9f60303c4e1dca56f87c41cd","ssdeep":"","tlshash":"c1310ddde292ae4d1417c10d13ee045a9c546fc5d425bb7a4d8238db53e40e582ef4d9","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-10-11T12:55:33.231653Z","times_seen":93,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.337Z","timestamp":1790315816337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 309374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-14T13:30:50.287526Z","times_seen":21167,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":68,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base-rpc.publicnode.com/","fqdn":"base-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.479Z","timestamp":1790315816479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a407c9ddb96fb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":487,"size_decoded":723,"mime_type":"application/json","magic":"JSON text data","md5":"8ec72397441cfcb69d31830d99bdc1be","sha1":"c2265a89c83976e576bdfa33503dcbb8159af345","sha256":"4c4b1f1da715aa60785b96145541725d6fee84832cbbb931ceb886bced4d5d0b","sha512":"c66649811b47fe87cc4fd23d124d910da938c0f2280472625977fef154d6c1daa4d423bae60af81e1300f2877032028f6b0e19a0a9c729c83f6f2b5b1b9e45db","ssdeep":"","tlshash":"adf04ff4bc169664f8847cd6d0c4b84610103c6da6cf1f14400a673d35da0596f1c5cb","first_seen":"2026-09-21T18:50:44.018754Z","last_seen":"2026-09-28T00:41:22.020497Z","times_seen":46,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/bagsfumbled-logo-white.svg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.043Z","timestamp":1790315816043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /bagsfumbled-logo-white.svg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gB9nOxP3wmCN5Yc7mIIVyXDJ76uEYRuV9jDV4jcb%2Bf70hb81lCBnm1lrpHDybDOUPOwe8Q9TpnrpSHE56lhEP4ekRECx1LoRL0C9PlIolztc5U2U1f5pG7P6GeFohLRh\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6a846a5a-229\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407c9da4db7568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":1281,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"223231182ae1df3072dc7e20b7a98a08","sha1":"2f6115f981b9f71525bd772e312dc89dfd546e16","sha256":"7aff316699f8f88913f03b45dd4eed82d377b4d256cc00d407da9556b1e81a74","sha512":"5ae35e048eb6d7081658aad0316688ccc8e7c8a4e4d1a7be08ce5bea6c796973aa462760da47e66106f94b863b4fd448f7d0d88f6b35feb8545af518050b06a4","ssdeep":"","tlshash":"e6f020a3dd9d3f0fc20e270497617cb2a38dd1d849860198da6d2a31a08d4ab1e612cc","first_seen":"2026-08-28T13:38:10.705423Z","last_seen":"2026-09-25T06:12:41.856128Z","times_seen":18,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.335Z","timestamp":1790315816335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:00:42 GMT\r\nexpires: Tue, 21 Sep 2027 16:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 309374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-14T13:30:50.287526Z","times_seen":21167,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":34,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.503Z","timestamp":1790315816503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://fumblbags.xyz\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a407c9dd4df849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T14:43:16.655664Z","times_seen":19101188,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.631Z","timestamp":1790315816631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 127\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"zUTWWtF0gGjopvG-UZ46D7JKWkRjxXBbd4S5kK2eIVlxSH9F-XUtVpE0t9YPra0HEkd8M94oFNu_IiHho7Z8nT9M2BJWCYu2-6Ekp_PeN8NswNehSv3bp44MWlKaGgQ"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5fh5v3QRpUmsAM6KQUlYayH%2FT%2FVpkKklglhz8bo10MXVreTTDiQy3kjeQXE4YhSg2lQRaeK6CZwHFWuyvpPFviqjO%2FCy6s9ODz9bnlg9vFnaAkoYInrSpKk9HVZrzzR9NGfFXhh9l%2Ba6Nyl3NiKkpj4nK7yTdg8006K\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a407c9de09ee0b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281161,"size_decoded":68820,"mime_type":"application/json","magic":"JSON