{"report_id":"f4110501-5d47-46dd-a6bd-41d0560dc1cc","version":0,"status":"done","tags":[],"date":"2026-07-17T09:43:58Z","url":{"schema":"http","addr":"unstableotc.com","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"title":"Unstable — the Arc OTC desk","dom":{"size":48738,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48664), with no line terminators","md5":"4a4bad8f9b791e792decfa9c7a51f4b5","sha1":"7136109e7e698ded417007bae947fc140dcb0743","sha256":"fd91be2ca3804a2462170f2fd48f970063179ba91e9682f79734e573531bf533","sha512":"3530d829b329e41494216c4f66b0a13105b89135b3d5527cc1a84863004a7d26dca35deeffccdcea2caa16dc2c1417cbae1e1ff9b0dc1494e7d998d6b584b7ee","ssdeep":"768:XAjNOTuJd668oUnYZuopEHbW9vy62yaIyxcy1my/yyGyy7yyyzhpgyU2CcLnutm0:ed66X/EHbq","tlshash":"7b23c8716600ed2e5c238f5db179ff3a50ca93aac1259429f1adc46506d3cb88be3e81","dom_hash":"domhasha786c68bea13499d99e533e6f0ea2a60","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"unstableotc.com","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:43:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"unstableotc.com","ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-05","domain_rank":0,"first_seen":"2026-07-16T10:56:25.42325Z","last_seen":"2026-07-16T10:56:25.42325Z","alert_count":86,"request_count":43,"received_data":1503283,"sent_data":21569,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"keeper-buy-production.up.railway.app","ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"domain_registered":"2019-08-01","domain_rank":0,"first_seen":"2026-07-16T10:56:25.438582Z","last_seen":"2026-07-16T10:56:25.438582Z","alert_count":0,"request_count":6,"received_data":9129,"sent_data":2909,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/1hovdhcfcl0oy.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b674ceccda7b7b99bb3696966424f361","sha1":"4828c38de4164c0d05357ce37136269f6818a40d","sha256":"ffd6c782c7fa519f3f70db970b1eb7759514a4a562eb3895944da9fbc41258de","sha512":"7f645d56ba023d881c76aa47c50f448601b1e0640bdbee5671819e798fa8d56fa579067909504548dac09d49c1a2244a41d129e06c96014498ebcc483f163bf6","ssdeep":"","tlshash":"fd111258a5515a7dea890194303af11db24b75a8c49f08bef0ae5c2043a621874c1fd6","size":1039,"data":"","first_seen":"2026-07-16T10:56:30.392444Z","last_seen":"2026-07-17T09:44:02.560724Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/01lwmn2qmmuv4.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cc072fd0b744c769a0d4847ccaac190","sha1":"e4c84eba17e2dfcd80e261abdd147da2de66fca4","sha256":"f0728c50db00be20f9c22ad14ca7b2d7590ab23d52c69bacdcc6f770d1229626","sha512":"7938a392f6d1d7051df05a6ecdff53fb9fe0d1f5c7c3143043cad0fdee1883f418c4b28dbc837312647c70588d01e944d2070b12f16205deb9e6adab94cf0a90","ssdeep":"1536:xEnvty/atFRbf0oUY5QiOq/LxWzftx+d5VpVT5zb4U:z/tDtx+Dj","tlshash":"c8a3d7b5771475eaced29594145b3010b17af8a3a09c005972acf8b32fbecd889eef14","size":100232,"data":"","first_seen":"2026-07-16T10:56:30.409005Z","last_seen":"2026-07-17T09:44:02.601779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"297aa193a0d678880b6f5845ec0537fc","sha1":"f1db71f90870fbc12bce4eda0d9e1d8ed5726325","sha256":"aa914cbc636a4c61164e0cfaf567cd29343e3d11c85526a39bcf5cfa2219d845","sha512":"57096227406145aad5bebbafdbac9ceda4e682d2e03af6a6c2fec052196947f5040cdc0240a16a3190ca06e7b531b10c534f13c45efe0ee900eebc233a645896","ssdeep":"","tlshash":"ced0a5f4bb05503508591cde709ddfec3f3a750225316151d41ee4941875d8f5183fe6","size":266,"data":"","first_seen":"2026-07-16T10:56:30.417579Z","last_seen":"2026-07-17T09:44:02.606195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-18T02:42:12.522309Z","times_seen":192780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9567813ce6da3cb9d4fa3e37c16e73d","sha1":"9114eba115f4d713d1c3cccc5c8f45c05ab6826e","sha256":"6d6b33d9d9b19c2221c3cd386aaf2d10e2381f6091d92af683773a2cba1daaaf","sha512":"900bfe5e14955bd69c5ee8e4b9204cbc66e3d00d01df1972456b66dfc08cc744da600a276c767e86f3a954af67c8ad20507c5c1486f969e9902b84d143790e39","ssdeep":"","tlshash":"1c317e1bf94afc507c71dd4f222a4f3684d5edbad078941cb64ece99157296203c898a","size":1481,"data":"","first_seen":"2026-07-16T10:56:30.418954Z","last_seen":"2026-07-17T09:44:02.607592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb7d5b5e4b33f3218ec2326558e9c2fd","sha1":"361e48124209bb80ea210dced02c79b4a05b1dac","sha256":"aee646ebff44287734931e7158aedc02e946c3238fabec955343d45a29ca21fa","sha512":"284a803ce9956590e6acb361d8148c78df970c03b743a3ff8379127991be25368c11f8438018bba8fc465bdd9d63053ff5dd40230eebaf763c3f645a8102ea27","ssdeep":"96:Lpf9tHdnbCciZC7cg1xqzc/xmW25YjUARcpYVLS2vg:dltV+fXgnqzcpmbco2I","tlshash":"f9c10c3d7009de4eecae3c69227eac3a20cd857b4795ce78c2d8de1109860797bd29c0","size":5652,"data":"","first_seen":"2026-07-16T10:56:30.419754Z","last_seen":"2026-07-17T09:44:02.608379Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dec79a5d66b05424986da11c40720ee8","sha1":"f1940bd27a1f496b26e94d22be739896a7fc69b6","sha256":"5a4755fc094070623fb488ba43fa3142a8c3388b55a4c064e4b3416ee0937d78","sha512":"99ccb8bec121258dbe185ef82313bc749cb43b520045df0f3cd849ad01615d3729f3321d2d1a7d88b17d7716b8d054c3cb96d1715050fc4eea4d81f71f8933da","ssdeep":"","tlshash":"6151281fe90aed11ac3aed5f153e9f3344cc88b7c134e97da58dce981a1697623898c1","size":2700,"data":"","first_seen":"2026-07-16T10:56:30.420664Z","last_seen":"2026-07-17T09:44:02.609376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f096f515fe5267b3c8a83c0ee52a0ed7","sha1":"8feb5279c702216a0b06990221d960834df5cf53","sha256":"bd3a825f48f5027e6205bd04f828635cb40ba5a5fee5b57d49bb1f0991370b31","sha512":"4e525252fc327d01eb3e81d9c0242876cde4d2fc05d45357af9923d3032a4debd8a2ba041a63b89bd7a3d180d0d2e3b803dfce31dc56baefd173396464d6d23e","ssdeep":"","tlshash":"efb01234f004dd9646f306126436e443025e504c394014a02203509a360fd15131fdc0","size":95,"data":"","first_seen":"2026-01-04T21:01:18.319729Z","last_seen":"2026-07-17T09:44:02.610368Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"43b958f2a2c6f4b04b8638e1c1244d76","sha1":"47f5907b4d82e9f216598d8eccc18c2fd00a9734","sha256":"b8ea14bf11f24621c724e376a835a75abd80a0a212d17089c68c7973590159a2","sha512":"db5a7987d5c57d45a66ac6e98712b115b9d0cc4b1a8ff7b994ce7375467fd13e34ef045de325942a27397613c9a7c61f15208e69fbd52ed452dc8131651effce","ssdeep":"","tlshash":"09e092f1dc26dc0fc3a74e291c3e5c7932cdd6611269620afd98c93859c6e390ae0e93","size":413,"data":"","first_seen":"2026-07-16T10:56:30.421904Z","last_seen":"2026-07-17T09:44:02.610881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0e0c303bb9a25d16601349f0a24bf81","sha1":"52b8e203a15f5f2d43c32ec29014524696a4472b","sha256":"2e3d39505003eda369dc055d993c0709b7c6f1aaedc6610bca25dd217556ce2d","sha512":"3e0b5fc89c8befa9bc988e8b4b8cd2cbf6c3df99ef66a6315c87cf49cc8a915aa7489cf1455fe789cd95a9f854decae21915647f9c8ef7ea2973c20cf9737994","ssdeep":"","tlshash":"32c02b12ce0bec10a039ca4f237a4f238ad4d0b1c0340c45f20ce9c83511e01134ccc4","size":147,"data":"","first_seen":"2026-07-16T10:56:30.422803Z","last_seen":"2026-07-17T09:44:02.611666Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3ebb30b6f4aa67c90f6448f7b005765","sha1":"02d1c6e29ed5642f93e97c48437fa83b6798b447","sha256":"9666c442584915198149629e4c4e88b6a40e0d2c32442696dc9f5faf5b0f06a8","sha512":"5e938b5de9ce2f6a9b0a1a9709a602491b234e817dccdc99d79828fbd09cbdd81220221d8ea6823e2f745fb5ad19b05507ae324c9d13d88dbde0a9cbc18f598d","ssdeep":"","tlshash":"a3419df3de14ee19cbd98e142c3e3c6110c8c7d28248e55ba66cc83840c7a345af4ab3","size":2057,"data":"","first_seen":"2026-07-16T10:56:30.42378Z","last_seen":"2026-07-17T09:44:02.612559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/00wubug8od8bw.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e99344b419e07b17a1d62d91ad48deb8","sha1":"f76f0f562b318c495d011640f702432b21cd58ae","sha256":"db9b9dc521c60c5495d973a05d612cf4d3523c0d374ebd996e09749b8043c814","sha512":"72183586fa619d2a531d7633627a2a1bdda7997301374b762fff8af6855eb0f136c1333ecf45c41912aa469f5f18a77de3c4c6ec164db36e9dd47226b457361a","ssdeep":"96:QNa+26uHe/PUr8c6UzglTXOT3FhnGNjx513u8Nc:up26gWPUoc6J+LF5GNd/FG","tlshash":"a29194c9b2d2f8ab83671094447f200bf37d1de0885e9594e7e464eb7d3065d91b2fa8","size":4571,"data":"","first_seen":"2026-07-16T10:56:30.415658Z","last_seen":"2026-07-17T09:44:02.533747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/2bdo8tnu8r3q7.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8820e764a6a120bb17346bcc04a8a64e","sha1":"943c85ce8687ff4ee242506d11369bd0329eeed4","sha256":"683b7ef46e4d7cbc9736bf2ff2480eb6791601335bfb046386f80473ac74a15a","sha512":"c47530a997ca8bd0476c1746584d25fc843201958e9923e1f3b11ce06134a98b45d240166434ac16daaa83324e13a836382676b47f252b8d9635dbae23820010","ssdeep":"384:kwOjUwzwXTvFQh7lR3xWK97G99uzCCwD7PHsQ:kwOjULQh7hP7GqCCwD7Z","tlshash":"3fc27610e055bfecad6b05d864aec50c621e3a8cce1e8475f9b83c652ec95d4ba43fc9","size":28086,"data":"","first_seen":"2026-07-16T10:56:30.399136Z","last_seen":"2026-07-17T09:44:02.600852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3bqfq9_4ylkkq.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd426a032757b87c131862e6050976fd","sha1":"903c5321b18830d907de8a4b89a740a923e313d0","sha256":"63d45b9f656bafb6f2a5650c4cc46d877d4127c5941415be19dd0726104c6617","sha512":"998cb40b10debd4d76dbf1498253e5d9676998caff14cc66ba6e19d3f390af96c405059cddae1a6cc1af72865fb28a104b06c03b53cf14d75da1f9b5844a72d5","ssdeep":"768:6wkr7HZjLzhPjIM/R29UjJFylgAZCYK6rKSd06:Or7HthsMZNylgAZCYK6dj","tlshash":"f1031be47352b17a5b8b0049943d4009f23919dda40e403cb7a45cfaa47a6c6ebf7fb6","size":40556,"data":"","first_seen":"2026-07-16T10:56:30.414726Z","last_seen":"2026-07-17T09:44:02.566395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3lqvqxd7wxwe7.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9f92f2c26b819db51ca0ae64bfa296a","sha1":"b8f573d0746b8c158d624685ae46772659462605","sha256":"3eb8ac7edee44614ed3da8f81cdffe2d80ec6dc0a91326f4f768d5176c7400b9","sha512":"b35663452e27b16cb1332fecdfec6bff979334877fcf75a9be221f5783afb7045a78224ccc356a616ea6d68dd8e97d781f5932b4a4afa8663dd3772ced4cf8eb","ssdeep":"1536:k/ITX3U2jq6bhg2s/l5f4veH290srqRdv3j:k/ITHZgfl5f4+29rqLT","tlshash":"43631aa67315746b66d7c0c9942a0004d2342961241e442c3ab9adf7b9b3dcaf5fff35","size":67910,"data":"","first_seen":"2026-07-16T10:56:30.411472Z","last_seen":"2026-07-17T09:44:02.604537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3dmx-bf8iaepd.