{"report_id":"d4441dda-01ce-4b2b-b6d3-ba49666f18d8","version":0,"status":"done","tags":[],"date":"2026-07-22T18:23:41Z","url":{"schema":"http","addr":"stairwaytogold.xyz","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stairwaytogold.xyz/","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"title":"Trade GOLD","dom":{"size":50389,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48447)","md5":"9edb58250aeafe2b8ad548ecf9c760d7","sha1":"985bd4298d415f3f71a9f60ad88797b812ed91a3","sha256":"74e878a75d85613a77ae06958a362d5b146f113b21df828d03e069fa124bda67","sha512":"a27138a39929be3c03a16b39246b2ba0ef71efefad48d407f3be29447bdd7db8a3d6dbc8be84feb36f5b47e3976bb32ee26dd419b449c59d893a533206b12319","ssdeep":"768:j8hzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwo:j+zqyrYpaO3zy2gAe2Ywso","tlshash":"0c338260f260453f7a0767ef5ad5af2e31b2306989236608b3f886c4e7c6db79c71454","dom_hash":"domhash6d58ed6dcb9565765914ebbbaac64cd1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"stairwaytogold.xyz","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T18:23:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"stairwaytogold.xyz","ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":1191588,"sent_data":8474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":8,"received_data":163848,"sent_data":4464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-07-16T11:12:40.430944Z","alert_count":0,"request_count":1,"received_data":2820,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":26464,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stairwaytogold.xyz/","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11bc73310e39601fd6024ec82689e356","sha1":"93910fda6bc9c5a1078a2b414986703e65d39f63","sha256":"86f9d19e5cde5b55f09b48b8b4ec7e8e1a5c28baa5cc386e5b966351bd0b2c8e","sha512":"42ba50f06f3c78de286a90e48f16bfd079f670de24f76d03268f2f72f0057f359a6a0a050f1c0b32bbc17f02462a53530e2972a20291a3f035badc4aa83e7a78","ssdeep":"","tlshash":"16d09e1552329509663169125b8b7b94325296324e6151503f3fc7117f2671bc5b8bcd","size":286,"data":"","first_seen":"2026-07-22T18:23:47.605497Z","last_seen":"2026-07-22T18:36:14.686963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/script-yp126.js","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94beac14a5ccbd3a4f7a3ed9b379aa51","sha1":"bcb4b523b3c82edcb7ebc16d482fb5d25e0f8dc8","sha256":"0f1695569ad387308a58082a5ce212dc80db3cf95137342deb5f90d87678cf1e","sha512":"172385b75081867e12d6d5848a15714dcb9500b726fe07c54523f6ad869df81341ba0b8d1d2812b41fcf619ec82ff7cdce71e461acd0b3975146a89dceb085f5","ssdeep":"192:Q8qp7Z0wZ8rPuEW5CbRBYh2wDYjfkW4dDKya0wSV8uztFPmn6nTkzf6RpoGyH71b:yzgDsYOAwrtFk6nTIfMojH7eenqG","tlshash":"6922d8653240343641ab55db26e68399753ce049bb1380e075bc08e74f79cde36ebbb6","size":10304,"data":"","first_seen":"2026-07-22T18:23:47.591429Z","last_seen":"2026-07-22T18:36:14.685504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/_nuxt/assets/index.js","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","size":1010117,"data":"","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-22T18:36:14.681934Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af304c227e3b5b828e78a3a9c782bd33","sha1":"02db97fc140d1d2ca35df2815f5136cd46a12f8c","sha256":"fa25f86a98a44bee39aad0580dde6e8bccbc0c29bfaaa9c6f14e2a6384673b39","sha512":"31fe00d848e46a5041e141530b88599c86f20c8913f6c6e8cba931354d9d6e46bcd5aae6757f92353157e337f0fbf171484b62b1809c2a61130a0f2099100571","ssdeep":"6144:d+Frzet2WVKH7z4qF8ZyOBHU3eNDqwoYRZ9wBqGPw4KLWo36rtCCOx8PTjGKPHEo:d8e8WaX8fdU3bwoYCUx87iKPb","tlshash":"d125705112cc5a6f2f4083c738f5489a1e29749acccd087bb6d4d2c5de6af1db2af690","size":974515,"data":"","first_seen":"2026-07-12T18:49:06.899666Z","last_seen":"2026-07-22T18:36:14.686373Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.16.23","filename":"https://stairwaytogold.xyz/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":803503}]},"http":[{"url":{"schema":"https","addr":"stairwaytogold.xyz/favicon.ico","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:14.260Z","timestamp":1784744594260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcdKu1%2Bcw0dIy2cxVhFYIPIaafHtlmi2dJsmFssr7rfsompWWn4CajnukUYUkZpr4cb6YqAC6YgDIz2UCEARaUT0UkA%2FCQe5eJQRvOl9JfngEVWwn6YfExCM2dL%2B0sMC0f8evko%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f479b21bd856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":695,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T12:18:55.980226Z","times_seen":543112,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/bonk.