text data","md5":"0b9fa32fccda1ff8f19e8e5a6a49d945","sha1":"b3673fa68367cfbd71ddbc2787ee6e27c21f39d0","sha256":"0f0f334cde557b052304844b3e5704b77ecb1f2191096b2ebfa7539b4320ba2d","sha512":"f6d5c90e849f1a838044893a369eaa67ed5f4ec5353a80ef1ad3ef985eb3a9fcb7b2dbe22ef0c66f565de29b358eda0955c96e2b4718151854cf721ba360efa4","ssdeep":"1536:PmBDD5DT+zhgXrcl3cx1UOU7baYqjs+Z+upz5Tax5TpgnQhvvKvBhg3lG46QUo4o:4h+zhgXIl3I1UOII0izZa+nQ0sB","tlshash":"9554eec0be4b2090ffc5318980e6ef58b1130de54aaa6f96e94dd85037ddb60b6ca71d","first_seen":"2026-09-25T05:57:42.621702Z","last_seen":"2026-09-25T06:09:49.392705Z","times_seen":2,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":5,"connect":12,"send":0,"wait":162,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:57.101Z","timestamp":1790315817101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /getWallets?projectId=dbf60097636608e70e02211ad1f03152\u0026st=appkit\u0026sv=html-ethers-1.8.21\u0026page=1\u0026entries=30\u0026chains=eip155%3A1\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96,4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0,fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa,0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150,38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662,a797aa35c0fadbfc1a53e7f675162ed5226968b44a19ee3d24385c64d1d3c393,2bd8c14e035c2d48f184aaa168559e86b0e3433228d3c4075900a221785019b0,20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66,ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18,1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369,5d9f1395b3a8e848684848dc4147cbd05c8d54bb737eac78fe103901fe6b01a1 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a407c9e0fd4c8be6-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 4782\r\ncache-control: public, max-age=43200\r\nexpires: Fri, 25 Sep 2026 17:56:57 GMT\r\nlast-modified: Fri, 25 Sep 2026 04:37:15 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20376,"size_decoded":5476,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c01db5dfee3f863f4d14cd8a6067bbc","sha1":"f3b2050d63b872da1cf778078d91e98f06265858","sha256":"30a77bb0f6c954a8edc69bb8dea580debee574b39d3dfd09656361075f0e1afc","sha512":"c79d82ce5672d44426d9aadc7a16337a35aa3f2937fd971f48c9c782478351715d25456e52bd5706f528ec2392bfd345621a1346f7751f6aea15b7931e6ecc4b","ssdeep":"384:qJu9vMUwOkd77rzdoVWIMCtm9jGdU95wiDCDtl7:ucvVuNo9i2R5","tlshash":"d792229e47d09d96de70c788e7adf9ef947ee003c2cd189aa5b1497440fd8a3320169e","first_seen":"2026-09-21T14:26:22.574Z","last_seen":"2026-10-13T11:29:42.450052Z","times_seen":366,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:57.344Z","timestamp":1790315817344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 726\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":726,"data":"G%9%6d^Y35Et\u0026j06bnTVNLJ4u%HSTHBcDAsvUJqrcUd83htDrG6c5Z\u0026Ws3%Ege0BdE2WWTAB^z@TLmZ1bxJhc4cfrYX7eU6eXLxuH!Hp6SXBqe^tp$F@npKx6h8nTH13MScuZU8U@jmmsjJbZQWx3AS@T$tWFXFVx7T1yM0C1syKh1K8RPCGk0$vt$Xc@kWZM^wbgg%az8ksu9gAHvfy2Sjry0GzZH0vdb^@ze\u00262z2GV6@BzUhWNTdW9hK%R0tVmVQJSSwPV4Wcffuv6Hbr\u0026PaNz6zQv$\u0026wsA9XsN8GjKJYJ@JMaymWyVFfh9HLKh1FZV7j@ekG1GKj9Epn$vxF4z0XXuU2pxW$M#HK6A8utvwEEnbenH1Ehc39qEF8ayY1k$yRs%YPT@rqrJ9Xtjqe^QxCZg3QNRKqduFyhTQ8fPWC0c^cGtec%u5#P8gG\u0026hZ3mCD#MNR3QYVP3F\u00266zph8WyBvxKWhsWm7C15pgG2wWTeSb!zdhSyWf9TPWc0nqg%tGTKZG4$0%z6uEbFtCLqeFpXMb8mxD6d$#@cNkdJ%WVDZp3PdLye7fZgNQqKyTD4TQBd#K7@P5zwnFDqPA4!