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54d8ca14a283a82fbd0812c28cebb391","sha1":"0ca499575a0c9a6b71f288e10fd6842a857729b1","sha256":"871662ccac5e0011dcd079767d717257119ae80a0f5859a167b2692096aefe1c","sha512":"3c3ceaedd14c5d1c6cf9ca11f22fdf851ebba84158afb4993c0286bad4109709211125ad81b5b93ca6418032951ca75db396c4010ea79cc3c8bc4252c3ea3e95","ssdeep":"3072:zgKSnY6skJwFFpPy0b6OCmChEpQEsn+PA06ptvlks:zgKSnY6sk+LpJb6OCbhUYn+mptvlks","tlshash":"141407f932d5f98207a740a6c03f1007f22c4d76249d6860e3e5dcda756859de2b3faa","size":194635,"data":"","first_seen":"2026-07-16T10:56:30.377282Z","last_seen":"2026-07-17T09:44:02.571918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/2q8gxhtto_atb.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f7b7c1d2b4a0e2ab81cb2dcda82d71b","sha1":"9b658767fcf8662b9d7126fa348db8cebffff0bf","sha256":"693768332318d84caa6191ce9b9c3c2fc3ee221238e88815a4199172f57befd9","sha512":"23f66cf8fd98813e3907a2629d6a533fd196500342f78f52b05c42f01983e3c9ec70a6bf2ee08922400c5237f567bd678ab950b497cb4ce1089876c35092120f","ssdeep":"3072:T1Z2A8LcBEh524Xh0vzVivaMYMcj5abh5A:Tz2A8LcBEh524XyLYoMwUi","tlshash":"dbe32be1777974a247ce3155949b4001b278d8d5a40d007df7a8e8bb2bbac8cd9e3f29","size":148059,"data":"","first_seen":"2026-07-16T10:56:30.378294Z","last_seen":"2026-07-17T09:44:02.557278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/231ptdm2k4128.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91946d6416cd5859f0fce4a2c8a12fdd","sha1":"6a3efb1ce395a9f61b1b462c5801d22a33b050a2","sha256":"7e4b7e3d6a2101f89c82ef2c37bd2250ce10305596f670e511691312cad6f63c","sha512":"09d90d17b2fee3ff671a4ee241a3981462bb707579f43437134d3272e4ffc87fd86baa5dd1e3760bdac2ddb47749f49d92ab15d1c54bcedb7d1e37c49046965a","ssdeep":"384:vtdB3ow+hmE2EhgS0ZSKOuRIHdKIlRsxbl9awUpD2:vXE2tSKSLHvsdlsh2","tlshash":"5aa2c950b192badcae7a01d8946ec008621e2a9ccd1e807df9b87c7d2c9c4d5f957fc9","size":22030,"data":"","first_seen":"2026-07-16T10:56:30.384246Z","last_seen":"2026-07-17T09:44:02.561973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0nxs-6nh3ti-o.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"814ec35236eee5eee4f75add0c138220","sha1":"5ef2e82356d4ec49be53dacae2779b4e3fee6862","sha256":"b10ef95c5537fae325cd602b6160297d529a513fdb913d0076bf8f0f128214d1","sha512":"b00ad057c57837bf6dac1aa0b366b5e12adbb19dd7d1462b9d39e60db321494247a31a5735dfd29cda1eef73942ad92c8f9904a93583c0e21fb32bcb8f5ecce6","ssdeep":"3072:MUs8Lcs6Eh524Xh0vzJivaM6C11j5ablbE:Zs8Lc3Eh524XyLUKC1ZGbE","tlshash":"02e32be1777974a247ce3155949b4001b278d8d5a40d007df7a8e8bb2bbac8cd9e3f29","size":148059,"data":"","first_seen":"2026-07-16T10:56:30.406127Z","last_seen":"2026-07-17T09:44:02.56728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0j5cgabi9kwt_.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a7bb4b86aca632a887d1ede91ee464","sha1":"dd48326cd7ba4b3ad8e2f37d0bd2d25a64936515","sha256":"015a43d072ffb439ad0b0d03c41510c0f117b1e43327319903487a2c247a624c","sha512":"b690a78933d6261503246e6752bb88fb002780645b06908da295ac5c94e92e9e04c251eb424f2f64abecbe2de43e0656c3b165c70beb363c66f15c5bfb20fa66","ssdeep":"384:D4Mj8ix/DbkTqbRmoftpvUZSQb+KwvqjEoIVbh:D4MjxDbYqtmepvUrbPjzQ","tlshash":"75b2f8a571d5f4912ba350a5803f500bf23d1d3a296ca4b0b3a2ccf579a049de537fea","size":23766,"data":"","first_seen":"2026-03-30T08:27:07.71132Z","last_seen":"2026-07-17T09:44:02.533204Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3-pfde1wlq_ur.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c5d6106fc86cfce45567860d1a16abe","sha1":"32b0eff7ae9678bdf5a35a74c77001c4e63b1cd3","sha256":"cd2159f60a57e980c505e10c94c505172300a6543f3a55a761e23adbb943be61","sha512":"69160e1c93c7d6fede711c02f2be3c6e6be663afedf6dc2909cf98bb190cceed237550390f2c8d321be3e3f3dc34ee4b49353c4dc2652e9fbef6a3989bf28afa","ssdeep":"","tlshash":"6c6151c9b2e2f8bb83675091407f201bf27e4ce1581d9194e7e5a4dbb86061d81f2fa8","size":3376,"data":"","first_seen":"2026-04-28T05:50:14.224191Z","last_seen":"2026-07-17T13:37:47.429668Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/362r4kts3j1rr.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"050d510f2ed5cbeb641364ec1dfd911e","sha1":"59a02c8c0aeb33bfea8f0b75fa37e466f90b6339","sha256":"9f7cd11a22c342daf654cb13dd296810c0f5947b03299fd4a612c060c875635a","sha512":"0d413e24ee771265d0793654dfe5c450f207f9b4f7134309a0bff53f6a22d8ecb17ef23772ed9ce06453fc583fb4ac1609e1c88cdf59853b3127ae2d82e42bb7","ssdeep":"384:oZTWst5gWTn6YV3uXeqbk2deUtd7rmzlouNf9zXYpDuYNb4xypk81vZTDxJRiGRN:ITWstOoPQMlqD9VhLFggCDFZgSqU/qV","tlshash":"f633c8b57295faa303db91d9c0370012f2780c71309d64b4b395d8af399dd8992f6f6a","size":54648,"data":"","first_seen":"2026-04-14T14:34:08.507647Z","last_seen":"2026-07-17T13:37:47.424864Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/turbopack-05s5mqbkvh09e.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28db4f271592bdd8700d9644778bf5b2","sha1":"6b78023872838ab6aa8627920b6e55d102634cf9","sha256":"7ca86d9bdc0966362168071698cbd393ae02e798467cb43990592a1418504d22","sha512":"380e91b607d2d8a1f99c71b6de5d0811b3395cdb457a225ff898009a23c769f984f0e52ab74b366345a243cb88d470cb52024e007f660ebecf9418a02a9b0506","ssdeep":"192:H4gM6B68QEsg6+9EiZfYGElpETN/8S3sBT4fCT3cXX6PpH+yLxI:H4gM6VLElW0ssqCTMByLxI","tlshash":"5d32d6ea33a6f07343af90ebd07f4004f17944a9145e541cd36ce8ea28394aa85e7f76","size":10986,"data":"","first_seen":"2026-07-16T10:56:30.398155Z","last_seen":"2026-07-17T09:44:02.516747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0yihj6bc2uwyv.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a2b98c154b80896e05d80e4e6f2243","sha1":"62434d9606676b6c3cc146b3fcb3692adc7458f6","sha256":"fa7a735527b04ee3de824aaf21c8475222f06b7213fdac3e9b248a5f94f4c535","sha512":"c6300e682839ec42e3e59a817533b471bd7ed7b628d2837ac3badc2c53c8c5f8fb61648a279a5ded982ede36430347742b22183e61424fdd0b28a6701241d8ed","ssdeep":"3072:pmLtyvMDoFaY7470EE8tjGo8L2bWOO2ZJ/XegMAQgDn+hviNT:pmLtEOoFaYUi8Dv/u0rDn+hviNT","tlshash":"7424fbe83995f6626ab302b710af1403b338252b280d4d60a351fd9db57845fb17bf9e","size":227533,"data":"","first_seen":"2026-07-16T10:56:30.387381Z","last_seen":"2026-07-17T09:44:02.573675Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3sot-xb83gjis.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d2fd422c86bc441296a0f5ac4860bdc","sha1":"190623d419ef16675febca3719b182e9077b1ed0","sha256":"d5d954fda4a871fb4cc446e1d8e3f3f5288b0fd41bb6596a328f88864f54fb87","sha512":"af217122758a90f232087ac914f94db143a7bc84d67e112e80050285416ee1f3e9722f1148d80ffa12e8acfcd82f34dcd434c3281ec608796701bf92a6f27444","ssdeep":"384:CtTdbekLJ09CYZDo5EOiu23pMdrgWI1JNJeCilPBIMQXvFRnkKfofZa5uQwMZI6a:oJY1o56eZ2o5wFdHMn","tlshash":"81b2f8aa3750b4b3d79b42c6c42b5005f165acb4104d18acb7e86df77ab256ec0eaf34","size":25266,"data":"","first_seen":"2026-07-16T10:56:30.395281Z","last_seen":"2026-07-17T09:44:02.534715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0u0wjt0sfc2xo.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e10fabbc84850a38b67e6821aa4fe58a","sha1":"987d674053256f85dd51ad7c6c793bf18986bffb","sha256":"02829054bf2b929182b6c999863b051f83565ca394b5a873c879d77ac174d8cf","sha512":"8574e9df2ab0030cf907486c59209e3cfe26445333dd625b5eff69733ee081b4f250650560a82aca5e31eac1219566af04f59d1a0d255065ac1ae02db9fb327c","ssdeep":"768:pqc5FI0SCtNO6wNGA0vXSKv67KmGvkqLHHOeqfud3Flh39eLX:pl5FK6bA0PSY6itVqfOlNiX","tlshash":"8df2f7a42391b023e3ba50db11769001f2b9dc6958cf4808f2e4d9eb76f599485f6f3a","size":35485,"data":"","first_seen":"2026-07-16T10:56:30.416651Z","last_seen":"2026-07-17T09:44:02.518935Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/1mprs3sk3oc1t.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dde87309e502c95845dc160feb8f4f3","sha1":"3ddda4e7a43146dc0de1162034e6029db0629a8e","sha256":"3850c8cb95c920cd9719c91bc434ae104faac4d1c60cb733ff6c81a9705e3db6","sha512":"093e80e857fc946f882cc44fec1432f515da11f0f039e494cd3166c7d9e3e1792547a65ae3ae38755ae14ee68741f03c0f08c3fc2f2bcbba27b6179932639479","ssdeep":"1536:xEnvty/atFR0f0oUaftx+z5QiOq/LxWc5VpVT5zb4U:s4tx+itAj","tlshash":"dfa3d7b5771475eaced29594145b3010b17af8a3a09c005972acf8b32fbecd889eef14","size":100232,"data":"","first_seen":"2026-07-16T10:56:30.379499Z","last_seen":"2026-07-17T09:44:02.576978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/37nfaeoh1bvsh.css","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.839Z","timestamp":1784281411839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/37nfaeoh1bvsh.css HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31798\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"37nfaeoh1bvsh.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"436cf1ba13b176aa15ac0975a53dbbdc\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:33 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/37nfaeoh1bvsh.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7dcww-1784281411843-e7c95356ae8a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45580,"size_decoded":11194,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (41961)","md5":"436cf1ba13b176aa15ac0975a53dbbdc","sha1":"3eaddec834ef1f575b987ce108030e2287db9acc","sha256":"7fa60bf2623f28bc525c9298caff47986a3de80fc7b9901d0ddaf98c31e9f2fb","sha512":"404f79abd78386579533b992b222a1643d8e09bf524efb05e9457eeab3925ce73376f100e4a6b5540850e27b1ad2fc09b4905bac3b4ff48088e2e35949bc0670","ssdeep":"768:9dbAigmM/OCQlQlHNOnToeCmlgIQz5KGGC80ptj96xCbA4:1Mbyyalv0N6xCbD","tlshash":"1323c660f316d87fac2394f6e39cb51ca518f555de3166e8fe02220267c77f20a96b18","first_seen":"2026-07-16T10:56:30.385398Z","last_seen":"2026-07-17T09:44:02.514501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/orders?_rsc=5CB68i4pnAekjehf","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.146Z","timestamp":1784281412146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /orders?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930169\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"2e36f4f1773e2610f075fa129b0cafdf\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /orders.