{"report_id":"f9b24ecf-2d85-4c8e-a7d4-7275fba749f8","version":6,"status":"done","tags":[],"date":"2026-02-13T21:50:40Z","url":{"schema":"https","addr":"blindfoldfinance.net/","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"172.67.135.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"blindfoldfinance.net/","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"title":"Blindfold Fi - Instant, Private Crypto Spending","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"blindfoldfinance.net/","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"172.67.135.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T21:50:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"www.blindfoldfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.blindfoldfinance.com","ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2026-02-13T21:50:42.198548Z","last_seen":"2026-02-13T21:50:42.198548Z","alert_count":1,"request_count":1,"received_data":56732,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"blindfoldfinance.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-28","domain_rank":0,"first_seen":"2026-02-13T01:20:25.029396Z","last_seen":"2026-02-13T01:20:25.029396Z","alert_count":22,"request_count":22,"received_data":4968585,"sent_data":10549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blindfoldfinance.net/","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52f47701b53154ceba806a52d65d09ab","sha1":"1fce51df2e2eb3311bf3af84bbd5bf2a1343dccf","sha256":"64272dfd6206db5222ef88bb07f3e2e8b464c6d2c3d86755c2a671ffe7548e25","sha512":"71f676dc1d6bb1a307e7ef27c0114f03b0ad09f885a35d069766128b8a3209ffcd70c17516d16226ab266ba03cca7136bf9ccc0a9373479487c8610bdd0068b8","ssdeep":"6144:W/0kIofh8MWw51MQ437duluF4lMNltFb9uhvZoCzgcx9rha:WX/faMWw51MQ437duluF4lMNltFcprha","tlshash":"858402984583365f826079d1963f7185c4c6296f4f883aa9ae18933ff0e875321f7be1","size":405143,"data":"","first_seen":"2026-01-02T16:39:48.577752Z","last_seen":"2026-02-14T09:55:59.07005Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/compression.next.umd.js","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b6a8ce5dd9c857e6cf8f42f9acb4d7d","sha1":"fa56741062094322241608e64d0b49b8c29968af","sha256":"d332b238e3a60da088752de2f5a14b50f1a70dd05c664f866dd28c510e7d1c7a","sha512":"8e9df208c28e8ce6043508ea4bea4b58c55f951f0325e962b19e275832e95a102957d980e0b1b25a51a0c493fd579250134cde80a80e7c1d51705039a7809e8d","ssdeep":"12288:6RmcTqMc85nMQ437TulwF4lMNltFmJL9Y:6eMc85DJL2","tlshash":"899423994583364f426079d1963f7185c4c6296f0f883a9daa18937ff0e8b5321f7be2","size":412131,"data":"","first_seen":"2026-01-02T16:39:48.453815Z","last_seen":"2026-02-14T09:55:59.069454Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fredux-form.modern.cjs.js%3Ft%3D29516990%26u%3DN8B_HsAkZjjbQ6ySGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZEUxa5bWysckaib9WA","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blindfoldfinance.net/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cg%2BBuVuxiWZWzdwj3hB2VEtbfmfP%2BFZ%2Fl8ZBTKrgUny6btTfnMhMzjHwrrvzOa2ImXFieR4MhxwA%2BbNXLV1RrZ%2FuotF%2B5q49c8GOV9YDrg0GmV92\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a48dc433e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-07T14:06:42.95309Z","times_seen":25951,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/BLINDFOLD-favicon.png","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:14.