\u0026sv!kLZyySZw2Y^gkX\u0026u^bYj5j^YGUWJTRx@6kFN35kPYyjWj%qKBsCC2FsMzp6rrChp43s8kvgA35Lx83w14w\u0026H^UFbEKSbcc0aJf@AX#m#2BTjerJy6QsXKX#ST0VqmS#A"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5E1M9jE5KFv0rX%2BAlcN9RUtxJzrx2LCHjB7t%2FBje59aFVekp6%2BPtyoQyKRJCl5Whz7D%2F6RYcrL6ZkgaY5xDnV4YxFVNiczzsOxg7ml0yZU7sgMAVTCVORJDVCrLmQ78jC%2FSN7MKpfOU%2FnB8IuqT1yF3TtxgIlMOfwjl\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a407c9e26a360b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":878,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"17874afa8e13f7ef45c4bf9a34db71fd","sha1":"44a32064a31cd70ba9481e0d30a7bb258af85e99","sha256":"326b18c291dc8059af239e0b6a510a3d9702d97a54e44cb49a6dbf55cdef1297","sha512":"8bd943ee3beb78f8994033fc9a8b7000df6e071844f8a524432741aef50e4d09eb5052b206ae4698c68e04c4bf25ada6fe8c177f5c4469fb7ad21c7558999da2","ssdeep":"","tlshash":"20b0120863e38201bc81506500b089215481e1fe150b21cc280d34e0a9c2c00154015c","first_seen":"2026-09-25T05:57:42.623669Z","last_seen":"2026-09-25T05:57:42.623669Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/16547/small/photo_2023-03-29_21.47.00.jpeg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.058Z","timestamp":1790315816058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/16547/small/photo_2023-03-29_21.47.00.jpeg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1561\r\nx-amz-id-2: w0nkrhpDonK2Ai0HaQeQFH89dLSiMJOYHJcSKGan+8mkpjVGBu/I1FkT9At129+N2Q4PlkI3afc=\r\nx-amz-request-id: V41PGCXEX5MQDRRD\r\nlast-modified: Wed, 29 Mar 2023 13:47:12 GMT\r\netag: \"cce1144500c017fb8cc1a19baa16a946\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DmxZ4Zxj35pbMBlIw.pBhXHksF0vmJgW\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: public, max-age=31536000\r\npriority: u=5;i,cf-chb=(177;u=5;i=?0)\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nage: 411659\r\nexpires: Sat, 25 Sep 2027 05:56:56 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a407c9daeb3ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":2464,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"cce1144500c017fb8cc1a19baa16a946","sha1":"8465b8cc3621af67c64e8bb12df1dfff43825487","sha256":"68a60033191503e9335a3b0389022929b59e893eaf9cf591420f26b53439ad62","sha512":"9fd8ddba41f1d4f9b8fca078cf251d6ae609c09911ecd3e6ff9db240e53b00a888009b188dcf50555265bcbde48a00d4e76da1f8d57fc3dd7a19edf03c0864d6","ssdeep":"","tlshash":"8731b5fbba2e9fc2ccd5e531403e7348e42cad8ac8210b4c0a116e50a2b5ed6ec51d5a","first_seen":"2026-02-28T15:44:19.51601Z","last_seen":"2026-10-04T06:23:51.332167Z","times_seen":37,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.945Z","timestamp":1790315816945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 104\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"b-lwfR8Rgw6HGQ3EPVM9Wj3RfxVmpOxyJjco7uZB56fepsjry3xOLqkZape4JFFOh9BXPvQEDH_Koq_bAKlENqz6ltgMJVtRxh4JEan-"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZgmFrRib3ehzapdplAftjz8qi%2FLJVmepa0BlP%2BucQYEB99FHhterkh0Y%2Bd0HlkTxXL9bITEPksZOoPwwlLLl%2BoWUUl%2Bh53CMGYaTzjWfTkh6sDmhKX%2BdbbHVwG1Rs2xz9y22GdbeqJHxYyxqy6Jqp%2Bp%2FLUnPtuxcg78\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a407c9dfea200b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4161,"size_decoded":2430,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4161), with no line terminators","md5":"4bf4857e469a41734e2332b547fec0fe","sha1":"99c6c12264dc62dce79f1bc1f957e47ed60fbd98","sha256":"9ecd361b8a97c663c30be2a7529b67b223633bbe4d5cb0b87d796a22dfe04f46","sha512":"aa1939345a5c7c818244f1b8d742ee8dd4e9805865639f48a0ea1984f4fbfe97639e008c692469da877452dc9a93117ff5548b5c4fb6c0fa79f1d4bb8dc62ccd","ssdeep":"96:Lt4KlL7qY5/DXWR1BfzhlQE/QyfRuxhfn1qehge5toXuvve:Lt4KlXLIhlQu9kxPqL","tlshash":"388141c6e3561a3cefc25c61382eb63af0787c2f45c54c163b5484e6b19bf8628e5764","first_seen":"2026-09-25T01:19:46.895408Z","last_seen":"2026-09-28T00:41:22.017108Z","times_seen":34,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700;800\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.028Z","timestamp":1790315816028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700;800\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 05:56:56 