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.873Z","timestamp":1784744592873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/bonk.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-314a\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEv29flvdE6%2FtQ6AptKnhcOX407jrDxYl9Zt6BfF8oFCULlf%2FPAQqb2wXUcLtt42fYQLuz0ap%2B30SSM0a%2B7F0kx9r1KpG5cCWYAGr%2FpMJP0GIK%2BgnYcPESPVZFhiJgS%2F1UQv%2BLo%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a96b8c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12618,"size_decoded":6195,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32264f4b5ef61d12d6c8c7585e844dcc","sha1":"28f5308df3de8e7435ed9f29c07271102455bffb","sha256":"22c0b5638dc650cc5fabd4b50dd2c24b0dccdc305ea37a8dc15aaf856b58a1c8","sha512":"33d0b30212a2408e4f0b435257efd055b0a0f8a3aa404e8c666de12528a446b7cc056270e6b3f79241626436351e520f046fb37d28bc04e28178d45a1a2f4b52","ssdeep":"192:FDLeI6N6VFklwNwKIxv6Cqc9I4jnMnX6TVlAaPyvGONdRvmiVTzvjxqVASFkM0/e:9Lm9wwtiCqVMMqTVlhPIzHeiVHvj6mrK","tlshash":"cb4297eab3a9e3d4f805e7f4872768743b6b2cfd2e20c59947d5aca0e95109d4858cc2","first_seen":"2025-09-02T07:43:09.420529Z","last_seen":"2026-07-22T18:36:14.669725Z","times_seen":476,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.516Z","timestamp":1784744593516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 19 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288561\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-23T12:44:05.072238Z","times_seen":35347,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":41,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.519Z","timestamp":1784744593519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:43:28 GMT\r\nexpires: Mon, 19 Jul 2027 10:43:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286785\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-07-23T07:10:13.026466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/api/config","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:14.451Z","timestamp":1784744594451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stairwaytogold.xyz/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRQbDZliSfcc1dfnU6SICswfixATkmUQlCdB%2FQu8hjBw0FZrtcJMYc9DBXSDcT0WIyRuGxZCuoSFu%2FC5nITV5SDyacifLdsBUyKCge4zxS1JcyLK67YX9wI3d3%2FBL1DE2nnDxJQ%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1f479b34bf156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":917,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"94bdfad1ff81e3b6f40ffb5e80e48900","sha1":"c14f581584698f0a866fd4749f4add7b5cc7ac93","sha256":"b18f1358629e74778a2640933b9f1cf4570bde9615237712f85f30b5c9e4a08e","sha512":"34651994344b83f41df820725a528775b32dd94492e948a0b3027585542dfd2832bab15275b6df608c98b1a10fc424168a43f728c7f098c7e9fb8fbd783ac883","ssdeep":"","tlshash":"51d097496cd1b692bbeb8407f54018f04fc2da80bed5357adaa0c13288ce3a32e564d6","first_seen":"2026-07-22T18:23:47.580111Z","last_seen":"2026-07-22T18:36:14.673734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/api/visit","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:14.580Z","timestamp":1784744594580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stairwaytogold.xyz/\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:14 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2n%2FHO0xRCZPNKCDyCPtS5dIy1R7lCkPhyoi3Wp31blIQx8IL4LO90xT1j82cMKOEfaVk4iwECNf7mnc6O9zUHC%2BDCxat2CLJ1OIXgYKTtf3zJQZdTpTF8Ft3KJyWNpVRwiHspAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f479b41bfb56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":726,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-23T12:44:06.72672Z","times_seen":441270,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=LRxbtkvPfpctgR6MS52MAwtobrCCY9KiJgKMmpPpump","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:14.446Z","timestamp":1784744594446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 