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp7d7-1784281412150-2211439a74ff\r\ncontent-length: 656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656,"size_decoded":1917,"mime_type":"text/x-component","magic":"ASCII text","md5":"3600c176968c4eaf59036a8080eeb12a","sha1":"f29cc67251099210ca47149b769993f1f00aab04","sha256":"b13f0cf0cff82cf0f175e3bfac1a09c6a033a51bf118d34583409bd56ceb685d","sha512":"32c069767c49bc26d8c332fcd660617167f1a868ddfc84f570a28655afbe6050fe40c4f66a38950ba2f0fbe2d7a3743287b5044d1fd4ccf2923594ab87d70aeb","ssdeep":"","tlshash":"17f07d27480d6d845cf5d49812ead70a51682b33b0a94d98c4df9ca107b503e1f8a787","first_seen":"2026-07-16T10:56:30.389761Z","last_seen":"2026-07-17T09:44:02.515805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/turbopack-05s5mqbkvh09e.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.843Z","timestamp":1784281411843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-05s5mqbkvh09e.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-05s5mqbkvh09e.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"28db4f271592bdd8700d9644778bf5b2\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/turbopack-05s5mqbkvh09e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7dcww-1784281411847-a961f051ce72\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10986,"size_decoded":5733,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10547)","md5":"28db4f271592bdd8700d9644778bf5b2","sha1":"6b78023872838ab6aa8627920b6e55d102634cf9","sha256":"7ca86d9bdc0966362168071698cbd393ae02e798467cb43990592a1418504d22","sha512":"380e91b607d2d8a1f99c71b6de5d0811b3395cdb457a225ff898009a23c769f984f0e52ab74b366345a243cb88d470cb52024e007f660ebecf9418a02a9b0506","ssdeep":"192:H4gM6B68QEsg6+9EiZfYGElpETN/8S3sBT4fCT3cXX6PpH+yLxI:H4gM6VLElW0ssqCTMByLxI","tlshash":"5d32d6ea33a6f07343af90ebd07f4004f17944a9145e541cd36ce8ea28394aa85e7f76","first_seen":"2026-07-16T10:56:30.398155Z","last_seen":"2026-07-17T09:44:02.516747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3-pfde1wlq_ur.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.849Z","timestamp":1784281411849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/3-pfde1wlq_ur.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3-pfde1wlq_ur.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"8c5d6106fc86cfce45567860d1a16abe\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/3-pfde1wlq_ur.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7dcww-1784281411858-d1040c43d2b3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3376,"size_decoded":2670,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3376), with no line terminators","md5":"8c5d6106fc86cfce45567860d1a16abe","sha1":"32b0eff7ae9678bdf5a35a74c77001c4e63b1cd3","sha256":"cd2159f60a57e980c505e10c94c505172300a6543f3a55a761e23adbb943be61","sha512":"69160e1c93c7d6fede711c02f2be3c6e6be663afedf6dc2909cf98bb190cceed237550390f2c8d321be3e3f3dc34ee4b49353c4dc2652e9fbef6a3989bf28afa","ssdeep":"","tlshash":"6c6151c9b2e2f8bb83675091407f201bf27e4ce1581d9194e7e5a4dbb86061d81f2fa8","first_seen":"2026-04-28T05:50:14.224191Z","last_seen":"2026-07-17T13:37:47.429668Z","times_seen":27,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0u0wjt0sfc2xo.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.852Z","timestamp":1784281411852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/0u0wjt0sfc2xo.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0u0wjt0sfc2xo.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"e10fabbc84850a38b67e6821aa4fe58a\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/0u0wjt0sfc2xo.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fmzzm-1784281411857-ca19011a3827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35485,"size_decoded":15959,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35485), with no line terminators","md5":"e10fabbc84850a38b67e6821aa4fe58a","sha1":"987d674053256f85dd51ad7c6c793bf18986bffb","sha256":"02829054bf2b929182b6c999863b051f83565ca394b5a873c879d77ac174d8cf","sha512":"8574e9df2ab0030cf907486c59209e3cfe26445333dd625b5eff69733ee081b4f250650560a82aca5e31eac1219566af04f59d1a0d255065ac1ae02db9fb327c","ssdeep":"768:pqc5FI0SCtNO6wNGA0vXSKv67KmGvkqLHHOeqfud3Flh39eLX:pl5FK6bA0PSY6itVqfOlNiX","tlshash":"8df2f7a42391b023e3ba50db11769001f2b9dc6958cf4808f2e4d9eb76f599485f6f3a","first_seen":"2026-07-16T10:56:30.416651Z","last_seen":"2026-07-17T09:44:02.518935Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/icon.svg?icon.1omkoliz24qit.svg","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.920Z","timestamp":1784281411920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /icon.svg?icon.1omkoliz24qit.svg HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16405\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.svg\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: \"82b13c2df5f70f2b67ee5070588d9a47\"\r\nlast-modified: Fri, 17 Jul 2026 05:10:06 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /icon.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2vfls-1784281411924-f8b132d42b1f\r\ncontent-length: 580\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":580,"size_decoded":1720,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82b13c2df5f70f2b67ee5070588d9a47","sha1":"c121a5c8b495287e05ba310deeb5d673c231d041","sha256":"1928738801cf8c43034ea84824965f8f37d7d3ed1c68e13343fec444661d6288","sha512":"f4f84d576b7c2c6b15efddb485a48d38da01f849b79e88a6d566e929c351d374fefe6b0ddd25b09db6b1df6f595273d853f6e38d547e05ec7a5a56f7b2a23e0f","ssdeep":"","tlshash":"33f0201ca116a83cb73b802596a7398025224063826d9138f07e843ceb021890a2f2f9","first_seen":"2026-07-16T10:56:30.380532Z","last_seen":"2026-07-17T09:44:02.526556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/orders?_rsc=7h4NYy5eoyMcNlUN","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.217Z","timestamp":1784281412217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /orders?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930202\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"564b0e9826fc8198e6033173a2ea2fef\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /orders.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp7d7-1784281412223-8d5a1cce0b19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2803,"size_decoded":2135,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2422)","md5":"997aeed656e2f85818d176b6642e6f59","sha1":"51a5fcaa9a5579d726b0c064912754a80460d710","sha256":"ab35bf34e2b8fd0c46013d160e5213161bf45db6980a11ec50eb3d7dad49d649","sha512":"7b338d41f7bd45961ec8ae53ea3d9ec7558e03c5d933e27be5645e52937a30b5da60e64f7936c5e57d3180bc5dc2e42a3ffb3c6c122464139c89bc14bcd33c87","ssdeep":"","tlshash":"0851acbbdb10dc7eabaa8595184f7306128c037bd3685d7bd50c8d1906cab2a2d753b3","first_seen":"2026-07-16T10:56:30.382232Z","last_seen":"2026-07-17T09:44:02.527539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/orders?_rsc=DDvudCOpnghSOWpo","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.223Z","timestamp":1784281412223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /orders?_rsc=DDvudCOpnghSOWpo HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /orders/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930201\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"017118ac8070a8ed59056e9b5235042b\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /orders.segments/orders/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qxqt4-1784281412227-6caca0fdc1a3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1365,"size_decoded":1801,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (685)","md5":"a1ffe306e9eecba4b1dd0499322a1857","sha1":"04f73b2e4ab858bc3f007596f939491dd3625524","sha256":"71eba171282d897a13eccdfd088430d7df9a8b11753aec988d7da47e06d45d2e","sha512":"bd33491942e6a59e35e260f7e13f94406dfbd2b41c74d2de9119abdeaa55ae181dd4a7ba53a8085bfb33ffc748a7f2264dc921a078dedd663c18682bcfc76cc0","ssdeep":"","tlshash":"e221471bde1ded9a4ca4c86d2a9fab23519d4877d5348c9de6cedcf806098621789081","first_seen":"2026-07-16T10:56:30.405294Z","last_seen":"2026-07-17T09:44:02.52848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/fees?_rsc=5CB68i4pnAekjehf","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.634Z","timestamp":1784281412634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/fees?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930203\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"c7dd1ab5f43be25855701ff81ad2dbde\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/fees.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rlbjq-1784281412639-0fe82bacc8ff\r\ncontent-length: 722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":722,"size_decoded":1986,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (325)","md5":"b819e76eed70f7e68759fd4a10d8b77f","sha1":"cfb2aad122ba4e14259ac5062908877d7f444e55","sha256":"e239a05b37d3c253a9210d371294d2aee6eb926532c62df261a8bd6fc027f57c","sha512":"0e50e4dd5e9ccc355faf0c2fccfdfb90b00818de18195ccc0f4e6fa593cb7890008e72b62940b4d102d58c6e9329b30d0827d45bb979c43d739b7cdcdd8d98f8","ssdeep":"","tlshash":"a1017b37880d6d945cf4d4a816aae70e51792a3370b94d98c8de8c9007b503e2f8b787","first_seen":"2026-07-16T10:56:30.381413Z","last_seen":"2026-07-17T09:44:02.529354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeper-buy-production.up.railway.app/health","fqdn":"keeper-buy-production.up.railway.app","domain":"keeper-buy-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.141Z","timestamp":1784281412141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /health HTTP/1.1\r\nHost: keeper-buy-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nOrigin: https://unstableotc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, x-api-token\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"8b-0NkTE2Zm3eSEj26tYu3412wGWMs\"\r\nserver: railway-hikari\r\nx-powered-by: Express\r\nx-railway-request-id: IQyNn35VT52VatXfqmzx2A\r\ncontent-length: 139\r\nx-hikari-trace: ams1.b55h\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":139,"size_decoded":552,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2404a53af11bceb708c83720837030c4","sha1":"d0d913136666dde4848f6ead62edf8d76c0658cb","sha256":"9b01d586e6bc24e56c7435a18c911e61f2e2a35b8a32917fbb83eae5a22a473d","sha512":"e7f0b9cd8ea7ad3f13454a90b86031a36f8cbd13990fd010357644577f70c905660a033590ed44d609b1d36fb74ecfce2a1383231b9eb2c9c44e592ca6272d2f","ssdeep":"","tlshash":"a4c04c87255990788d144227850cd621692b46120d60992e989faa00553d5de7555e4b","first_seen":"2026-07-16T10:56:30.39151Z","last_seen":"2026-07-17T09:44:02.530304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":22,"connect":20,"send":0,"wait":106,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/media/d2d62b05021c6286-s.p.2d9e_tvweuz-y.woff2","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.834Z","timestamp":1784281411834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/media/d2d62b05021c6286-s.p.2d9e_tvweuz-y.woff2 HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 31798\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d2d62b05021c6286-s.p.2d9e_tvweuz-y.woff2\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: font/woff2\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: \"4ebf124f4aa2318f30056260916b2882\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:32 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/d2d62b05021c6286-s.p.2d9e_tvweuz-y.