GMT\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18870,"size_decoded":1638,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63f9dd9f449d4a227f4d22682573a612","sha1":"be9523153083223af6ab9b184cde52c3dbe189cd","sha256":"8000ea228de0657bcd2b821199d0acdb306db1b3350d56f631b28e20f021c139","sha512":"690d4682d2af871f87e001110c22b373ca50362d08415513cf7d184a24b415adc5fc627a8dae8ebd4007c5c736210e17b36b13401b89cad8f158185e4fed248c","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxAGyvp3lcXEWcGGDZx/GiZC4g:fOGC6CmOK22KDgRt","tlshash":"4082eee1041b9404ea472cc633cebe35bd8ea1066081d9b9dfff18989daac72233475d","first_seen":"2026-02-13T03:15:33.479048Z","last_seen":"2026-09-25T06:09:49.368244Z","times_seen":27,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":51,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/index.html","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.297Z","timestamp":1790315816297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 07 Sep 2026 19:26:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LszgdOYu9TjuVyNoTKbKKiq67USPDzYLBudYSs4JbuqWVPMPxDlhIQcfFx4C5TVQP6I5CzNRHresRv%2FwlyHitb6GAeoHaJZuuyoHO5NDOHptfMSPFw8FuRq6avbXsUlK\"}]}\r\ncf-ray: a407c9dbddda568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26201,"size_decoded":6957,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1103)","md5":"41a79820edc0a9f2215b0b1cb58992d1","sha1":"63e515555096bfb5491237bd6545eb50d8eaabab","sha256":"63f80d857f3d444be78e087bff5c9ab8bec45718414eabe001cd8d3360742274","sha512":"24683b5f32228471350fa89cf78aa28b5b1a3a61cd822434ec0e63e1bbd5d9a354dc882dc12778401f621f8137265dfee1d766bf399652245af5707e676d70ba","ssdeep":"384:QVXd+Mnr6zlRfFurFJDe2cbF64mMvlbRxGqGdGKrGCGLGa1WbM:QVX1IlNwXfkf9UbM","tlshash":"53c283a161f47273018b90d7faa62f562ee0d693cb590048b2fc8bd89fe7c85ee17445","first_seen":"2026-09-25T05:57:42.60265Z","last_seen":"2026-09-25T06:09:49.382996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.482Z","timestamp":1790315816482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 9a4e25a200752193d96ca6c58b5b4b26\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a407c9dd8eba49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486,"size_decoded":823,"mime_type":"application/json","magic":"JSON text data","md5":"4cf53ffe260d5faf637d9099590858ba","sha1":"389f46fb74e5c1a9a68d6d9c678587fcfbc1996b","sha256":"14abc3e1e68587cc3fec2c96337bc714a97b84931535f8b2e71d7e5a53f2a065","sha512":"bc1f2b11fe8c1b3b33239024171e867205497b816ab5ca62fda493276378370bed7b799a3f11e70670ed02b43143230a78bb6b5163b4d5b1720c5a3f322cb32a","ssdeep":"","tlshash":"0ff04ff4bc169664f8847cd6d0c4b85610103c6da6cf1f14400a673d34da0596f1c5cb","first_seen":"2026-09-21T18:50:44.019987Z","last_seen":"2026-09-28T00:41:22.018827Z","times_seen":48,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.499Z","timestamp":1790315816499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:02:04 GMT","end":"Sun, 20 Dec 2026 10:01:53 GMT"},"fingerprint":{"sha1":"EE:2F:47:56:E4:0D:41:2D:A6:81:0C:BE:61:52:DC:30:A6:54:DE:05","sha256":"F8:07:23:93:9D:91:15:D7:7C:9B:B6:3E:4E:0E:F7:5D:DE:51:02:D1:50:15:AB:93:F8:43:26:69:7E:6F:72:F5"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=PQRv4lXZG8Td9VNmo8t9FP5eki3W4hZuQA8QTrtic.Q-1790315816.5249867-1.0.1.1-6rITGBXc9M10xAaXl1.UblgemYae3IN4_md.27F6Y5Smb1AcdYylD1iNhdLTbVneazcr5vd1JH_tlN91Q0fBWxctBetAo0ffoD.V7b_aV0HdBUoyvh9TzhV.bdfeknmQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 25 Sep 2026 06:26:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8%2FVE2fSqeOnN4XHSJ9UWn1z8ljUILd01FsHano%2Bm9Ohxj7VDysH3qtPSuHmzYnwWoMkWi1DKWc8pY%2BFXq567ba8fQOt61mCcxSc15wxOgq1Dvs372M00M52ToV3DBqnW40%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a407c9dd4cb856c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PQRv4lXZG8Td9VNmo8t9FP5eki3W4hZuQA8QTrtic.Q-1790315816.5249867-1.0.1.1-6rITGBXc9M10xAaXl1.UblgemYae3IN4_md.27F6Y5Smb1AcdYylD1iNhdLTbVneazcr5vd1JH_tlN91Q0fBWxctBetAo0ffoD.V7b_aV0HdBUoyvh9TzhV.bdfeknmQ","quoted":false,"path":"/","domain":"base.org","expires":"2026-09-25T06:26:56Z","raw_expires":"Fri, 25 Sep 2026 06:26:56 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PQRv4lXZG8Td9VNmo8t9FP5eki3W4hZuQA8QTrtic.Q-1790315816.5249867-1.0.1.1-6rITGBXc9M10xAaXl1.UblgemYae3IN4_md.27F6Y5Smb1AcdYylD1iNhdLTbVneazcr5vd1JH_tlN91Q0fBWxctBetAo0ffoD.V7b_aV0HdBUoyvh9TzhV.bdfeknmQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=base.org; Expires=Fri, 