18 Jul 2026 00:00:00 GMT","end":"Sun, 31 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"02:0E:DD:8C:88:05:EF:DC:B7:9B:A1:29:EF:B7:41:31:C4:BE:22:A9","sha256":"5D:B9:76:C2:AB:8B:9B:3E:C6:57:96:4D:A1:7E:F7:AA:29:A4:E1:E5:F8:F3:92:61:AC:67:C3:B7:47:97:AF:6D"}}},"request":{"raw":"GET /tokens/v2/search?query=LRxbtkvPfpctgR6MS52MAwtobrCCY9KiJgKMmpPpump HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stairwaytogold.xyz/\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 18:23:17 GMT\r\nserver: cloudflare\r\ncf-ray: a1f479b35db62efa-OSL\r\naccess-control-allow-origin: https://stairwaytogold.xyz\r\ncache-control: public, max-age=10\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-encoding: br\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ZTn3KsqUYqgmsybhrU6AWOfbPwM6VqCqsiaVHS-LSgrQx7kM4IDAhA==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2140,"size_decoded":1810,"mime_type":"application/json","magic":"JSON text data","md5":"d59cae8af3a4764f2bed30c4e13f2e0e","sha1":"75c3e7e14cbe7cc35548ccda18a09c9154c013dc","sha256":"9888fbbe6393aa2bcd9275c1bd904bd7730a3d09af5e58626b98989b88f1a01b","sha512":"fefffae676314880fcc253c7a563c7791ca6811df0bb6689b0ab4ed67679df2efefa935a4bd3c718fa0a9ccea050805ad87dded153b5d3d6bc925db07344a876","ssdeep":"","tlshash":"8d4197f6857544608fddd78684843f9a31e6d8d38c012983ae7e4fbd04a905b8a0de1f","first_seen":"2026-07-22T18:23:47.584147Z","last_seen":"2026-07-22T18:36:14.668887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3284,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":3271,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/orca.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.880Z","timestamp":1784744592880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/orca.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-eab\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSc6ttTNSuE1chTrC5Infx1Q13fYFC5TdjmID8g9dBcq%2BGnmxUQbSTBiVX3lj%2Fwt6nnPdJocMtF5eWJBCoSQqi6F5KMr1d%2F498UKQgTtzn7A%2BEhyXUWH%2FZLwvCjZsVur3Sr4D7Q%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a98b9156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3755,"size_decoded":2372,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"399f1f0b7b8310ee13f5f344cf8d1194","sha1":"a2f3f47fce8eb5ad2b1865446591c3087c693ca6","sha256":"1b03e12e25d6722e35e48e8f63e6b740f004b74d828e8ad6d79c07615bcfe12a","sha512":"3b7b4b431ba516221ad79743433630dadb9ce869f4e6401651982bea4d87ebe2a18248a2722fe1d8fac295a89f235371f30314e29c9de56eb32e5f6bf143b676","ssdeep":"","tlshash":"157173ebb3c8a2c0d60ae3f49b2a54f9360316f94623c228c6e50f65f99209dc94c8c5","first_seen":"2025-09-02T07:43:09.392798Z","last_seen":"2026-07-22T18:36:14.665374Z","times_seen":477,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/pyth.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.882Z","timestamp":1784744592882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/pyth.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-912\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHBswoUrw7yJ6A%2FDsWsaa5urn%2FG5qaDYuJZ3LsPA1tHlfe66qgVpCpzQHxfc9gMAZvhDTLLmy%2BdeWuG2wBFgNFDiJN3EcZ6jFeM4lphOWghoWAwZTA%2Fd8Ho5qf9tX8DgzEtZilc%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a98b9356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2322,"size_decoded":1766,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37d619de40a237df97301e340b9b2447","sha1":"4503d4caddb600c467c92cb18cd5b2c13a056236","sha256":"e5e5d3c3bccd9d67b02f2ae4335e1b9f7add851b0df03eea4376ca8f39267a62","sha512":"d82646626adbee5cc7c9a709bd37b8eb8026eca69112bccd16e0b5791182ec16d8d967eee4aa99399cee3594d97bf5855bbd9fd7255a7093e090258990879db9","ssdeep":"","tlshash":"f541555122ac93e49906a7c4e715f0b2755328fd6883ca10ea32bb70b4505df8dd98c4","first_seen":"2025-09-02T07:43:09.414801Z","last_seen":"2026-07-22T18:36:14.6793Z","times_seen":476,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T18:23:12.312Z","timestamp":1784744592312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVpr4RnRCjviA5H4B5NGmkJsDZRYTgkpWKBt58POFpA70dWUwuzC9jy0kYqp7XxgxDFIUlNU3X1WLRXBeuxZ60iRZ%2BBKsa6R14elr7Pj9w9CyWPab4NEh1jXm9TCYCarfS5DwfM%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a67b7756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":33572,"size_decoded":12841,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31607)","md5":"0f9902d11082bd317b35221b20fe6720","sha1":"269b9c48613704616ed1dc797eaa01c4d8cc9518","sha256":"61ff30e3846ae3cd8f805fd7ca5f5cb8d3317ddd37f3147fc03ececf5d9e1065","sha512":"9cf545de4e2e85ae45417b3436e852a335a252835b133f14f7455ee1513a6f6a7fb04606964267be014e666b17aa573ff81bdbc1947926178b845ebb1646f381","ssdeep":"768:vd3AaDKHsdAE22wVyyRQ6ZLpfYnYwmSdw:v2aDKeAxJ9anYwNw","tlshash":"e5e283b05364413aa51b5bd7ae65332f31f372bdd9330504e7fc4b98abe6c4aac22581","first_seen":"2026-07-22T18:23:47.589215Z","last_seen":"2026-07-22T18:36:14.679881Z","times_seen":2,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":64,"connect":15,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/script-yp126.js","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.865Z","timestamp":1784744592865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /script-yp126.js HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\netag: W/\"6a5960b7-2840\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jd%2FYCrUjVSV%2FmB3PXeQCReNgQ6rFWz2b%2Bey34gwqAcb9QMRO1x7z7UygsfjI4YAqzyIwEF6w%2BRPbfWXJkRbBuoqhXfo2vYaxjBs3TQhC3ATNJQ3kksyv1lPx5NCXpNJGp64%2Fu94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f479a96b8856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10304,"size_decoded":3827,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (10304), with no line terminators","md5":"94beac14a5ccbd3a4f7a3ed9b379aa51","sha1":"bcb4b523b3c82edcb7ebc16d482fb5d25e0f8dc8","sha256":"0f1695569ad387308a58082a5ce212dc80db3cf95137342deb5f90d87678cf1e","sha512":"172385b75081867e12d6d5848a15714dcb9500b726fe07c54523f6ad869df81341ba0b8d1d2812b41fcf619ec82ff7cdce71e461acd0b3975146a89dceb085f5","ssdeep":"192:Q8qp7Z0wZ8rPuEW5CbRBYh2wDYjfkW4dDKya0wSV8uztFPmn6nTkzf6RpoGyH71b:yzgDsYOAwrtFk6nTIfMojH7eenqG","tlshash":"6922d8653240343641ab55db26e68399753ce049bb1380e075bc08e74f79cde36ebbb6","first_seen":"2026-07-22T18:23:47.591429Z","last_seen":"2026-07-22T18:36:14.685504Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.511Z","timestamp":1784744593511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:43:28 GMT\r\nexpires: Mon, 19 Jul 2027 10:43:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286785\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-07-23T07:10:13.026466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.517Z","timestamp":1784744593517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:43:28 GMT\r\nexpires: Mon, 19 Jul 2027 10:43:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286785\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-07-23T07:10:13.026466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/api/is-banned","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:14.449Z","timestamp":1784744594449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stairwaytogold.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:14 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vW6c2lMrijmP%2Flx%2FBqu0V3HDTDrNoUigrYWhnMJqiONp5oUeYrLfvQUj4mcWu0ltuNu%2BoRQFXtRtwMegW9afX7VVhIYDLpk8euW4CgXl92%2FwAjZjxRg0VRL%2BLKbs%2BEL6FxP9oqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f479b34bf056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":770,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-23T10:11:45.269205Z","times_seen":118065,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.339Z","timestamp":1784744593339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Manrope:wght@200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 18:23:13 