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281411838-6bedbc11992f\r\ncontent-length: 36528\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36528,"size_decoded":37749,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36528, version 1.0","md5":"4ebf124f4aa2318f30056260916b2882","sha1":"b9f065cb3efa8ae39a4d86c8f7fabd1fd0eb4129","sha256":"2b193a4f0fef3fc4c6a3fa756bb5dab6c10b489acd5e0718736847755077e9ec","sha512":"16ac0cf17f02b191d6355730d620e5aaf931b66df5560c4be85a24fc3b2041225981e178786bf9330c2422b2593f62c7928c72471e2126d633329d239716e40b","ssdeep":"768:fsGERp1qCv/K2Dc3vG7YQQu/x9vApEqCsqYoMG:fsGUp1qCv/Ky7FQu/HjiVod","tlshash":"f2f2f2657544e3ee5dc92f3c0b062fad1087b15a1c9e859ce50a5ce2ada1fd483d40f8","first_seen":"2025-11-12T06:01:05.890331Z","last_seen":"2026-07-17T09:44:02.531624Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/media/f06bf9da926bae75-s.p.2874ccu1_u7jf.woff2","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.838Z","timestamp":1784281411838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/media/f06bf9da926bae75-s.p.2874ccu1_u7jf.woff2 HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 31798\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"f06bf9da926bae75-s.p.2874ccu1_u7jf.woff2\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: font/woff2\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: \"e35fad09c70beb975a297c43c6af4e66\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:33 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/f06bf9da926bae75-s.p.2874ccu1_u7jf.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281411842-02bcc435dc8c\r\ncontent-length: 29904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29904,"size_decoded":31125,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29904, version 1.0","md5":"e35fad09c70beb975a297c43c6af4e66","sha1":"561da8545041f3c8c081cdc50a159bb52da4d773","sha256":"6219bc4bfdfc5d9b2201dcdf046218b122a758f932e25ed5f168f929b7ca2311","sha512":"cf69d106148044b54879b3f78e3834a5662e046aac7b869e053b58fcfd67652ef5524517dd87acb6c001f1f0a75774b76de60360031527f4cb9778011127aef8","ssdeep":"384:J8cfYIYWMUey5Fn4NuqRsLoInf1wxULqz9enQFbxj2iD0EcjycmxpPozOYs9QJJ4:NfdL5Oc2m4Uecg1qbvdmnis9QJEoV5ZI","tlshash":"5cd2e1ce2ec2128b8ca07649cede8e7d560659b4cc7d06e9a07f9d02d346d93af50b25","first_seen":"2025-06-23T03:30:32.94797Z","last_seen":"2026-07-17T15:14:13.229385Z","times_seen":993,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0j5cgabi9kwt_.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.840Z","timestamp":1784281411840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/0j5cgabi9kwt_.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31798\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0j5cgabi9kwt_.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"05a7bb4b86aca632a887d1ede91ee464\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:33 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/0j5cgabi9kwt_.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fmzzm-1784281411844-b7e5f0c11def\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23766,"size_decoded":8927,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20332)","md5":"05a7bb4b86aca632a887d1ede91ee464","sha1":"dd48326cd7ba4b3ad8e2f37d0bd2d25a64936515","sha256":"015a43d072ffb439ad0b0d03c41510c0f117b1e43327319903487a2c247a624c","sha512":"b690a78933d6261503246e6752bb88fb002780645b06908da295ac5c94e92e9e04c251eb424f2f64abecbe2de43e0656c3b165c70beb363c66f15c5bfb20fa66","ssdeep":"384:D4Mj8ix/DbkTqbRmoftpvUZSQb+KwvqjEoIVbh:D4MjxDbYqtmepvUrbPjzQ","tlshash":"75b2f8a571d5f4912ba350a5803f500bf23d1d3a296ca4b0b3a2ccf579a049de537fea","first_seen":"2026-03-30T08:27:07.71132Z","last_seen":"2026-07-17T09:44:02.533204Z","times_seen":9,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/00wubug8od8bw.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.844Z","timestamp":1784281411844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/00wubug8od8bw.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"00wubug8od8bw.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"e99344b419e07b17a1d62d91ad48deb8\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/00wubug8od8bw.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qxqt4-1784281411848-ee1dc0282266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4571,"size_decoded":3268,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4567), with no line terminators","md5":"e99344b419e07b17a1d62d91ad48deb8","sha1":"f76f0f562b318c495d011640f702432b21cd58ae","sha256":"db9b9dc521c60c5495d973a05d612cf4d3523c0d374ebd996e09749b8043c814","sha512":"72183586fa619d2a531d7633627a2a1bdda7997301374b762fff8af6855eb0f136c1333ecf45c41912aa469f5f18a77de3c4c6ec164db36e9dd47226b457361a","ssdeep":"96:QNa+26uHe/PUr8c6UzglTXOT3FhnGNjx513u8Nc:up26gWPUoc6J+LF5GNd/FG","tlshash":"a29194c9b2d2f8ab83671094447f200bf37d1de0885e9594e7e464eb7d3065d91b2fa8","first_seen":"2026-07-16T10:56:30.415658Z","last_seen":"2026-07-17T09:44:02.533747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3sot-xb83gjis.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.845Z","timestamp":1784281411845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/3sot-xb83gjis.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3sot-xb83gjis.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"7d2fd422c86bc441296a0f5ac4860bdc\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/3sot-xb83gjis.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7dcww-1784281411850-324658803715\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25266,"size_decoded":10650,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25266), with no line terminators","md5":"7d2fd422c86bc441296a0f5ac4860bdc","sha1":"190623d419ef16675febca3719b182e9077b1ed0","sha256":"d5d954fda4a871fb4cc446e1d8e3f3f5288b0fd41bb6596a328f88864f54fb87","sha512":"af217122758a90f232087ac914f94db143a7bc84d67e112e80050285416ee1f3e9722f1148d80ffa12e8acfcd82f34dcd434c3281ec608796701bf92a6f27444","ssdeep":"384:CtTdbekLJ09CYZDo5EOiu23pMdrgWI1JNJeCilPBIMQXvFRnkKfofZa5uQwMZI6a:oJY1o56eZ2o5wFdHMn","tlshash":"81b2f8aa3750b4b3d79b42c6c42b5005f165acb4104d18acb7e86df77ab256ec0eaf34","first_seen":"2026-07-16T10:56:30.395281Z","last_seen":"2026-07-17T09:44:02.534715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/362r4kts3j1rr.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.850Z","timestamp":1784281411850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/362r4kts3j1rr.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"362r4kts3j1rr.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"050d510f2ed5cbeb641364ec1dfd911e\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/362r4kts3j1rr.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281411854-37edbad146a9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54648,"size_decoded":14595,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54646), with no line terminators","md5":"050d510f2ed5cbeb641364ec1dfd911e","sha1":"59a02c8c0aeb33bfea8f0b75fa37e466f90b6339","sha256":"9f7cd11a22c342daf654cb13dd296810c0f5947b03299fd4a612c060c875635a","sha512":"0d413e24ee771265d0793654dfe5c450f207f9b4f7134309a0bff53f6a22d8ecb17ef23772ed9ce06453fc583fb4ac1609e1c88cdf59853b3127ae2d82e42bb7","ssdeep":"384:oZTWst5gWTn6YV3uXeqbk2deUtd7rmzlouNf9zXYpDuYNb4xypk81vZTDxJRiGRN:ITWstOoPQMlqD9VhLFggCDFZgSqU/qV","tlshash":"f633c8b57295faa303db91d9c0370012f2780c71309d64b4b395d8af399dd8992f6f6a","first_seen":"2026-04-14T14:34:08.507647Z","last_seen":"2026-07-17T13:37:47.424864Z","times_seen":40,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/2q8gxhtto_atb.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.854Z","timestamp":1784281411854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/2q8gxhtto_atb.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2q8gxhtto_atb.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"8f7b7c1d2b4a0e2ab81cb2dcda82d71b\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/2q8gxhtto_atb.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nxgc-1784281411858-0f6c84f2d254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148059,"size_decoded":46445,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8f7b7c1d2b4a0e2ab81cb2dcda82d71b","sha1":"9b658767fcf8662b9d7126fa348db8cebffff0bf","sha256":"693768332318d84caa6191ce9b9c3c2fc3ee221238e88815a4199172f57befd9","sha512":"23f66cf8fd98813e3907a2629d6a533fd196500342f78f52b05c42f01983e3c9ec70a6bf2ee08922400c5237f567bd678ab950b497cb4ce1089876c35092120f","ssdeep":"3072:T1Z2A8LcBEh524Xh0vzVivaMYMcj5abh5A:Tz2A8LcBEh524XyLYoMwUi","tlshash":"dbe32be1777974a247ce3155949b4001b278d8d5a40d007df7a8e8bb2bbac8cd9e3f29","first_seen":"2026-07-16T10:56:30.378294Z","last_seen":"2026-07-17T09:44:02.557278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs?_rsc=5CB68i4pnAekjehf","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.145Z","timestamp":1784281412145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930202\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"63cdbad48c193113af7e7375bb5ee11c\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::plp2p-1784281412149-a8f59e51d6cc\r\ncontent-length: 654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":1913,"mime_type":"text/x-component","magic":"ASCII text","md5":"c757638bc3878a187c762a4ba1950eb2","sha1":"2dd18a0d03d7312f2777405c539b69796ec49b45","sha256":"c0682ec6c5c21ef95c903f22c52193f40d9b5c39a78bf8f015761cda9d9f48ac","sha512":"41bc368117c33d776cf6f6af2e30c6ef5bbea8d2f031537f553beaa74d47816028e12c78ff5362f636cf7604957a6bbf3e9575a2c72af88fccd04cc36c22eb1c","ssdeep":"","tlshash":"b8f07d27880d6d945cf5d4a812ead70a51282b33b0a94d98c4cf8c9107b503e2f8a787","first_seen":"2026-07-16T10:56:30.407057Z","last_seen":"2026-07-17T09:44:02.558503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs?_rsc=Fg8AxZmnih2faHCH","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.187Z","timestamp":1784281412187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs?_rsc=Fg8AxZmnih2faHCH HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /docs/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930202\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"aa4c9841620c030e4fcb7c496f251d56\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs.segments/docs/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp7d7-1784281412191-2fafd7ba3278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3702,"size_decoded":2761,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3532)","md5":"bd97c1a6e1c0f530e143e0849f790135","sha1":"179f799b8530201c3c0ad9a2399384d971d1ff06","sha256":"f96d55314b16c26f9cb7ff60e7b8386dfadcbc6a0e4a642fcaecbde477e851fb","sha512":"d016d916558b206252451e0fc57ee8af5001e090a69b806bb885d3fced05da7225f167ef9c64705ae9c2332713869db04dcc21d26d3ddf4e100eed15a0f1253e","ssdeep":"","tlshash":"ed71117a43193bb93c3a01a1646fdb5b230e043f22251cf656ae6e3903965723a277d6","first_seen":"2026-07-16T10:56:30.404361Z","last_seen":"2026-07-17T09:44:02.559532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/1hovdhcfcl0oy.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.220Z","timestamp":1784281412220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/1hovdhcfcl0oy.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1hovdhcfcl0oy.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"b674ceccda7b7b99bb3696966424f361\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:43 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/1hovdhcfcl0oy.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::plp2p-1784281412225-7a6685780083\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1039,"size_decoded":1806,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1039), with no line terminators","md5":"b674ceccda7b7b99bb3696966424f361","sha1":"4828c38de4164c0d05357ce37136269f6818a40d","sha256":"ffd6c782c7fa519f3f70db970b1eb7759514a4a562eb3895944da9fbc41258de","sha512":"7f645d56ba023d881c76aa47c50f448601b1e0640bdbee5671819e798fa8d56fa579067909504548dac09d49c1a2244a41d129e06c96014498ebcc483f163bf6","ssdeep":"","tlshash":"fd111258a5515a7dea890194303af11db24b75a8c49f08bef0ae5c2043a621874c1fd6","first_seen":"2026-07-16T10:56:30.392444Z","last_seen":"2026-07-17T09:44:02.560724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/231ptdm2k4128.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.252Z","timestamp":1784281412252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/231ptdm2k4128.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14028\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"231ptdm2k4128.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"91946d6416cd5859f0fce4a2c8a12fdd\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:43 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/231ptdm2k4128.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fslh8-1784281412256-95cc5e19dc33\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22030,"size_decoded":8378,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21978), with no line terminators","md5":"91946d6416cd5859f0fce4a2c8a12fdd","sha1":"6a3efb1ce395a9f61b1b462c5801d22a33b050a2","sha256":"7e4b7e3d6a2101f89c82ef2c37bd2250ce10305596f670e511691312cad6f63c","sha512":"09d90d17b2fee3ff671a4ee241a3981462bb707579f43437134d3272e4ffc87fd86baa5dd1e3760bdac2ddb47749f49d92ab15d1c54bcedb7d1e37c49046965a","ssdeep":"384:vtdB3ow+hmE2EhgS0ZSKOuRIHdKIlRsxbl9awUpD2:vXE2tSKSLHvsdlsh2","tlshash":"5aa2c950b192badcae7a01d8946ec008621e2a9ccd1e807df9b87c7d2c9c4d5f957fc9","first_seen":"2026-07-16T10:56:30.384246Z","last_seen":"2026-07-17T09:44:02.561973Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeper-buy-production.up.railway.app/stats","fqdn":"keeper-buy-production.up.railway.app","domain":"keeper-buy-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.418Z","timestamp":1784281412418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: keeper-buy-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nOrigin: https://unstableotc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, x-api-token\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"73-BmRSHjQ/cP/28b0HSn4LiUk4sSA\"\r\nserver: railway-hikari\r\nx-powered-by: Express\r\nx-railway-request-id: XUIcWnyiRy-ccc8CH4GxDA\r\ncontent-length: 115\r\nx-hikari-trace: ams1.b55h\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":115,"size_decoded":528,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9105dbe1e599e5254e801d089ee2ac9d","sha1":"0664521e343f70fff6f1bd074a7e0b894938b120","sha256":"b4689703d86ed1c9ba446f43ab992f5f5b4c5a96b542c54c8fbac36f1edb3999","sha512":"5d85b3023b4fe3930ef73f149754a5fab3ad25a75464f63e54b681d33817b881989914573740465c758a076096f0d0676ddd8d9058f08f52d62be93b2adf5481","ssdeep":"","tlshash":"b8b01204c834af349339e3c200e34ec10c1e3852ddf04620423fd7f088c545630110fa","first_seen":"2026-07-17T09:44:02.562798Z","last_seen":"2026-07-17T09:44:02.562798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keeper-buy-production.up.railway.app/offers","fqdn":"keeper-buy-production.up.railway.app","domain":"keeper-buy-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.420Z","timestamp":1784281412420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /offers HTTP/1.1\r\nHost: keeper-buy-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nOrigin: https://unstableotc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, x-api-token\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"80b-cbLMKskhnqj2KVccQSMTmR7OHiQ\"\r\nserver: railway-hikari\r\nx-powered-by: Express\r\nx-railway-request-id: gHaLqvCCS7CKZDatqmzx2A\r\ncontent-encoding: gzip\r\nx-hikari-trace: ams1.b55h\r\nx-railway-edge: ams1\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2059,"size_decoded":1127,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2783e3dcff771010d66da71b3a2cf1a8","sha1":"71b2cc2ac9219ea8f629571c412313991ece1e24","sha256":"e40eeb1f8c41902b1f9b6b58dfaa195b67f42484254fbe6aea7675283452b15a","sha512":"16ec4a99656506500c39ebb2430fa051384949b2c779bcf3e2b7d17dfbba15ef80ca1d4a7ec7949ad8133e7982ea5d2a9d18b199d1a98db68959e165a6eba8bc","ssdeep":"","tlshash":"1c417b0f967eb1f4db35d6c6d29221aa15973302c9c81ee0e06b24244acd7b5437d9ed","first_seen":"2026-07-17T09:44:02.563718Z","last_seen":"2026-07-17T09:44:02.563718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/fees?_rsc=0N-XNgMVQMFBfC61","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.663Z","timestamp":1784281412663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/fees?_rsc=0N-XNgMVQMFBfC61 HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /docs/fees\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"6b99505b8839d4fcf09fe0148af854ca\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/fees.segments/docs/fees.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::plp2p-1784281412667-c79a414b8825\r\ncontent-length: 445\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":445,"size_decoded":1713,"mime_type":"text/x-component","magic":"ASCII text","md5":"15ae8a1dc0cae2464d1aa413e2499fe4","sha1":"5c01e9e95f55080722cb2c416977dc6fdc6edff3","sha256":"b3c7db0dfae64e25b65c097156987d886f472707ac210be1d37f2b756086173f","sha512":"510c9ccefe23b09755e9d1127ef1e1f88412de828e9f4f781e47759af094fd7de1f71e5dc407ee6ac5c9fc66c60493a6186188cd156491762c5817f52af63132","ssdeep":"","tlshash":"a1f02b174b1cdd292d79c99d56ed432746ee28f7e23534b0d28d9d6d0b41832579d1c0","first_seen":"2026-07-16T10:56:30.390645Z","last_seen":"2026-07-17T09:44:02.564638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/refunds?_rsc=HucwCc9Ik5yuqa64","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.692Z","timestamp":1784281412692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/refunds?_rsc=HucwCc9Ik5yuqa64 HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /docs/refunds/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"074d5c2d01c75e608a6e5d08cdd67bdf\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/refunds.segments/docs/refunds/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::plp2p-1784281412696-f5c80082474f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3062,"size_decoded":2643,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2892)","md5":"4cc27fa2d6dc6742ce47b5a13e77d4f2","sha1":"034e1dd6653e9dbb679b757b74dbf7480e20230c","sha256":"9a15acc08a21cb75b4c7d3d833b30e35dbb1aff3742ccd69512cc0aa74a98b36","sha512":"2f973d0c3a4aab0cc42cdc3af1005252fb268c528d512aaa5bc87f79fe97dd5a6a9d88defbc8f6dd25d536b72606d16777aaf3eec7d73eb817dc9bf5d6500ee2","ssdeep":"","tlshash":"7651967a43083bb93c7b01d5156fd76b731e423f62250cf29aad4d2053a627639677c2","first_seen":"2026-07-16T10:56:30.393322Z","last_seen":"2026-07-17T09:44:02.5655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3bqfq9_4ylkkq.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.847Z","timestamp":1784281411847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/3bqfq9_4ylkkq.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3bqfq9_4ylkkq.