25 Sep 2026 06:26:56 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1056,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T14:43:16.655664Z","times_seen":19101188,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":113,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.340Z","timestamp":1790315816340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:02:26 GMT\r\nexpires: Tue, 21 Sep 2027 16:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 309270\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-14T13:43:12.264216Z","times_seen":35555,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":56,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.504Z","timestamp":1790315816504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 20:04:35 GMT","end":"Tue, 22 Dec 2026 20:04:34 GMT"},"fingerprint":{"sha1":"64:07:AA:EA:EC:05:3E:0C:75:F8:AE:EF:24:C3:96:AA:A1:7F:C3:18","sha256":"1E:68:A1:3F:DA:C3:9C:9F:0B:29:2D:8C:F9:7D:56:93:BF:58:8B:5E:45:F4:7C:FE:1F:92:04:D3:47:5B:6C:39"}}},"request":{"raw":"OPTIONS /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fumblbags.xyz/\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ob8K52Sl%2BOT28aatGo6Sl1vHaHMOsqkHgh7hR3%2BT8yF1Dw6BDtdpav%2BQeqC5VNgMqy52w4P7iaVe9B59%2BRm%2Bd1Cchmklm%2FjuoSJcZEB9%2BKuoO75ovUs4eL72\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a407c9dd5d7c5688-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":761,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T14:43:16.655664Z","times_seen":19101188,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.941Z","timestamp":1790315816941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"_Il91UIIhyM1WS5vlAfgNzTB-K5_k-5-iCkrCz1WWiU53XEZw-3dizXMCou06L7zE3JL8WH3lt4ZNsS-wxeUn_tlQEYES7rI6hr8gYzl6A"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWXvEgbz%2BMOMe7PJdrXcqL%2BrW3DbOsVR55vm8MiRX78fAKE82mULpo9QUFbrsYNUHw0nV5dEEZLY60BZhRsy8Mde1xE0gsBUPHbHpjtYEp8rhr77s%2BphFGqzWeRA39Aest6rZGxHTUTB%2Bfnlfl2NNHQDeYzD92CtoBWp\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a407c9dfea1c0b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528504,"size_decoded":158219,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb554d32d807d1681e1411430931ad02","sha1":"30ceb1719bbbd0d79113a2fc299ae29f19403d0f","sha256":"931d15c0239c544213de85a75a18ba39546efe7ec8bb1297356289bec0abbb49","sha512":"81080689496f7522f7dfb71f36485beec87b19aed0d73172bf44814b4fb500ad2077bb54dc0d994adc74181e94132152a0aae97611ffa59f725f3664c1264da4","ssdeep":"6144:q72vTaIKF+S9PFDEHyhKSUnzF6Z4ebuE86yt9eUGZq+Tr8b6lTgRqUrr:RY+S998yhKSUnzc4em6yt97GZq+VKqyr","tlshash":"b7b44b5473a6b47243ee91e994271001f23dd864104d442cfba8bdef7ea889996fbf31","first_seen":"2026-09-06T20:24:27.397651Z","last_seen":"2026-10-13T11:29:42.479418Z","times_seen":451,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/script.js","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.035Z","timestamp":1790315816035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: W/\"6a846a5a-bf38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A0zsl9%2B3t988bhHI70EAX6KtzOZ9%2Fs0V9%2FVRrxrC4r3Sqj%2FZqluRi4Kjz3ErX1Dbu1xfqp5ZjbxGDs9ObSBvlqI8v1G9P0I1yHn6NeYtYcEgYy1XdqLxf5iIwwqcJYcH\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a407c9da3db5568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48952,"size_decoded":14861,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"866585650f99cc898608a5ea54fe2a8a","sha1":"ca0078b84ec6d545297bee19067458f80b017128","sha256":"ba8523089e0060dbb0b897733cf7ae18926146d93f6f9a0533b45ee20ee2fd21","sha512":"c298f2dd961be607cff6c2f902654fe1a5bc4a2373ec4c6a8873a55d664e99a9b64114e50dc3cab7cbb12afffa352e8012f90113d1b6fdbe352d7cd58a33dec6","ssdeep":"384:D3ipsBlztWsSPnIJmFR6gKyYo+1eaQgn0BC0a8Gznp/0MjO+XYJE3iqCwEQHpgIc:DB8za5jLct4ceoAF7vCzKS","tlshash":"7823b66dbef735666873307e6baf9204366450434908ed0c3d5cd244dfa0a698bbafd8","first_seen":"2026-08-28T13:38:10.720456Z","last_seen":"2026-09-25T06:09:49.384716Z","times_seen":14,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:59.507Z","timestamp":1790315819507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 