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /BLINDFOLD-favicon.png HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 56207\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-db8f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 73457\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdTPaHSML9edWR%2Ff2gjRiN03BVvi%2FJWIqltpp5vH%2F1a%2BJMyTDmOFpX03XrkyPOEDxzr1D6uMLR4N61G95Zfujmkia4qnG9Rb02getMwrCbcSDJC0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a4b693c3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"caa4964142a584e634044a66bdea6d90","sha1":"b8a1dd3fbea25759c6b59c5ad52886a1b633baea","sha256":"e2be0f2d76f214be8a463b10a4bfcad4e66f7b830957c81ff542ec7a32b3fb1a","sha512":"3e23fe8f412bb53369c7f1f2d367033231ab1122c925b46d0e40727dcec49af37c9b753a4d0ddfa757c9ef80e6f88fb612bc11bb442410a2d756271bb0c93de7","ssdeep":"1536:SBGsJIJYLEqeuv8GzKMZnj07mb1o7Qg6loceomq/HofMq:tzJ+Res2iYQ/oceomgS","tlshash":"c543f1ac2391e2d269e6505a7c9fd1df8f32f13f5943a9109beb689721354d03e8c18e","first_seen":"2026-02-13T01:20:29.94968Z","last_seen":"2026-02-13T21:50:44.683273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blindfoldfinance.com/BLINDFOLD-favicon.png","fqdn":"www.blindfoldfinance.com","domain":"blindfoldfinance.com","tld":"com"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:14.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blindfoldfinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 19:57:48 GMT","end":"Tue, 17 Mar 2026 19:57:47 GMT"},"fingerprint":{"sha1":"AD:62:5F:2F:03:A1:CF:CF:0B:A2:FF:40:5C:32:70:E7:E3:0A:94:49","sha256":"0A:EE:D0:1F:FE:F2:BE:DF:F9:43:C1:EB:00:44:B8:82:C1:67:08:C0:02:FF:DF:A6:57:65:21:91:59:DB:51:0A"}}},"request":{"raw":"GET /BLINDFOLD-favicon.png HTTP/1.1\r\nHost: www.blindfoldfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18197\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"BLINDFOLD-favicon.png\"\r\ncontent-type: image/png\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\netag: \"caa4964142a584e634044a66bdea6d90\"\r\nlast-modified: Fri, 13 Feb 2026 16:46:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vr56j-1771019414418-7be9348499d5\r\ncontent-length: 56207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"caa4964142a584e634044a66bdea6d90","sha1":"b8a1dd3fbea25759c6b59c5ad52886a1b633baea","sha256":"e2be0f2d76f214be8a463b10a4bfcad4e66f7b830957c81ff542ec7a32b3fb1a","sha512":"3e23fe8f412bb53369c7f1f2d367033231ab1122c925b46d0e40727dcec49af37c9b753a4d0ddfa757c9ef80e6f88fb612bc11bb442410a2d756271bb0c93de7","ssdeep":"1536:SBGsJIJYLEqeuv8GzKMZnj07mb1o7Qg6loceomq/HofMq:tzJ+Res2iYQ/oceomgS","tlshash":"c543f1ac2391e2d269e6505a7c9fd1df8f32f13f5943a9109beb689721354d03e8c18e","first_seen":"2026-02-13T01:20:29.94968Z","last_seen":"2026-02-13T21:50:44.683273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":69,"connect":1,"send":0,"wait":24,"receive":3,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"www.blindfoldfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T21:50:13.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQiqBP3dKJUV0lMQL7spx0IQ1o5Wm4a%2B7bSJPFtpoy4I7SqjIAkp2FMmo9KiCCcHxbAxSgeaw0G5sKX29wQ7GgT5qJActLcIfowaRiTMeInHVU1A\"}]}\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd78a43f81b7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295525,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4338)","md5":"4cd75a671d5dbf5381e181d37ffa4f83","sha1":"5bb2689227ee9f4f2d340f77a208eba9302791f5","sha256":"9a4d5162f1103f1899f84d84189a7baaa08c84e108d52562bab5d1500fc3d149","sha512":"67d7d3df81f0b31dbb8b8c80cf82a71ffab81a09ff6586291b63544342716693ee086adbdaf94afcadd11367673a50117198ad646c5066bf7cd621c44108bad7","ssdeep":"1536:sVnF6xuJVHU9xnj9JWPNmMzFxXEUNU5qc4wXeTOtm91SUFA6b+7CxjMKOel6419Q:s6IVHHNmMzb1yRWDuLdBV","tlshash":"8d54843861f1003e2c9392e1abe5ab6ebf6de243da1f8958b79d02905fc6dd5cc47214","first_seen":"2026-02-13T01:20:29.964044Z","last_seen":"2026-02-13T21:50:44.690189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":72,"dns":39,"connect":8,"send":0,"wait":28,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/css2.css","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: W/\"6950afb8-4558\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkmtGECek7hj6cXZyzIHhcu7BIStrghCpS7148m%2FgPL%2FLEhjCBoHT2oRUwHgQ5jhhoVMo1yfXiRzey2ciSx%2FUAP3B8ZGenxBRIB0Dgu%2B0ATm1ILh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a458dac3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17752,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2c55092fb6001f0c5e5855885354e258","sha1":"e00a4f2d38ab84dba05d5e8d751e55da691c0f33","sha256":"c8c8611897dff495de41b612fad6c3218562081470d1358e8b58764026af9e17","sha512":"ec54dc372c37fc77089c04899732cb8dd072ccbe97f98b44f3e06a0aa3181478d0faa76bbc7c295b2a9150459c8f7098873ebfebb2abf28b1ff7fb3eb2a8516d","ssdeep":"192:XTnQJm3GyJRJTA3am3lhJiUTNe7m34MJD7TOdUm3/TJ8eTrUdm3iWJldTE7em3RE:DpHGx/P0NNPqxDX4R","tlshash":"60829a91042b5100e7971cd627cf3f366edc2049a049dabc2ffd189aaceadb913a574d","first_seen":"2026-02-13T01:20:29.953018Z","last_seen":"2026-02-13T21:50:44.693845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/css2-1.css","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: W/\"6950afb8-17a3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrW4ixntIQT6I6%2FWa7iJZvWlKdDM2Hd9HjioWDoAMrnSBjqkAWKQujd7BgPUedkJEmGmA6He1YoluCpI8AhYjUOgzs4k8DuKd5hQeJQLFnkaCV6t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a458db03e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5ffbaa930c3534a970a430cf28071ba5","sha1":"51decf72710d2704f8a02334da2baaf934a674f0","sha256":"ffbd7d7b3bad40e15dd6460edaac4f9b8b793103025844c307fcff0403cf5e91","sha512":"27d75d61c9c12db744673b391749e65152a260618ea3c9c351560fab846013fc033aa6945bcef701f07534d2fd32e7830f565bcbdb3a07f4fb95fc89a66f5cb1","ssdeep":"96:hOS0aqWxOS0asFZ8OS0aV3+OS0a0OS0a1Jc+u6OS0aINqOEaqWxOEasFZ8OEaV3g:XpBnprpV3SpQp9NpiB+yV3Zb9Y/BbPVL","tlshash":"cdc19ca0042b1000a7576ce227cf7f35595d7216b045ca799fff10686c9bd751371b8e","first_seen":"2026-02-13T01:20:29.954955Z","last_seen":"2026-02-13T21:50:44.699286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/brushed-alum.png","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /brushed-alum.png HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 11099\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-2b5b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mwst9VCivQcdVt29tf1ADp1wwmHD%2BSibbsIbsafMMhZs2OiIdJApZoTTIEpKVm9bqCFzIEfCvCauVkOC6r9UqsQFalBkgJAvTaa1TVExEhoDZb4F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a488ba23e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c6842476bd9046768fd18db70510b2f9","sha1":"faa57f06c3eb39f74e067f7cc03cfe0dc2ed1f28","sha256":"cfb3409c846d58a70739aec753b822a6def3f8783165fadadfea7b97f2a7c76d","sha512":"9b02bc34cf23aeae7b307e2af91ddf0e947b01a63a1f5f6e967bc64a8840139ae56596ae8c7539adaf8f273ab28d1067c99ebde6596823108a9180a9787e0578","ssdeep":"192:EYPqQ6Jew8d5OFEJOgcycoomilnWbGIp05tx/xm6tkKtmR0XZIB51kvKGDVEP:9qQ6JeegcyLElWyI+5t37TtmR0XZgjz","tlshash":"e632c071e53c17b2ffcdd2b4c39080e2082ca4200df9da7a22071ed94eee65ca895955","first_seen":"2023-05-28T04:04:49Z","last_seen":"2026-07-12T15:28:17.200974Z","times_seen":30,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/css2-2.css","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: W/\"6950afb8-1473\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGIordqfCxsl9a456%2FD25GPgJekmcqYURN5uO3%2FO%2Bgz0Bc1VlrxSTjAwVI589YSxxEhath%2FqX9%2FXSGBq2AwUSUa8gMNciRQ3st5ra8WVlOu%2Ba5uF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a458db73e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5235,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5d02541e6a0e30a5a8cca8a3f927d67b","sha1":"75e9a718022530b693627eb4f1f358537f3633ad","sha256":"6fc4dfa1b54aca3072e1759dc06b47da8518f8ae97dc120af1333d8caae3793b","sha512":"fd7f3cca8526f3a46f0e80d683502aee7454472be541189e73cbc4bf63d81f146b973deda088b9a73a59934fa4dc45009780fbc2b37b6a17f7ccc51a3164f44a","ssdeep":"96:cNQO1aPQO1ayJc+uhQO1adNDNQOEaPQOEayJc+uhQOEadNDNQOXaPQOXayJc+uhI:cc+aDLxXaiLCwaRLfpa4LY6a/c","tlshash":"34b19750047aa100e7976cd237ce7e32ae9df140a095ca386ffd044aed8ad2563a5b1d","first_seen":"2025-07-30T06:31:30.537326Z","last_seen":"2026-02-13T21:50:44.702374Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/BLINDFOLD-favicon.png","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /BLINDFOLD-favicon.png HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 56207\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-db8f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsmAosM9fHi3p4vh8ZuW6IV5b8TlqmrWGcxGynhRwRNV93vuMaYNtKYYxYZ8IFLkZAo7hbZluD%2B2wSuTGQKaaSZF2VFdH6hJn49vBe20KLGxTDjw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a458dc13e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"caa4964142a584e634044a66bdea6d90","sha1":"b8a1dd3fbea25759c6b59c5ad52886a1b633baea","sha256":"e2be0f2d76f214be8a463b10a4bfcad4e66f7b830957c81ff542ec7a32b3fb1a","sha512":"3e23fe8f412bb53369c7f1f2d367033231ab1122c925b46d0e40727dcec49af37c9b753a4d0ddfa757c9ef80e6f88fb612bc11bb442410a2d756271bb0c93de7","ssdeep":"1536:SBGsJIJYLEqeuv8GzKMZnj07mb1o7Qg6loceomq/HofMq:tzJ+Res2iYQ/oceomgS","tlshash":"c543f1ac2391e2d269e6505a7c9fd1df8f32f13f5943a9109beb689721354d03e8c18e","first_seen":"2026-02-13T01:20:29.94968Z","last_seen":"2026-02-13T21:50:44.683273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/BLINDFOLD-logo.png","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /BLINDFOLD-logo.png HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 147806\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-2415e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfDJTm93ArVzfh3HGGSsYO%2F1sufI2BesWVBnZ%2FdmueynM21YJToFbDvngK7la2wfZzHcOhg2wQ6dFifrxzCjWXRalHJ9PHNxz6RoDGcs%2BG6IpYqM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a459dc33e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 500, 8-bit/color RGBA, non-interlaced","md5":"81f9ad0890232ed474c7366281e084d5","sha1":"7374f9aa7fb1e26107ab75b8caf659332822165a","sha256":"8122300b47b0037a1f1977319cfcf0d09cab3e0238c4cb4d377a9d71f38153b1","sha512":"886beef999ee3ac039a7b377e87fee39b6c6934b877ef793f85c69a4a2ac855014e33657efdd1ea0d0834c38a700a1e19a1e2ddc2f1223a342f3460bb992b438","ssdeep":"3072:baJM2xuxGHa/dmVpDOZ2xjNciH07P8ZOG1UCzYoucFJWv:baJW/dMjNcV8t1UCz1Mv","tlshash":"5fe312810c74f533cf4b52bdac59af4725d7f62595fce229c852cb3e0054d9046f86aa","first_seen":"2026-02-13T01:20:29.961124Z","last_seen":"2026-02-13T21:50:44.703107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/secureproxy?e=ping_proxy","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blindfoldfinance.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:25:57 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJq9DDwB0ohUTmcqOCR5TIgQXZ88ptduPJ6f1Ra4YK%2BEAspM9EbDWVDoY%2FTTRdre%2F0PvtgEfNoQaXGSev7mEaLWkUOvxHmKvUSnR9wvQY%2FzBZQHb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cd78a47b9dd3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-07T13:55:03.767522Z","times_seen":9013,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/dark-matter.png","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /dark-matter.png HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 121\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-79\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8SXA1Zbzfo%2FnB340cXoBo5n1WC4OxJKtwtguPqmZmevPN0OLaaMmFOTYIlFcUcklepnYYF4cURAo8gUgic0Yk4Ad1YbcgJ914YJeZi%2FHAwqbgBW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a487b8a3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 7 x 7, 8-bit gray+alpha, non-interlaced","md5":"1ab4daa4643fcc71c4d1521c9ec0132f","sha1":"52912d74b7eb6944d27abc2ab5db9d2b412b1418","sha256":"0c23e0158c083f0f271d1657a998a397efb8bda0895d4c68104df19e6609d88e","sha512":"1494fcabae2e1b4db24a61be2de2d8f2430b987ca2e02cfff7d4f6bb69037dfb022f855e54220286f4f7ad397a0d2725eb8f088295b587a33ef989d4d34effbc","ssdeep":"","tlshash":"82b022e332808cbae800e23b88a03230ca3228c00c8003ec200ae03838a20e002ac2b2","first_seen":"2025-11-14T08:29:20.586119Z","last_seen":"2026-06-04T04:18:52.986809Z","times_seen":33,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lCyRfwYWE0CagI2flmGTyPmHX0no4YcsA94SAZELcK6IkzFcuIVkXv1tKewUAyavA3MravE639advQfZcQQ1n4GZHvHeKRJrbUTaplXSdkXwhIje\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a489bcd3