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"bd426a032757b87c131862e6050976fd\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/3bqfq9_4ylkkq.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fslh8-1784281411851-4bbc55bab954\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40556,"size_decoded":15319,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40543), with no line terminators","md5":"bd426a032757b87c131862e6050976fd","sha1":"903c5321b18830d907de8a4b89a740a923e313d0","sha256":"63d45b9f656bafb6f2a5650c4cc46d877d4127c5941415be19dd0726104c6617","sha512":"998cb40b10debd4d76dbf1498253e5d9676998caff14cc66ba6e19d3f390af96c405059cddae1a6cc1af72865fb28a104b06c03b53cf14d75da1f9b5844a72d5","ssdeep":"768:6wkr7HZjLzhPjIM/R29UjJFylgAZCYK6rKSd06:Or7HthsMZNylgAZCYK6dj","tlshash":"f1031be47352b17a5b8b0049943d4009f23919dda40e403cb7a45cfaa47a6c6ebf7fb6","first_seen":"2026-07-16T10:56:30.414726Z","last_seen":"2026-07-17T09:44:02.566395Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0nxs-6nh3ti-o.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.253Z","timestamp":1784281412253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/0nxs-6nh3ti-o.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14028\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0nxs-6nh3ti-o.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"814ec35236eee5eee4f75add0c138220\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:43 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/0nxs-6nh3ti-o.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7dcww-1784281412258-c516260d3e8c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148059,"size_decoded":46556,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"814ec35236eee5eee4f75add0c138220","sha1":"5ef2e82356d4ec49be53dacae2779b4e3fee6862","sha256":"b10ef95c5537fae325cd602b6160297d529a513fdb913d0076bf8f0f128214d1","sha512":"b00ad057c57837bf6dac1aa0b366b5e12adbb19dd7d1462b9d39e60db321494247a31a5735dfd29cda1eef73942ad92c8f9904a93583c0e21fb32bcb8f5ecce6","ssdeep":"3072:MUs8Lcs6Eh524Xh0vzJivaM6C11j5ablbE:Zs8Lc3Eh524XyLUKC1ZGbE","tlshash":"02e32be1777974a247ce3155949b4001b278d8d5a40d007df7a8e8bb2bbac8cd9e3f29","first_seen":"2026-07-16T10:56:30.406127Z","last_seen":"2026-07-17T09:44:02.56728Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/refunds?_rsc=5CB68i4pnAekjehf","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.632Z","timestamp":1784281412632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/refunds?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930203\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"6be78acd1e03b55e04607a1996191e7a\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/refunds.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4kvlw-1784281412637-c9269fef2b58\r\ncontent-length: 725\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":725,"size_decoded":1992,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (328)","md5":"903b1c83648869efee4f7d13a1525131","sha1":"ca2594a0e8bbd25ca761fe73138539d036edae00","sha256":"a590f7df2915dbd878b932d12a9ef236e8d19915672b06811634b402194bdc52","sha512":"e69b8156c528459d86fb08c6729ceac6b4abd2558893f760d60338dbc9061d325b319ca0b416d6f7bcba1e7b83cadd32a401cd88ed95f0caa629e0f670d94441","ssdeep":"","tlshash":"41019e77480d6dc45cf4d4a816aaeb0e51392a3370b94d98c8cf8c9007b503e2f8b787","first_seen":"2026-07-16T10:56:30.388924Z","last_seen":"2026-07-17T09:44:02.568147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/fees?_rsc=njoP05FFdJgBMnW_","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.664Z","timestamp":1784281412664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/fees?_rsc=njoP05FFdJgBMnW_ HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /docs/fees/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"34da86ae890fa07d6036c722e1575b38\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/fees.segments/docs/fees/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sttp7-1784281412668-bd63860b3f2c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3894,"size_decoded":2492,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3725)","md5":"a495a714ba248db3c7ba790606aee39f","sha1":"a495c1888955a6cfbcda680e6de92f8c9feaae45","sha256":"d0b6584431e65f07b4dee05d4228c427ad6b4035e7231f766c9ab9383b20decb","sha512":"5cf3124756334f242a59d0e9d282bb460537975e416df608425191b33322b058fecc10f187f8e09749849b8d872170d3a7c7fe8fa8f207bff2bfa823250da4c4","ssdeep":"","tlshash":"3381af3e13196bad3d6b009190afc35f260e053f52aa5df696ee6d34039613a7e233c1","first_seen":"2026-07-16T10:56:30.407964Z","last_seen":"2026-07-17T09:44:02.568895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/refunds?_rsc=pJhWmfGHFF9iJumV","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.691Z","timestamp":1784281412691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/refunds?_rsc=pJhWmfGHFF9iJumV HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /docs/refunds\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"44d5f0695fe7c525d40f5306ed2872d3\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/refunds.segments/docs/refunds.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f5vg7-1784281412695-069f35da4f56\r\ncontent-length: 445\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":445,"size_decoded":1719,"mime_type":"text/x-component","magic":"ASCII text","md5":"15ae8a1dc0cae2464d1aa413e2499fe4","sha1":"5c01e9e95f55080722cb2c416977dc6fdc6edff3","sha256":"b3c7db0dfae64e25b65c097156987d886f472707ac210be1d37f2b756086173f","sha512":"510c9ccefe23b09755e9d1127ef1e1f88412de828e9f4f781e47759af094fd7de1f71e5dc407ee6ac5c9fc66c60493a6186188cd156491762c5817f52af63132","ssdeep":"","tlshash":"a1f02b174b1cdd292d79c99d56ed432746ee28f7e23534b0d28d9d6d0b41832579d1c0","first_seen":"2026-07-16T10:56:30.390645Z","last_seen":"2026-07-17T09:44:02.564638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeper-buy-production.up.railway.app/offers","fqdn":"keeper-buy-production.up.railway.app","domain":"keeper-buy-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:40.818Z","timestamp":1784281420818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /offers HTTP/1.1\r\nHost: keeper-buy-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nOrigin: https://unstableotc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, x-api-token\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:40 GMT\r\netag: W/\"80b-cbLMKskhnqj2KVccQSMTmR7OHiQ\"\r\nserver: railway-hikari\r\nx-powered-by: Express\r\nx-railway-request-id: 04VQyJx4SEW-ZrFMO8poTA\r\ncontent-encoding: gzip\r\nx-hikari-trace: ams1.b55h\r\nx-railway-edge: ams1\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2059,"size_decoded":1127,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2783e3dcff771010d66da71b3a2cf1a8","sha1":"71b2cc2ac9219ea8f629571c412313991ece1e24","sha256":"e40eeb1f8c41902b1f9b6b58dfaa195b67f42484254fbe6aea7675283452b15a","sha512":"16ec4a99656506500c39ebb2430fa051384949b2c779bcf3e2b7d17dfbba15ef80ca1d4a7ec7949ad8133e7982ea5d2a9d18b199d1a98db68959e165a6eba8bc","ssdeep":"","tlshash":"1c417b0f967eb1f4db35d6c6d29221aa15973302c9c81ee0e06b24244acd7b5437d9ed","first_seen":"2026-07-17T09:44:02.563718Z","last_seen":"2026-07-17T09:44:02.563718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/?_rsc=8nTjltbQWvg6NcbE","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.181Z","timestamp":1784281412181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /?_rsc=8nTjltbQWvg6NcbE HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930201\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"bd8ed07781e3c80c67c7d742a559c932\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /index.segments/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp7d7-1784281412186-90b8d4717d9d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1365,"size_decoded":1794,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (685)","md5":"8c693002662cf8c0cf32acec4d36dabc","sha1":"20dc9024180a75605917a3decfd7b727b5bf13cf","sha256":"d6c55ff757a169a5c4a03729c9730644a5b9296e1526be0b60b25fa7c86b2879","sha512":"81ae938f947ac55111c62e0f9d25608eb82154873ff0b4870456239c7be7c847689f2153f313a9b2c40838d4f2b4aea2c514c8d52fcbd75f91f8368481a0f4cf","ssdeep":"","tlshash":"da21771bcd1ded994ca5cc5d296f9b2391ad4877c535dc5cd2cedcf802089a22b88082","first_seen":"2026-07-16T10:56:30.383267Z","last_seen":"2026-07-17T09:44:02.569676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:43:31.354Z","timestamp":1784281411354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930169\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"3b58d16d8e260186dac50dc85ebccf2e\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281411450-747f84aea590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22557,"size_decoded":6676,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22525), with no line terminators","md5":"f810bd31717c2de016fe365802a27788","sha1":"8f980898bce6a425f78cc9e6c939abe127934e6a","sha256":"9dae5de84d53284fd745273f6927afb8b94137a1304bcfd5659e0b30ce91c06e","sha512":"bb8acba3d35cd4b10d61e6a7dfbfe5bd570743a3d97669a4480e9b9a942d38234c597e2c330c62dddccfcdd292d828550895902a8ca7cdffaef2130ed86c2637","ssdeep":"384:btgCfGOf8c68oUtLioJ4khpgyU2CcbpzdnX+tm53a:btgCfGOf8c68oUt+oJ1hpgyU2CcLnutJ","tlshash":"81a2b537b904ed1e9c279d6c213ebe3a50cd85bbc228dc3de29cc96505829791be6dc1","first_seen":"2026-07-16T10:56:30.39613Z","last_seen":"2026-07-17T09:44:02.570475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":52,"connect":6,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3dmx-bf8iaepd.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.841Z","timestamp":1784281411841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/3dmx-bf8iaepd.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31797\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3dmx-bf8iaepd.