2971\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2971,"data":"2MMARrqrFJPGdkhYYIVKbHweuiXoCU-HLviVOWlB3s3x3l4y-qud2g61DGaeHQhz0Pjmse1xy3Bbl-_D6eB2eFh7vnu2jjVVkHgiM1yFg8jGuOQiZml33NkCKdxWNys9GXXMbzTs0pEg9VyYpYx1PWPrJ8cRvgjgnTo66qOTfRctlrcXUzQqTOFPSQjTRU9C1KpK1I97F-fBODhrYcvC79eI8P4HUBIBUV5dKNdoDcjJDRnVQfCqtVp2K0HGOVRcwJsgXSSxKmzeX69Gw7doFEvH4xrcwYQ3FR-kkSFCqA1qulUpkML7kLkncJmTZclr-BzzZelNsOxphqe9he59UIU9_HnwSc9xerxiQXpIgjl3KmPMwP4AEMqNilkIGK5mIJj5UJ1LaXws42BofVXokhqSJjaM3XVGHQEehQdT4SNl7exuTuKcSyXTe7HLdBLSXETGJIr7JHoKjetza0vw8wRYMjrjRkOnSH_NpqTf3Y_yctIygoDpyBuNhDbi8ajessAamIbhBJSVFKkqkmVIMZXMyrdzv2tg_Ky4Jjk7qNnbEM_cEhVKoo1zyXGz3_Q9tOhADd963oJhCtiuI658DLtJxf9kCnTRrCB4-MjZcEqJ-5MKD5osbzDwUpOZcgRhmF-1juST61hgwUxra34f0aZrhfbucj6lorrfXFbwhM1EsVjZhSXqp3wa4zmnAXRNA8akaFxLWCOxLRrTOBo8oEbol3pVj8EtSIqbUoPQQrAZSJEzcrtiFWvoNefZrvniCIPoC6kSHEOjf5Ta_Pfaqo7Bo4Iccmt-911E0KuvQPTLnUCQX-MZcnx6MAcDfkQ7mPX5cY57cgNknQueC8UB5MvApsGR2hme3gM2kppwQhPlsC9ciqN_s5pAo-YP-UVt6t8Dh_agvCtrJ5PQfKbHF1LrAWBF1eZh5ccQJblvanR_4pqCWX-tpD-J1fCRBemy6uyj5eXIJLFMaD3fW7_8IPYkIz6yzaSg4d4S_dgNqZgE3Q0Mvm5LnlVwJoO7TNWW_JOj7WFb7Sv6L4K8o1j73BBEJwBkSJE611y03O1d2ZOYQwYleXvHXows-cvbkDmdWjFR-8V8cjCm7JnU9N96uZROAuQusiFhF-c31-dUIs6fpXhcF5tpJ2L1yZR12piNE8ZI8vjBWmm7Vvlju4M9nW-yxKrEm5epY7QwSVaUlp7hyDOhwNgl8ShmzewnOZ-_BXk9F3O9dPR7J1ytIn40D8qAdJAhjIhfj-mR9iKyAfLg-bm2VKMrKEojU16OwT1uKk98nTIlioyOB--Yx11-ygn4sIeXdQouNVr4fV7sjQmPERC1glGDnVSbaSqKv9dgJ-mEaJ1wse0CfBE6D-e5dBBAJ2Elor22FBOTri0O2KI4Vg6htPPbD-OLhQh-1Pw9SpZBvc4UCQ_94Jbu1KJLQQeFVCWcqlOKUSjXoJoZSowsCpSh3183iRhfRIEh6xgUObyxkLQvDgIhe9qNRDKIgXklQFbIh-ntuzbx8DqncIbwhcuLc_lOOkSP4LoM_wHFJtJuRp2q8CiNJa_q8hyyt2Gech0MJbdU1RzlEmZtepcVbuXQVLkOgUdgFzUKVGDDtuSUKVqMcC0tf6VHRJJZ64mugWu0uGml_AAZDfGj6obtzw0tr5gIge05BWrvMSxzx_94Qa_tt5rVPOhpa3n8Rmw50dUXcJEbdC73fwy7CabOq9RxXbi0nJ2TST8GAfPz4u2BjXt4f9xqTbAl0vdWE3x2r-vdnKp2MnKZKXAqm-60mqiLdgv8csXIOCEoHVTsCipjRzR_AfX1URcDL8caDT4kNt8sZ2jy0ttyEP-u2BKRXbDdHW6_1TvhMFAvOG10IhAeqBvqKwgTgX4rRq0j8CkAF5z1POqe2Rkz6qJdBTEt04HiHfoZrzH9kb-pzLL7SkFTBdaXmzWRb3VQ6X_kYWBY6-ZjXY8hJl5tsIAGCd0vHk848WO7Vb9Byb30asF8sWNsD3xuk4fp54Nlx6y_5R4xbEwQUACqYhSUIN09X98hvf5ae37frvrG_5yyF0iMMA9yA1oltNwqU8nD4PcUM46hVxHuXGizVmUcNh6xyla4xBrDxd-moUF6gE47m791dJNihGmTxcwAT_LVoPjkYOv6uFhpzGnOTeYn8uLM9PCbsIj888TozLq7w_DHWnFlL8RMF81TmCjHqKXpRz6pXVSY-OMkHHsOJe2RfElNmc2RLJWmj0LF5L4pe4prgSQrd1rRy5u2a9jq2E1pd_UIPgopGbZkk33h5RMMmxr8t-a7R-_2KxoiQ1eqsQrC_IIwMjFHWUBAKWLjakA-OuX25tldzL8FHjN8pztJJCaXoVuPRxbI0N67xB9cysTdCVVhcDaHmMdsD4tfi1tLpURKLRgb4naGmsZK6Bf7NRFWze4RjL8GY7chnuyTTS_O1qNEiND2CHmP-7Gpo_xWUmCnAkDOjetqbbi9FBtQuH0iw83x4H9HKnG7GUW6pAYoAgtZUuYyatUlO4sVb2AqzxSpangxp7Fly4geEfOa7A54KuTIGM7ZiU1uv_F1bje67VAYp1YZ2z-D4gm0g_BI-zUCQe8iYAulP7e8aCtba-3muhJGYOvN15lm7OQE1_P9WNUX3i2fZ2WlZ-O-mEAJtA8cW7PbbZngWM47bmPcHDRXEZiTfBNGqZ9IhIxEk5tM65fZR3KS458fCedof42wxcc0hpLVlppOAK7JXClk73vUa3Q5gnqB4sbDOmcBv-VOluJA0l_xqxF104_h1LYYxdCYsYZPfrOT0pM4onDzt3T_Ra7dPvuiC-9g3o0pJKz3L0sdZxHB79QRO1sKz2YVkpAZvLU4BkN_Z4agESOQZHvVaO-HashNF9GZCKkSznN89VpvQ-E-ndqWgtBv8oNGuZEIQHK2UnoaGm-N3zodbfO57M_A8EuKTdCTT4pYkifxlgYgJ1UEQ7Ja2Oah-h1M1v7J2XlrUGI"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2G572c28moVrahHP55D0W0KoMn1I0XdYF32qgYBXEZXSljXHOBuuVDyLVVtvNfeE1tQgPtK7Yy0Sd3MJwM4mqq%2BprgwagZfGHcqZavfzKPpmw9eXMsP5UMW6vL7Yb%2F0M7CdGBJmia0JN880wqNgr6S4Op5IApyANgaT\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:59 