{"report_id":"d5befbd4-2935-4671-9cda-2360390075a8","version":0,"status":"done","tags":[],"date":"2026-09-20T12:43:13Z","url":{"schema":"http","addr":"nutsynft.art/","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"ip":{"addr":"104.21.18.26","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nutsynft.art/","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"title":"Quiver — The NFT Exchange for Robinhood Chain","dom":{"size":426200,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65291)","md5":"0a026fbeb1c5e61f5724a5f3914a78d1","sha1":"16021b0680da401d3ffec81b8107d9647c131e60","sha256":"38ee6b87876164e786064d61b8e64f12d9befecdc103c0c15d6687a1d276098e","sha512":"24646eae480d407cf96c75be956b1de83c24bd8e30fb15ad4208fab27e50064482fe4e53e5e3010fb517062e0ab0a13b06b61ac98821462b12bafaff89d20e68","ssdeep":"3072:V9CmiJXWyVlm9FxrYmPo6YgGVJohDN3JDP6vp0aFiKkWu9kUJ:qvWp9Fxr5PpkVJov5DP6vmb8u9pJ","tlshash":"cf9447305badfd944da3811db3cba7105c38825b5ff68816ffafa0018b4ead7491696c","dom_hash":"domhashfb5806ee448561ccfcfc1c32bfa5c2f6","first_seen":"2026-09-20T12:42:05.833574Z","last_seen":"2026-09-20T12:43:14.648687Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nutsynft.art/","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"ip":{"addr":"104.21.18.26","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T12:43:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nutsynft.art","ip":{"addr":"104.21.18.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-11","domain_rank":0,"first_seen":"2026-09-20T12:42:02.442561Z","last_seen":"2026-09-20T12:42:02.442561Z","alert_count":0,"request_count":2,"received_data":434079,"sent_data":871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zennnnnnn.xyz","ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-08T18:17:57.412337Z","last_seen":"2026-09-17T03:00:37.196749Z","alert_count":2,"request_count":2,"received_data":1328,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"108.133.180.27","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-09-17T03:20:12.198214Z","alert_count":0,"request_count":2,"received_data":1287,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nutsynft.art/","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"ip":{"addr":"104.21.18.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a40723a7b0963a825ab31f80d2747b5","sha1":"97a831a4c2c2da1db8d27977fe645a0a1aacd0c5","sha256":"fc27b9b61933f01ccf1cf4de9cc406adba4e35380cee41608f267cf2ee7a18ce","sha512":"88c0807e8c090f3db24e8f180462fe01bc3df2f42048c06fee46145bcc4a152f04e6d1784f58bf4085f40c983db2f5fe3e2a08208fe5292a2b95f9ca9920e220","ssdeep":"","tlshash":"d101f42ef1282b337c9d883fa93252df3af7151ed2092470146fec1939b5e506ae4d01","size":680,"data":"","first_seen":"2024-12-28T00:20:43.069537Z","last_seen":"2026-09-20T12:43:14.652877Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nutsynft.art/71c803bcfa.js","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"ip":{"addr":"104.21.18.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec0079fbe80626976a5d84c6deca3896","sha1":"24073bab939de6e23adade4be8966fb01308948f","sha256":"611f82fa4dba3ef2ba86e496ec697a0efc7e63005b15c8273797a00efbb0f83d","sha512":"49544d152ef692f573932d88239c5bde1e0fc140d9fae0c7a5493b4a65406925d9287349e519ad0d62f601794e9f8ed9009bbed5f0adf30bd733f01c5fd9d87e","ssdeep":"","tlshash":"b021cddbba52b4401785f7b6986f740da77bbd0eccda4428d4005ac23dbeb2fd0125a8","size":1416,"data":"","first_seen":"2026-09-20T12:42:05.843379Z","last_seen":"2026-09-20T12:43:14.650374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"108.133.180.27","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nutsynft.art/","date":"2026-09-20T12:42:44.765Z","timestamp":1789908164765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://nutsynft.art\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 12:42:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: e7f95d5ee34a82e8ec1273456b4c7d38\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":679,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1bc17d7ec200a2ab37ea5582df9d22dd","sha1":"f70564decec01c4bde27ca267f20e49eefec90a4","sha256":"0a86277dbf522faf910b911b9642cfde7b9f19b12f6360fb3406e2831f2ed929","sha512":"dedc2996829198073bd43ecdbb98b9a6be099367104f4f2655fe9a4ef114fe7d3fdda59b8d16cc2c6ce1d03ebfc3bf3e127ba109d14e817a8bb0926cc838f19f","ssdeep":"","tlshash":"cfd012d0060f0ab1e09ccc405004730123223d8946c41d42084c0fd111443920317220","first_seen":"2026-09-08T18:18:42.615353Z","last_seen":"2026-09-20T12:43:14.649626Z","times_seen":31,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nutsynft.art/71c803bcfa.js","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"ip":{"addr":"104.21.18.