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-07T14:06:42.95309Z","times_seen":25951,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":246,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40404\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-9dd4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FeZ56qAC4kNNNULJms0PhBaLYnuUT8NRg5YzdU9BrFAmGSvsfwhxesjilwt88BxH8%2Fdj9d1G8%2F%2Bh%2FBO6NlrH9t2lCZKxDOL9IZKPz2WTdbTNqkz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a48dc5b3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-07T14:04:51.480406Z","times_seen":2802,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net//secureproxy?s=%2Fjmpd%2F","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:15.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blindfoldfinance.net/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://blindfoldfinance.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-z8PLw72uOoanXHTEd+3wtmBxz8I\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9998\r\nx-ratelimit-reset: 1771019475591\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 21:50:15\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 86cf61167c37f6f34fb3caafa76da0f1\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcLIexm2dQgYsjpIneE0WlHiwteOMqCwO6qTv6%2FWWgaoMZRfTCvmc37njqFYJ4AToDLYs%2Flkp8JWFx8orXmiSaYOE43KnivGjTVS%2BOrGLC4OTpYP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a51deba3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c242341616ab01c18cfe66604742d92","sha1":"cfc3cbc3bdae3a86a75c74c477edf0b66071cfc2","sha256":"f31e1984cdacbf5db7b09953f5950e74adf0a89fb032d04c190cead226303ca0","sha512":"f5c82920d7a9f92959988ea8f5f58f7385471141e97a521df37105b6003b89ef5d0fc8d760833970642d053b998f9be671505497d08032ea255489f55f047da8","ssdeep":"","tlshash":"18d097030120be008c6b3456210cc30563718bc9411d431809909871912fcf81b00e12","first_seen":"2026-02-13T21:50:44.709891Z","last_seen":"2026-02-13T21:50:44.709891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/noise.svg","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /noise.svg HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSYMelZt7lqavuZ07A0mbhwLXWNN8NFMcFbrcSYJoHwNDh4LxTP%2F38IANIJ%2FiP91ZKuzwri8bhC93Kre%2BrnEvrTNP%2Fnm3YDBzQe%2F9AQQDPyD02fV\"}]}\r\netag: W/\"6950afb8-144\"\r\ncontent-encoding: br\r\ncf-ray: 9cd78a487b8d3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c0cfacf42318fd4dac94357fef89cb5","sha1":"8968d5b4c8d7fc5067dd77f08e385c3951742c65","sha256":"4aa40b2afbaef74a269c197e8c0d0055f6bc9320dd460fde81fa3297ac43aae2","sha512":"f7eb65a0a4e55464871c32a572c11ab8fed2d92119876df3588744685c2e074f78951626d6e282a126ee86ba4a4165a5d67e97f5511ea0d96f5b7e3082c9eeb5","ssdeep":"","tlshash":"60e0727880fa8c0c8000830df6e88b903e92d0c383880046f0ac29f26b16803bde22fe","first_seen":"2023-05-10T06:00:44Z","last_seen":"2026-07-30T00:52:00.433066Z","times_seen":749,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/photo-1436491865332-7a61a109cc05.jpg","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /photo-1436491865332-7a61a109cc05.jpg HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46526\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-b5be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6c%2FxMBPVQDG4SACJM3%2BKguYUzRZQYn5FXQSODxN20Yog8HpIBBF5aCqhuFjjbstir9yEW1grFcCPwo%2FsiYnoq%2FPqxgDrfXjb%2BqoNTaqUUtOoaAFS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a489bb53e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46526,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x531, components 