GMT\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15008,"size_decoded":1471,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0ad4e9cc8948899d25eb47a31cace209","sha1":"c8a2ded69bfa8d2f4293fd3324009b36b4050256","sha256":"73ef72e9f525460bf321f3797f3c6d37aa65ea44ff78062c406fca0d98a55fc8","sha512":"1467da169a56c9e04d571063cfb541534f96920a0645641209b6e0dfcb36ce1313811515479a11731e59d2344622478ed1602dadf4531184524e611cddc867d7","ssdeep":"192:BJRKV3II8XDJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJH0:bMEmkwU+ME02EQJ","tlshash":"7962a9900027e804eb470cd677ce7e39ad4e61567491c5ba5bfe1cd8adebd222320b5e","first_seen":"2025-09-05T04:53:42.941084Z","last_seen":"2026-07-23T09:12:27.917341Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":31,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.520Z","timestamp":1784744593520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:43:28 GMT\r\nexpires: Mon, 19 Jul 2027 10:43:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286785\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-07-23T07:10:13.026466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:14.392Z","timestamp":1784744594392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 18:23:14 GMT\r\ndate: Wed, 22 Jul 2026 18:23:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-23T12:41:40.577337Z","times_seen":36369,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/style-9uhg0.css","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.861Z","timestamp":1784744592861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /style-9uhg0.css HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\netag: W/\"6a5960b7-f59e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSpI1FeXxvwk9EJDCTlb77O2TISZbij24KpcP58QjJFxnL3smzdpHBWIAaCJx0JPl4rULB3HGg7Ey0icmOpQ0Sp6L8YcIoTfPB5g2%2F2uWhEDsis3qj7ribFAoKFGfiNsRllzTxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f479a95b8656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62878,"size_decoded":11078,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"43418d9683d3d8cb7da20852f3da3e1a","sha1":"987aed35180266bafaaf1fafdd8ab05a880d5465","sha256":"31996c83eefc6bb5cf644f6c3b4cd0336c94a66a1117b59b49b5032ba340ad54","sha512":"e7c1d1123ac42b8bbd600961b92fe0966a38eadd2145673cc0687fafe08244d24884ef282adbbf4e4dcc1af066a591bc6798c531f50d226d1649569f46ced2a8","ssdeep":"1536:t83ac/Zk/95qiaidxMLVGq4xLM4GIpAJrYQ8358J:t8K/zLQX","tlshash":"2e53a626bb445505622bb095bee99b8de72dd4129e4f0dbbb483363cc3c90d905b3e8d","first_seen":"2026-07-22T18:23:47.596309Z","last_seen":"2026-07-22T18:36:14.674918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/_nuxt/assets/index.js","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.863Z","timestamp":1784744592863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 10:09:05 GMT\r\netag: W/\"6a5367c1-f6f29\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QAzoZytISleSTIcd5EK3zm0w%2F5s99dFqHvaFNptjUiN0A%2BBFvUQp35vc5uqt0fnUlrCrVWIIAo5mSZx37Gj0Ea1bNShS0WJd2uwFAdaxl1tu%2FYvl%2FqgjmZuwdb66kZFngfpXFIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f479a95b8756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011497,"size_decoded":244337,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63260), with no line terminators","md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-22T18:36:14.681934Z","times_seen":123,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/jito.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.876Z","timestamp":1784744592876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/jito.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-779\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4mtjQCPY%2BI5nYo58hdQo2W8c3ypeDiP2f86bBpAIuOa9qRQcedscqFdxYtLcE4qHaXDG0oGMJfSDLyfUGx%2F1AySvKO4XuO0RLw8Hohk9Hiw7NhLZBc9%2BeNs%2FjinK0GkKO8DLls%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a97b8d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1913,"size_decoded":1657,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b555eeb2c89878019ca271ce239f5144","sha1":"4689fc8b3d997acabf01e06139cdb5d44fd3b7bb","sha256":"5daa8b44652cf3cca0e22528f3e8b09a4a83c071ceb68e11af6138b240220615","sha512":"b3758eff6e3f56a6b9a2189b1fa55ad8af57fe46c233ad62db30dcde00f4333128ad0b96e0730cd36609b70ffe1e875509cd6891cd423dc3f0b9f435d3b0bf83","ssdeep":"","tlshash":"59410360a26d57a4a104ebe04b1a64762e9322f7352286284b9fd97864831df5cecdc9","first_seen":"2025-09-02T07:43:09.3868Z","last_seen":"2026-07-22T18:36:14.664384Z","times_seen":476,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/marinade.