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"54d8ca14a283a82fbd0812c28cebb391\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/3dmx-bf8iaepd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nxgc-1784281411845-d3eddcf2b6e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194635,"size_decoded":51376,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54d8ca14a283a82fbd0812c28cebb391","sha1":"0ca499575a0c9a6b71f288e10fd6842a857729b1","sha256":"871662ccac5e0011dcd079767d717257119ae80a0f5859a167b2692096aefe1c","sha512":"3c3ceaedd14c5d1c6cf9ca11f22fdf851ebba84158afb4993c0286bad4109709211125ad81b5b93ca6418032951ca75db396c4010ea79cc3c8bc4252c3ea3e95","ssdeep":"3072:zgKSnY6skJwFFpPy0b6OCmChEpQEsn+PA06ptvlks:zgKSnY6sk+LpJb6OCbhUYn+mptvlks","tlshash":"141407f932d5f98207a740a6c03f1007f22c4d76249d6860e3e5dcda756859de2b3faa","first_seen":"2026-07-16T10:56:30.377282Z","last_seen":"2026-07-17T09:44:02.571918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/0yihj6bc2uwyv.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.842Z","timestamp":1784281411842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/0yihj6bc2uwyv.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31797\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0yihj6bc2uwyv.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"71a2b98c154b80896e05d80e4e6f2243\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/0yihj6bc2uwyv.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281411846-41b08dd2d485\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227533,"size_decoded":73412,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71a2b98c154b80896e05d80e4e6f2243","sha1":"62434d9606676b6c3cc146b3fcb3692adc7458f6","sha256":"fa7a735527b04ee3de824aaf21c8475222f06b7213fdac3e9b248a5f94f4c535","sha512":"c6300e682839ec42e3e59a817533b471bd7ed7b628d2837ac3badc2c53c8c5f8fb61648a279a5ded982ede36430347742b22183e61424fdd0b28a6701241d8ed","ssdeep":"3072:pmLtyvMDoFaY7470EE8tjGo8L2bWOO2ZJ/XegMAQgDn+hviNT:pmLtEOoFaYUi8Dv/u0rDn+hviNT","tlshash":"7424fbe83995f6626ab302b710af1403b338252b280d4d60a351fd9db57845fb17bf9e","first_seen":"2026-07-16T10:56:30.387381Z","last_seen":"2026-07-17T09:44:02.573675Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/1mprs3sk3oc1t.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.855Z","timestamp":1784281411855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/1mprs3sk3oc1t.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1mprs3sk3oc1t.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"7dde87309e502c95845dc160feb8f4f3\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/1mprs3sk3oc1t.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281411859-741795b8b0c0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100232,"size_decoded":29395,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27315)","md5":"7dde87309e502c95845dc160feb8f4f3","sha1":"3ddda4e7a43146dc0de1162034e6029db0629a8e","sha256":"3850c8cb95c920cd9719c91bc434ae104faac4d1c60cb733ff6c81a9705e3db6","sha512":"093e80e857fc946f882cc44fec1432f515da11f0f039e494cd3166c7d9e3e1792547a65ae3ae38755ae14ee68741f03c0f08c3fc2f2bcbba27b6179932639479","ssdeep":"1536:xEnvty/atFR0f0oUaftx+z5QiOq/LxWc5VpVT5zb4U:s4tx+itAj","tlshash":"dfa3d7b5771475eaced29594145b3010b17af8a3a09c005972acf8b32fbecd889eef14","first_seen":"2026-07-16T10:56:30.379499Z","last_seen":"2026-07-17T09:44:02.576978Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/orders?_rsc=h26M83JJaqpI807U","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.222Z","timestamp":1784281412222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /orders?_rsc=h26M83JJaqpI807U HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /orders\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 930202\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: \"b0d43dbbfec2b03ef36ebe0ae4910a03\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /orders.segments/orders.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fslh8-1784281412226-a78e915a1d31\r\ncontent-length: 445\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":445,"size_decoded":1707,"mime_type":"text/x-component","magic":"ASCII text","md5":"15ae8a1dc0cae2464d1aa413e2499fe4","sha1":"5c01e9e95f55080722cb2c416977dc6fdc6edff3","sha256":"b3c7db0dfae64e25b65c097156987d886f472707ac210be1d37f2b756086173f","sha512":"510c9ccefe23b09755e9d1127ef1e1f88412de828e9f4f781e47759af094fd7de1f71e5dc407ee6ac5c9fc66c60493a6186188cd156491762c5817f52af63132","ssdeep":"","tlshash":"a1f02b174b1cdd292d79c99d56ed432746ee28f7e23534b0d28d9d6d0b41832579d1c0","first_seen":"2026-07-16T10:56:30.390645Z","last_seen":"2026-07-17T09:44:02.564638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/fees?_rsc=7h4NYy5eoyMcNlUN","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.660Z","timestamp":1784281412660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/fees?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"520b02a07d37a073fc284f84957784a4\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/fees.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rlbjq-1784281412665-1610980b4460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2800,"size_decoded":2130,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2419)","md5":"8d2099eb87c23c6beb7cdf3d7af90682","sha1":"9ac7302b3dc2c6f821058f14773f696042e06891","sha256":"c7b2242e63240eca0acc80bb2eb583ab4f6a678e35dd4ad652fad9db4ff8dfc4","sha512":"b611407bdc604519442d1dcb42c1a68d7454b4c9169264163d31553f28dfb180e162fb7d4f5b156e0bf58fa61d69469f7a9e711911e62fc007bae93cac784283","ssdeep":"","tlshash":"6851d07fdb10dc7eabe78595188f7306229c0377d7285c7bd44c8d1906c6a2a2db43a2","first_seen":"2026-07-16T10:56:30.39429Z","last_seen":"2026-07-17T09:44:02.588587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeper-buy-production.up.railway.app/offers","fqdn":"keeper-buy-production.up.railway.app","domain":"keeper-buy-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:48.958Z","timestamp":1784281428958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /offers HTTP/1.1\r\nHost: keeper-buy-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nOrigin: https://unstableotc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, x-api-token\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\netag: W/\"80b-cbLMKskhnqj2KVccQSMTmR7OHiQ\"\r\nserver: railway-hikari\r\nx-powered-by: Express\r\nx-railway-request-id: 6JZwxMDtSYeNOWTcqmzx2A\r\ncontent-encoding: gzip\r\nx-hikari-trace: ams1.b55h\r\nx-railway-edge: ams1\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2059,"size_decoded":1127,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2783e3dcff771010d66da71b3a2cf1a8","sha1":"71b2cc2ac9219ea8f629571c412313991ece1e24","sha256":"e40eeb1f8c41902b1f9b6b58dfaa195b67f42484254fbe6aea7675283452b15a","sha512":"16ec4a99656506500c39ebb2430fa051384949b2c779bcf3e2b7d17dfbba15ef80ca1d4a7ec7949ad8133e7982ea5d2a9d18b199d1a98db68959e165a6eba8bc","ssdeep":"","tlshash":"1c417b0f967eb1f4db35d6c6d29221aa15973302c9c81ee0e06b24244acd7b5437d9ed","first_seen":"2026-07-17T09:44:02.563718Z","last_seen":"2026-07-17T09:44:02.563718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/?_rsc=7h4NYy5eoyMcNlUN","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.147Z","timestamp":1784281412147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930201\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"726af351290843e35459d624123d68aa\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /index.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281412151-1208607c2379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2803,"size_decoded":2134,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2422)","md5":"997aeed656e2f85818d176b6642e6f59","sha1":"51a5fcaa9a5579d726b0c064912754a80460d710","sha256":"ab35bf34e2b8fd0c46013d160e5213161bf45db6980a11ec50eb3d7dad49d649","sha512":"7b338d41f7bd45961ec8ae53ea3d9ec7558e03c5d933e27be5645e52937a30b5da60e64f7936c5e57d3180bc5dc2e42a3ffb3c6c122464139c89bc14bcd33c87","ssdeep":"","tlshash":"0851acbbdb10dc7eabaa8595184f7306128c037bd3685d7bd50c8d1906cab2a2d753b3","first_seen":"2026-07-16T10:56:30.382232Z","last_seen":"2026-07-17T09:44:02.527539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/?_rsc=yIp22O3xgPPxC28X","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.148Z","timestamp":1784281412148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /?_rsc=yIp22O3xgPPxC28X HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930169\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"471f46965bbfda87248494e3d945508c\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /index.segments/_index.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nxgc-1784281412152-f79f3fa6758b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5663,"size_decoded":3392,"mime_type":"text/x-component","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4624)","md5":"44e1a39028c2bfe76281befe45083d36","sha1":"eccf2ba1e73974d274a45e7790a0292f1bedcf09","sha256":"dcc34e44f60313580b685ae1c29ae0886d9a666d436eabc9a98373821c0b7bfc","sha512":"cd48b2d7a43363d99c2af1fda1805605b82cb6c4bcada50ca38e3a9a60f03d23533827634ce6841801d9131b9af1be45ee9f91f86c450b225c28d198ec8fc5b2","ssdeep":"96:xbfm1rX974CEFntHbbaG2fUHDAz/kM/V6mH/dWp4EUGEqV3NKQNiuni1XTRwM:xbfm1rX9VEFnt7baLIAz/HN6mHcpNUGu","tlshash":"fbc10c3ad70aed7d2c6b8488346fd32a625d453b96349d7dd6adae3803551313f832c0","first_seen":"2026-07-16T10:56:30.40005Z","last_seen":"2026-07-17T09:44:02.59874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs?_rsc=7h4NYy5eoyMcNlUN","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.182Z","timestamp":1784281412182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930202\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"3f6851009185395b52d67f3ca21c5ced\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dfhf-1784281412193-9368d4cec827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2791,"size_decoded":2126,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2410)","md5":"f7f5522e8aac362bbccdcadf9fef11aa","sha1":"8093ad092f57f9fcfe310999a2a24d33639ed699","sha256":"8e6e7720497c7a9b2e768dda126f80fcd057a7a03796d46980a11ad1e64a6d7e","sha512":"0bbfd3d0928ffdb7b09d3c0419121c6b15c5b5ebef89efc381f4e64678fd5c487e3b148905dd773c6c652f9238dc667f6ecfe0de3b591a565f69112f401ccf69","ssdeep":"","tlshash":"9351df7fdb14dc7e6baa8595184f7307128d0377d3285c6bd40ccd290ac6a2a2db43a2","first_seen":"2026-07-16T10:56:30.413909Z","last_seen":"2026-07-17T09:44:02.599994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/2bdo8tnu8r3q7.