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nutsynft.art/","date":"2026-09-20T12:42:44.456Z","timestamp":1789908164456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nutsynft.art","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 15:24:14 GMT","end":"Fri, 11 Dec 2026 16:24:02 GMT"},"fingerprint":{"sha1":"F1:DF:71:BF:D8:6A:7E:D9:63:19:A1:57:02:AF:C8:EB:F0:D1:99:FC","sha256":"EB:6A:3C:6E:16:FF:21:62:84:EB:DB:17:34:5F:E9:92:71:2A:8E:64:7F:3F:26:98:36:1A:C1:F8:F8:BF:F8:1F"}}},"request":{"raw":"GET /71c803bcfa.js HTTP/1.1\r\nHost: nutsynft.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 12:42:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjqL7ya%2FnManivfON3Fgn6B1jkPt58Qi3WkbErxDNXSUfj7PYqJA%2BiJ2R79tG8t7IDYajtIGqemVqLpSvcTbmYd9yTtTAVkBwSGeQqj0GJRoSD1jvRWPW8zyJeq%2BwsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d78e2286eafcab138e2dc60b5ffd7599\"\r\ncf-ray: a3e0e96bddea0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1416,"size_decoded":1391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"ec0079fbe80626976a5d84c6deca3896","sha1":"24073bab939de6e23adade4be8966fb01308948f","sha256":"611f82fa4dba3ef2ba86e496ec697a0efc7e63005b15c8273797a00efbb0f83d","sha512":"49544d152ef692f573932d88239c5bde1e0fc140d9fae0c7a5493b4a65406925d9287349e519ad0d62f601794e9f8ed9009bbed5f0adf30bd733f01c5fd9d87e","ssdeep":"","tlshash":"b021cddbba52b4401785f7b6986f740da77bbd0eccda4428d4005ac23dbeb2fd0125a8","first_seen":"2026-09-20T12:42:05.843379Z","last_seen":"2026-09-20T12:43:14.650374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"108.133.180.27","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nutsynft.art/","date":"2026-09-20T12:42:44.769Z","timestamp":1789908164769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://nutsynft.art\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 20 Sep 2026 12:42:44 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":1,"connect":36,"send":0,"wait":38,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nutsynft.art/","date":"2026-09-20T12:42:44.971Z","timestamp":1789908164971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://nutsynft.art\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"crV6C3q4gh-st3QnLRUd\"}"}},"response":{"raw":"HTTP/3 403 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:42:45 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxBqsbYLT5HPziDhnug%2Fe5%2FqhkfPF9DYwcbzjkBxDlh1SCjaO8EvW62Nk0Ac236bxzCxYqVOH8y4tiPHo59m4%2Bl%2BHTLN4MpPrwpIPR2FdZ%2BHwW%2BnAMIVTL29cVAPQHbQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e0e96fcebe56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1174,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nutsynft.art/","date":"2026-09-20T12:42:44.972Z","timestamp":1789908164972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://nutsynft.art\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:42:45 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FdG%2Fqo%2BIG6JLBjOE9KJFP6pQvuX0PlY3%2BcrMZAddHQwNf81g3fpPfbvizrfQEK8HC2iFSPtQpHLjdRtJbi0bqtZlsaGgUP1AiQuqJIJp5pBKDMrRIpbwtgyWhck6FDA%2F\"}]}\r\ncf-ray: a3e0e96f5eb156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":668,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":9,"connect":20,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nutsynft.art/","fqdn":"nutsynft.art","domain":"nutsynft.art","tld":"art"},"ip":{"addr":"104.21.18.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T12:42:44.181Z","timestamp":1789908164181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nutsynft.art","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 15:24:14 GMT","end":"Fri, 11 Dec 2026 16:24:02 GMT"},"fingerprint":{"sha1":"F1:DF:71:BF:D8:6A:7E:D9:63:19:A1:57:02:AF:C8:EB:F0:D1:99:FC","sha256":"EB:6A:3C:6E:16:FF:21:62:84:EB:DB:17:34:5F:E9:92:71:2A:8E:64:7F:3F:26:98:36:1A:C1:F8:F8:BF:F8:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nutsynft.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 12:42:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6f10VS91%2BCq%2BSPZzwsUsxajrFA1OfQlVrqYxp3rvW84X6hB640XJF2y4ZvQEfUR3ZBXUm%2Bo%2F7rj5CCPrrupnSH5hq%2FG9a9lGfUZQiAsAPPePWzmcCXtRhM6SUsyZlao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e0e96a5d970daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431369,"size_decoded":108111,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65264), with CRLF line terminators","md5":"ecef22b972938099de5ef0dcaaa84ff0","sha1":"7b2c4a646dcc898dd0e6ef6f36e0d1f2a120611a","sha256":"746b894645c0bbee0932261da34faf4729109e4e1e34105c595d2f71e7840d1b","sha512":"784058333de1fde050ad8da7cb46a663342021455895c3abe597b83f72eb9024d22823c242ef57719187109988c2022696272dd0ec18bb38e89e5bc7cb76cb29","ssdeep":"3072:q9CmiJXWyVlm90JrYmPo6YgGVJohDN3JDP6vpmaFHKkXu9kU6:7vWp90Jr5PpkVJov5DP6v4A9u9p6","tlshash":"b79448305bacfd944da3821db3cba7109d38426b5ff68815ffafa0014b6ead7491685c","first_seen":"2026-09-20T12:42:05.840916Z","last_seen":"2026-09-20T12:43:14.651953Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}