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.878Z","timestamp":1784744592878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/marinade.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-2677\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZuDmxADhcR79ypxximJ95im%2Fu28ydSIU5s%2BzpF8pEAPf8X66ChH5j5rCoeZc%2FLMHleDnNu4mMaMpSMp1q%2FYvpSv2finSAzHLEGv%2BqKksNv%2Bwv1Sz1a%2BGDW42wncmL%2Fv9B9H4Fc%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a97b8e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9847,"size_decoded":4733,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cb11fd2b4b91716c41205eb17e9d960","sha1":"d5e2cb59069a886204c8284813a02ecee6082250","sha256":"bf19d99498915d1aec2f355703d23bb5655de09d5b2bbcb88828aa00d9d6a3a6","sha512":"6e8df520180ffde25b12c20447d7b3ae364a11f1104c1cd5e5ee7d96978b69c43aa749db6e293e1e2acc9d6c3568a0a2841cb26ff2e105f5929b9225ab46b26b","ssdeep":"192:OXI9CbNZ73IhN47x5QO6tQuPOmU/m6FJIReX1gZss6+:+ThZ73eKVT6W05U/m6oeXdK","tlshash":"5012d8ec6be271f0f849e7e4e51698b63b1b35fb7611cb18c3856d21e64100eca79c86","first_seen":"2025-09-02T07:43:09.38934Z","last_seen":"2026-07-22T18:36:14.678257Z","times_seen":477,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.512Z","timestamp":1784744593512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 19 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288561\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-23T12:44:05.072238Z","times_seen":35347,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":32,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/metaplex.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.879Z","timestamp":1784744592879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/metaplex.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-ad6\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjIdXOWQeT5sJyo9VzF6jR49KEy5VKglHleRDcSAXtGnLEFqEO5asiilfk91FEBdxJPJMWtZsuzZmQO6hexTW1mhl1pQIK%2Bc4LC7MmUfWYjHHett3C3kXCM3JzUvZw56fXrRe1s%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a97b9056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2774,"size_decoded":1878,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14568298cbae655fd79fb65e4d75bebf","sha1":"37e12fe64bcc11848b8c979aed1164a33d726670","sha256":"d70763867ccbbd3ca57c1a327323a395798ed5c821d26c02e71667d46ea34086","sha512":"c76d53ca8cc2298b9fe604433f1ca76a6464939ed19640fc6262e54287e356a43aef2883212a2b1358d089843f8da724db7128bb5dce5e3f27da890fbe59e227","ssdeep":"","tlshash":"985153c1615827e1d8048be0df2e65b6227b1af4be82ea43f1569df23cc44de0d58bc6","first_seen":"2025-09-02T07:43:09.380851Z","last_seen":"2026-07-22T18:36:14.670877Z","times_seen":478,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/crypto-gem.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.872Z","timestamp":1784744592872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /crypto-gem.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-1b15\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ienmvRhaeS9uoqvwqgTAJVAjdE%2BxusShTVvZ91sc7rE8JLDd9Ml3PdANfZFixXGy4eWJooASr4GGFzgUY4iCPCMoJsFerugufSUIQ6iYsfCEu6TY7lURO03zxm3h75vzIG4j56A%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a96b8b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6933,"size_decoded":3804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29168fae9da23bae6f6b301663225560","sha1":"c16b9575935f92466bcac74cc11bdced86e4f0e1","sha256":"fe3006681f60df752707674074b57ec556a97915bab0cfe708287a49f8bfc08d","sha512":"52d9968f18be3355c6c7f91ae40e29e2324d5ede6e50d557b34a437781a089d42f4d63346acf863946a1b5efd1717afbba73ab9e3cc225543f49f9e150ea8095","ssdeep":"96:Ig6CmESVVFj32vXB85cuVjbJGv7XFzJX3PeR4m0vWS9E1FSiJj/ScMLONLOK0x:X6TroB8rhtGzXBBPeR4Tvl9EbTVO","tlshash":"0ee1b6ce2bf65de6c9d4cbedfe0184ec355ac1e3e989c204c29dab1f2852c5d9c49582","first_seen":"2026-07-22T18:23:47.601472Z","last_seen":"2026-07-22T18:36:14.668077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.507Z","timestamp":1784744593507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 