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a407c9efeab80b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":782,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-14T14:38:07.640637Z","times_seen":25223,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/weilandpfp.jpg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.046Z","timestamp":1790315816046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /weilandpfp.jpg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-6eb8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTPWo0XUU2RmjkWIVQMksLiVgU2e30%2BPyCWGTJ0VhK3DBfXjB%2FhckmOJJ1%2FxQjW8e%2BLS2hhkEGLTIszfAsiHK9w4Nb04UsJHU1nDpVRNvjBE%2Bmpk5h12QU%2BYuMA42jsd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da4dba568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28344,"size_decoded":29268,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"da0cc5b8b13bc0d9a0c64f8750d2b84f","sha1":"954d68f3415df8256c8ac9535b05aa5d4672316c","sha256":"10de1fee121d18d2d7a1caa25df1b329fd2c73c3326f02adfa4efc195a59d16b","sha512":"8afc551c4f5878de0207ad10837641812bef7d1a4ab7878b888eeb90abdaf68a757cf92ed990eefcbc2748920318a6c93bf913bcc2e525c5cf318f54640979ca","ssdeep":"768:d3i+NkamX2jw4qWgdsiH1HufI+bPg7oj16ZQdeY4Bid/hJfngWO:1aNXb44siHAjP36ZIeHsvnO","tlshash":"88d2e164aa416e7dd4dc1cb2a2649bb7abf7fc6ac849293bf061f035370150b5bec160","first_seen":"2026-08-28T13:38:10.684763Z","last_seen":"2026-09-25T06:09:49.373649Z","times_seen":15,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumblbags.xyz/npcphoto.jpg","fqdn":"fumblbags.xyz","domain":"fumblbags.xyz","tld":"xyz"},"ip":{"addr":"172.67.211.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.052Z","timestamp":1790315816052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumblbags.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:05:16 GMT","end":"Sun, 06 Dec 2026 16:03:52 GMT"},"fingerprint":{"sha1":"A1:D2:14:D4:88:F7:93:E3:3B:6F:E8:6F:AF:69:C5:93:EB:8C:FA:89","sha256":"87:15:34:8C:53:60:84:91:72:B4:27:F9:42:28:8E:3D:62:02:68:D7:EF:A2:78:BE:A8:3A:F7:88:BD:5E:7A:17"}}},"request":{"raw":"GET /npcphoto.jpg HTTP/1.1\r\nHost: fumblbags.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fumblbags.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-85f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzGu%2BCMa%2B8KKHjZpMmEb4O0tA%2BfaPL4fNXpIX0dXCumOk4ON%2FWp3I%2FR4pOcxMvUTrunCs7keSnL9de1l5q0ipqtfVz9IH8AuixI0uw4KPFcD2TeL59PPxHIjU%2FGsZbvh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407c9da5dc0568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34289,"size_decoded":35213,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 680x680, components 3","md5":"73e7c480489cc484c87931a1c23e91a3","sha1":"61801100d8f1945c64f90330f7238219cd840957","sha256":"9453f5cf35a1bc38df3c96035eab56b8fcc56f1754c7f56471ea9bd51ff296af","sha512":"ea82d81ea194c8d4e21ebb9633df5e7bba7b8d9a1e089e4282ee21fdb63cee3b7b344dabf803c98bceac18f2157ac36dbfafad4987ce35fd40b7e6247b787c68","ssdeep":"768:S+BKeZc34N3HTUVAhvIo9aupZ1qtqr9g63y1GHQbx:VBKeey3HYVAhgDGhbydbx","tlshash":"6bf2e02a8f04161cc0be6e324f0c106257176e6dec7319d58b8fb6716bee9be1e68174","first_seen":"2026-08-28T13:38:10.692072Z","last_seen":"2026-09-25T06:09:49.395265Z","times_seen":15,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fumblbags.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.944Z","timestamp":1790315816944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"JNs0GJZWZGmUBnzDyEx13WJvXIFIB7mC0LMKs3h951jUNXzbn9qTT4KZdT-5aT_Y1XI9LEMVDSMrMiUhfr5binlf5vIHfWLfUwpSUJY"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YRfH%2Fk1OzdOZFEVZxGfPsjg5OEAV%2FK26zXMEJO1mb0m4Dup6U%2Fd8Tcq4l1kBpo75btsLinn7g1EwvGSPDVX%2BHS06Gv2HcWShJhdFvL2fdtX5X5WTpYZaZGcSI%2BpqlND1JuiPl0g7rmajryrbf8MorL%2Bq56m7YS5a646\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a407c9dfea1f0b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24808,"size_decoded":8616,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24808), with no line terminators","md5":"e987d4b7f9ac048fe0005e54bb2051e1","sha1":"7877cab059fef614ca9d3a639ccbc066d02544ec","sha256":"0acbb3128583dd0180a2412ccf6509b6a985ab7f9c9ef5e521e3f4ddc6609e81","sha512":"7387075f82110c24fe3af881b352427fbce0bef8cd6b313bc8dc42982cb759de2a264e1836c37112aaa600dec99634a24dcaa5a85b79ad6d4200e76a704e112c","ssdeep":"384:9vNsoJ3T2rUD9DclLKmjZbz4OXVmpaCHyxcNRczdu:UoJ3T2rUBDclhGaLxcNmE","tlshash":"ccb2d601634b402ee3f362ca21eb139fa5b61d554b951410e64dc9e83b78bfc6ae7e34","first_seen":"2026-09-25T01:19:46.891058Z","last_seen":"2026-09-27T13:03:21.668893Z","times_seen":5,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/base","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"172.67.204.