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.851Z","timestamp":1784281411851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/2bdo8tnu8r3q7.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2bdo8tnu8r3q7.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"8820e764a6a120bb17346bcc04a8a64e\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/2bdo8tnu8r3q7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2vfls-1784281411855-76d65e27c244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28086,"size_decoded":10034,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28055), with no line terminators","md5":"8820e764a6a120bb17346bcc04a8a64e","sha1":"943c85ce8687ff4ee242506d11369bd0329eeed4","sha256":"683b7ef46e4d7cbc9736bf2ff2480eb6791601335bfb046386f80473ac74a15a","sha512":"c47530a997ca8bd0476c1746584d25fc843201958e9923e1f3b11ce06134a98b45d240166434ac16daaa83324e13a836382676b47f252b8d9635dbae23820010","ssdeep":"384:kwOjUwzwXTvFQh7lR3xWK97G99uzCCwD7PHsQ:kwOjULQh7hP7GqCCwD7Z","tlshash":"3fc27610e055bfecad6b05d864aec50c621e3a8cce1e8475f9b83c652ec95d4ba43fc9","first_seen":"2026-07-16T10:56:30.399136Z","last_seen":"2026-07-17T09:44:02.600852Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/01lwmn2qmmuv4.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.261Z","timestamp":1784281412261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/01lwmn2qmmuv4.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14028\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"01lwmn2qmmuv4.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"3cc072fd0b744c769a0d4847ccaac190\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:43 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/01lwmn2qmmuv4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6gbv-1784281412265-fff1fdcd49cc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100232,"size_decoded":29388,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32420)","md5":"3cc072fd0b744c769a0d4847ccaac190","sha1":"e4c84eba17e2dfcd80e261abdd147da2de66fca4","sha256":"f0728c50db00be20f9c22ad14ca7b2d7590ab23d52c69bacdcc6f770d1229626","sha512":"7938a392f6d1d7051df05a6ecdff53fb9fe0d1f5c7c3143043cad0fdee1883f418c4b28dbc837312647c70588d01e944d2070b12f16205deb9e6adab94cf0a90","ssdeep":"1536:xEnvty/atFRbf0oUY5QiOq/LxWzftx+d5VpVT5zb4U:z/tDtx+Dj","tlshash":"c8a3d7b5771475eaced29594145b3010b17af8a3a09c005972acf8b32fbecd889eef14","first_seen":"2026-07-16T10:56:30.409005Z","last_seen":"2026-07-17T09:44:02.601779Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs/refunds?_rsc=7h4NYy5eoyMcNlUN","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.666Z","timestamp":1784281412666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs/refunds?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930165\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"791ef98e6329498b79052f951f2ac4a9\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs/refunds.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f5vg7-1784281412670-9108c7e0e6b4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2803,"size_decoded":2134,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2422)","md5":"c284ff2a4481cde443553feb3c4e7c7d","sha1":"bd12ccdfd93ab1e1ec67d2af36f71e63a2688c9b","sha256":"ef263ff8ce71efbe25c3979d45371f827689c8dfa1004e306cde3b02323f6dfd","sha512":"92fa1271041b46215897d1683cc3241d3d5680cff9f5c2e1f1f25f3a740df1862fa2537c0992cd504787ae5e7cc5021f9efd093dddbe13edde040a1b9656b7c9","ssdeep":"","tlshash":"7d51acbfdb14dc7e6beb8595184f7306128c0377d3685c7bd50c8d2906c6a6a2d743a2","first_seen":"2026-07-16T10:56:30.413104Z","last_seen":"2026-07-17T09:44:02.60266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/media/017d9bea37084d9b-s.p.41rroleoq1br7.woff2","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.832Z","timestamp":1784281411832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/media/017d9bea37084d9b-s.p.41rroleoq1br7.woff2 HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 31798\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"017d9bea37084d9b-s.p.41rroleoq1br7.woff2\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: font/woff2\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: \"b7df97614c8e4bd077a00d424ba42b1d\"\r\nlast-modified: Fri, 17 Jul 2026 00:53:33 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/017d9bea37084d9b-s.p.41rroleoq1br7.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7dcww-1784281411837-600f5bda9938\r\ncontent-length: 41236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41236,"size_decoded":42457,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41236, version 1.0","md5":"b7df97614c8e4bd077a00d424ba42b1d","sha1":"d93212d649ac739c237fe884369a6a3ef1fbb836","sha256":"4fd48b2c1ab27220e71f15f990550261b35245c3bdfd8d8025b4bdac0459ee2d","sha512":"8ea9cd07aac70a68da6ab81c20245140f778e1473fcf663c9bb47316106355772db6e74c6281de7a0a86799e8eea6296777865ea055ca72238aa5a3b51d510d2","ssdeep":"768:B/B2sQ+w4S9yyanhBwMkMjc78xBw3TatK4ItH7OTUuJ1K0EiynFYvsH:BJ2s/g9yn/wMk4VKDQXUuJ1K0EiynGi","tlshash":"3b03f2856c3cde89c1c9e6b32a678422d3f2187e074a772596a95e0cd8b21d1c5426f7","first_seen":"2025-03-28T12:26:48.573553Z","last_seen":"2026-07-17T20:38:28.528103Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/_next/static/chunks/3lqvqxd7wxwe7.js","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:31.848Z","timestamp":1784281411848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /_next/static/chunks/3lqvqxd7wxwe7.js HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 14029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3lqvqxd7wxwe7.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:31 GMT\r\netag: W/\"f9f92f2c26b819db51ca0ae64bfa296a\"\r\nlast-modified: Fri, 17 Jul 2026 05:49:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/3lqvqxd7wxwe7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fmzzm-1784281411852-cc1415310fde\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67910,"size_decoded":22663,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f9f92f2c26b819db51ca0ae64bfa296a","sha1":"b8f573d0746b8c158d624685ae46772659462605","sha256":"3eb8ac7edee44614ed3da8f81cdffe2d80ec6dc0a91326f4f768d5176c7400b9","sha512":"b35663452e27b16cb1332fecdfec6bff979334877fcf75a9be221f5783afb7045a78224ccc356a616ea6d68dd8e97d781f5932b4a4afa8663dd3772ced4cf8eb","ssdeep":"1536:k/ITX3U2jq6bhg2s/l5f4veH290srqRdv3j:k/ITHZgfl5f4+29rqLT","tlshash":"43631aa67315746b66d7c0c9942a0004d2342961241e442c3ab9adf7b9b3dcaf5fff35","first_seen":"2026-07-16T10:56:30.411472Z","last_seen":"2026-07-17T09:44:02.604537Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unstableotc.com/docs?_rsc=3eqErdnzE3xIvvRG","fqdn":"unstableotc.com","domain":"unstableotc.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:32.186Z","timestamp":1784281412186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.unstableotc.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:49 GMT","end":"Sat, 03 Oct 2026 15:01:48 GMT"},"fingerprint":{"sha1":"E1:76:84:21:5E:B9:3C:85:CB:A7:8C:C6:8A:3A:CA:6F:6D:10:B7:3A","sha256":"7C:48:90:62:C5:CD:93:61:88:37:4E:8C:A5:A9:BE:77:38:28:FF:46:BC:DF:A0:50:63:61:2E:C4:BD:E7:DA:3D"}}},"request":{"raw":"GET /docs?_rsc=3eqErdnzE3xIvvRG HTTP/1.1\r\nHost: unstableotc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /docs\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 930202\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://keeper-buy-production.up.railway.app https://keeper-sell-production.up.railway.app https://5042.rpc.thirdweb.com; upgrade-insecure-requests\r\ncontent-type: text/x-component\r\ndate: Fri, 17 Jul 2026 09:43:32 GMT\r\netag: W/\"5201602303081e0347d5ac16121172a8\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /docs.segments/docs.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::plp2p-1784281412190-e67bb5ba1acb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1043,"size_decoded":1739,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (592)","md5":"5a01638f5bcc1fffc36345124909bb27","sha1":"12153e1cbb1e817326e722ab086255b3b8370cb5","sha256":"580a4edd627ab3f25d04e3f44496c924ea0e043102f2b6579eed6f6923d961a1","sha512":"8ef1c3b9ba1a4bb1c06cce483815a39af1909a29fc6f444cb61ae33a548888329a755a44ec04ada99925012a02e140219ff14bf0add23c02652d575709b18232","ssdeep":"","tlshash":"d411a81bd629ed6d2c3ac84c285fd327519c88b785358c6de2ad9d7803420312b8a1c0","first_seen":"2026-07-16T10:56:30.403534Z","last_seen":"2026-07-17T09:44:02.60536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"unstableotc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keeper-buy-production.up.railway.app/health","fqdn":"keeper-buy-production.up.railway.app","domain":"keeper-buy-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.38","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unstableotc.com/","date":"2026-07-17T09:43:47.370Z","timestamp":1784281427370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /health HTTP/1.1\r\nHost: keeper-buy-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unstableotc.com/\r\nOrigin: https://unstableotc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, x-api-token\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:43:47 GMT\r\netag: W/\"8b-0NkTE2Zm3eSEj26tYu3412wGWMs\"\r\nserver: railway-hikari\r\nx-powered-by: Express\r\nx-railway-request-id: jdvbO2GTS9K9_oAOozsQ6Q\r\ncontent-length: 139\r\nx-hikari-trace: ams1.b55h\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":139,"size_decoded":552,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2404a53af11bceb708c83720837030c4","sha1":"d0d913136666dde4848f6ead62edf8d76c0658cb","sha256":"9b01d586e6bc24e56c7435a18c911e61f2e2a35b8a32917fbb83eae5a22a473d","sha512":"e7f0b9cd8ea7ad3f13454a90b86031a36f8cbd13990fd010357644577f70c905660a033590ed44d609b1d36fb74ecfce2a1383231b9eb2c9c44e592ca6272d2f","ssdeep":"","tlshash":"a4c04c87255990788d144227850cd621692b46120d60992e989faa00553d5de7555e4b","first_seen":"2026-07-16T10:56:30.39151Z","last_seen":"2026-07-17T09:44:02.530304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