19 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288561\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-23T12:44:05.072238Z","times_seen":35347,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":22,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/QmSJ1TW8jNv7yUehGnhmQyB1gaUDdLUBFt6KKtRah4on4R.png","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.870Z","timestamp":1784744592870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /QmSJ1TW8jNv7yUehGnhmQyB1gaUDdLUBFt6KKtRah4on4R.png HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\netag: \"6a5960b7-20b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTZdGFx1I8sU6wXPOikYE%2FBzKXKh9TDeZ8PICXWPdBgQsykADS%2FAeZs%2F0pfAhyjrbhhYT5UVomhK%2FOJ2vKgvoGdP1jH7Y09uwrWCYpV8bK%2BsfnC5Xb7WZ7MYj7Vb5YJWpTPXR00%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f479a96b8a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8376,"size_decoded":9113,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0d1bf9fb808879d368e707d1515a7c8","sha1":"020cf0c68d0ca69a082072970b06a90ea05efcaa","sha256":"5b45232b2bf9c6ebe8da02767c2bdd48177c4208ade93dd25c171ab40511fe57","sha512":"6be07eac3f1531b6038cf0e27a21ab96c89a2b6c2e3bd5301052ba9fc39f54192418f48fe699b5f18881231a8191fc1446b360b3e983995784aeff673a353fec","ssdeep":"192:kVLUxuAwtK0r8cSYOxA1S7UwfB2egqFe4Cshk:k2xekncSYOQSowJDe4Cj","tlshash":"9202c1bdc439d24656765f201e996f1c95fa3e841d2d9ea27840ed1c2737cf2046d4e0","first_seen":"2026-07-22T18:23:47.603372Z","last_seen":"2026-07-22T18:36:14.676117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stairwaytogold.xyz/images/solblaze.svg","fqdn":"stairwaytogold.xyz","domain":"stairwaytogold.xyz","tld":"xyz"},"ip":{"addr":"172.67.156.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:12.883Z","timestamp":1784744592883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stairwaytogold.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:34:07 GMT","end":"Wed, 14 Oct 2026 23:32:40 GMT"},"fingerprint":{"sha1":"62:BC:A9:3B:66:CF:31:00:2F:4A:8F:1A:E7:1F:45:F8:AF:21:9C:0A","sha256":"9D:E4:05:A2:68:77:C5:E9:26:55:CC:93:42:6E:0D:76:4E:2F:86:14:8A:5A:5A:FB:5C:0A:EF:4F:15:AB:D4:BE"}}},"request":{"raw":"GET /images/solblaze.svg HTTP/1.1\r\nHost: stairwaytogold.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stairwaytogold.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:23:13 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5960b7-2fb6\"\r\npriority: u=5,i\r\nlast-modified: Thu, 16 Jul 2026 22:52:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9MN9YIpGd7wqXl2XAGXde9rfpe%2Fai4dO9BSX7IgLan3MAR%2FsBHMAjODTqhBHrBORQ0HzsVL0nnIQaeFenlUrfJeiqC9ISZY8ntvr%2Fk%2BgEgMnCD0%2BlSrw9sU4ai0eG7hp8dZH8M%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f479a98b9256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12214,"size_decoded":5844,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6c2726ae5e7cc1c0aa199ad3b7195b9","sha1":"e9dbc07a64cebfbd0389bcec396877b2f338e6bd","sha256":"b5ba7b16778896912b7712690a16b5eab96e9dc8643be4af77ec5a1e8b3e6b5b","sha512":"7d3f6b9f2259a8136531a9c09ade0c885e01239c4c49e6d9f4618d076361e325b7a73c5209440f733b9ca07eda312240fb4306a42a060b6733e8b474e37968d8","ssdeep":"192:Cebn8EmAexeRzs8VWOAluUFbpATzs9IQF/n9AY41RRodskit3dEamw2gq:Ceb8aexOAMnIb7XhGY41/ungq","tlshash":"9742b6debbe5a3f4a905f3c8875688793a532cf67b03cb38c3986e95b54104d8895c87","first_seen":"2025-09-02T07:43:09.409787Z","last_seen":"2026-07-22T18:36:14.677212Z","times_seen":477,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stairwaytogold.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stairwaytogold.xyz/","date":"2026-07-22T18:23:13.509Z","timestamp":1784744593509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://stairwaytogold.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 19 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288561\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-23T12:44:05.072238Z","times_seen":35347,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":25,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}