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.483Z","timestamp":1790315816483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 20:04:35 GMT","end":"Tue, 22 Dec 2026 20:04:34 GMT"},"fingerprint":{"sha1":"64:07:AA:EA:EC:05:3E:0C:75:F8:AE:EF:24:C3:96:AA:A1:7F:C3:18","sha256":"1E:68:A1:3F:DA:C3:9C:9F:0B:29:2D:8C:F9:7D:56:93:BF:58:8B:5E:45:F4:7C:FE:1F:92:04:D3:47:5B:6C:39"}}},"request":{"raw":"POST /base HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a\",\"data\":\"0x3bc5de30\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:56:56 GMT\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apZBE1rj7mYFZ7JmWbjLO1ZV83By%2FnO8s6hOz5Mxu915QsnoWlUT0mq8r0tyYb16ktbFjzfHpKyoa%2BVtxSm8n%2FhF7ycEF6B6zldUlKkv8AoDz6rGawQ2c4l7\"}]}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a407c9de8da05688-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":840,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ac023309076aec1de7aa67d2a45068e8","sha1":"5231d7bf3068d20d47b14930363f5ee4b2225ab0","sha256":"3835fd66c203cc5293718444abb4b112727449898d500d46351edbe76912402f","sha512":"1cc22a9bca79c3dd44a51ae5881df9b194205fd3e4ecde857cfd662258cfc368714bf92324ee7a89649a218a0f2ba32ba18fc671e1bae1f78afdb86f5261c813","ssdeep":"","tlshash":"37f04ff4bc169664f8847cd6d0c4b84610103c6da6cf1f14400a673d35da0596f1c5cb","first_seen":"2026-09-21T18:50:44.021185Z","last_seen":"2026-09-28T00:41:22.021224Z","times_seen":20,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-771323a0.gutteuflisch.workers.dev/","fqdn":"cdn-771323a0.gutteuflisch.workers.dev","domain":"gutteuflisch.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.168.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumblbags.xyz/","date":"2026-09-25T05:56:56.939Z","timestamp":1790315816939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gutteuflisch.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 19:56:52 GMT","end":"Tue, 08 Dec 2026 20:55:33 GMT"},"fingerprint":{"sha1":"48:3D:DC:C5:30:BB:1D:6F:CC:67:54:22:77:A6:41:FE:6A:DE:30:7E","sha256":"C8:DA:99:5B:5A:5A:8B:B9:0E:EA:56:59:C5:C7:A4:86:6D:6F:60:54:06:1D:B9:9B:34:4D:3D:3B:C8:E2:23:8A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: cdn-771323a0.gutteuflisch.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fumblbags.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://fumblbags.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":103,"data":"9DskXrfaZcPYDSx_KO6IFNYWexQFvOT9F0B58XwailqrI-glFQNxtkasGuztbXrEWFHh1ebZFkqYIJsJ4aip3kKOA4X5RMtVx7-78gk"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8f%2FjP9QS82X2QMw2XI1sc2u%2F3Dau4PmGfpTyHsls4SJKTfxB%2FHhH%2BdvV89%2FAD5XVzXpbxSXzYaVAimR97fYWg6rMUBidRRBKvxoZZfhnAPdVxrXxZdaU6REnjY7qPpPYASr6sVEdjMdV4afX3bS3qOL2go4p1y6S4TWh\"}]}\r\ndate: Fri, 25 Sep 2026 05:56:57 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a407c9dfea1b0b55-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47134,"size_decoded":14924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47134), with no line terminators","md5":"8198dd31610f795159a2e81186bc09d4","sha1":"1ed0be7611da85996f438c382b91d07b15f7af97","sha256":"8f011456ececeee81d61f0541dfb0e848045d31ca1ab0298d425767f5f44cbf9","sha512":"8e7dcfac26ad7d07dd9bfbe9002047480063452ce4b436832f834dd48df2addc2d6ebc15e3efaef5d49f14d20afb26f35197a294094984805d05bc1e2878281c","ssdeep":"768:GvE4la660FTNidxkArFszBdIVTvZz54VCThZXWNCB:D4w660ax/F4CtZ94VC1ZXWYB","tlshash":"e823f86ea3d0a2398293107ea1670bcbf17425979e34044af7b794ece5bcd9303b8795","first_seen":"2026-09-25T05:57:42.631692Z","last_seen":"2026-09-25T06:09:49.395834Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}