3","md5":"e965796ba862910af2da4c1ee0129bad","sha1":"03d4e2c248c1d9818003919f540205c9aac51d44","sha256":"ad59cf2796b7350392b986da0239ca3f10ed3be33e38a877b4ce06340fd5605a","sha512":"98ad9cb6eead3e86428b77a8b770d5cec1a4f78808210a78509d3f2bba02b8e7cfeb64b288d8ecfffe1ebfe726aab4e87460eaf3ca0e4b1707849ed205b54e3c","ssdeep":"768:hYynbJwRRqT6TfMbbLYZ3E15Pyz3SsPMdOA0/ciPxXJbkAdpn//1OcSbKf34hx:hTbsRqoEbw015cPMdOA+7x5AAHMLsIf","tlshash":"b423f1b9b7f65912dc2d833cc4a12f04b265a530f3e178636364c97d9e97ac0a75e0ca","first_seen":"2026-02-13T01:20:29.941511Z","last_seen":"2026-05-20T07:35:29.947049Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0MOBDU6TNdUlCu9r8G%2BclhcB2jBVg724aeci%2Brq7%2Fzj%2B7%2FsdcdLsdKjexaTRTtAJvw1UMGN2%2FtyjsXqi0biE9wYGaff9VrfBtqHMQrBcPlbhamz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a48abe03e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-07T14:06:42.95309Z","times_seen":25951,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40404\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-9dd4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OW4ubV443GUYS%2Bfo2NvRgtpGEArMTrgjgxzEl8tu4VL2Yiv%2FNyrOZvi9bheWKnPx40XcMG5zRZRYAs3sef02YVWaM4H9yi4clGBL7OcmeM4V1oyP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a48cc333e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-07T14:04:51.480406Z","times_seen":2802,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkV%2BeS1X8Dqm64SosSQlBtlIC0gmmkT5l53LbiD0E%2BJ0YVBeFp4CMsIJeC%2BA7trPTEqiCUqUcx7d6Oi9HIhVBgb9G7tnNuYoFKxbnBIZDlmA6dir\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a48ec6e3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-07T14:06:42.95309Z","times_seen":25951,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/hero-video.webm","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /hero-video.webm HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: video/webm\r\ncontent-length: 2961291\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: \"6950afb8-2d2f8b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 73456\r\ncontent-range: bytes 0-2961290/2961291\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEq%2BIAuHHNirx4B9n4P%2BZYBhVcBdql5uh0jo9je5FV8RhokcxA2BQCmWb3cbdI0AwacFZdng6EFhlBVVVkmixncpC1herQ42dKgn68zZHE43xnky\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a493d073e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2961291,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"157631aab1e6291a859ebe5258fa9637","sha1":"f47f64784d7c44ebc4d3224e0d10805b8a629e41","sha256":"088a13e501d5bf7c66c0641d9b1e102ee2698413c40f14e5951aacf2254753db","sha512":"a512c9c51daaf32a5bd798e43df55add49ae771b3a8c9fef362524e6d65bca0b45258559ac44aa5930b6a4a877d2d4f69497ef486caa9015c0c6ca68aa73417d","ssdeep":"24576:1o6/nbbM3w33Fqgo5PsxSblUlxlZhio3q8AmhIP:tv4UaVohZokq8fg","tlshash":"d92523e8ccbe76f5d51010bbb92ba924cb676341d9a5f44752927e38e84b01ecc7221f","first_seen":"2026-02-13T01:20:29.948519Z","last_seen":"2026-02-13T21:50:44.714179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fredux-form.modern.cjs.js%3Ft%3D29516990%26u%3DN8B_HsAkZjjbQ6ySGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZEUxa5bWysckaib9WA","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:14.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fredux-form.modern.cjs.js%3Ft%3D29516990%26u%3DN8B_HsAkZjjbQ6ySGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZEUxa5bWysckaib9WA HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=redux-form.modern.cjs.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 21:50:14\r\ncdn-edgestorageid: 879\r\ncdn-requestid: e484e303fabba9d5554da39ab13816a8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKpYhipp%2FUcSgQghY0FhwebAm7gLTtZ3NsvJU%2BjNbQLUcgmJFbbqMy7Cwf1kKfDYGhE2tJX3LG8BWExXstVt9gENGNSXrfTkU1kh%2BTt8klUYdPJb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a4c0a7e3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":363,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blindfoldfinance.net/compression.next.umd.js","fqdn":"blindfoldfinance.net","domain":"blindfoldfinance.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blindfoldfinance.net/","date":"2026-02-13T21:50:13.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blindfoldfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 03:22:22 GMT","end":"Sat, 28 Mar 2026 04:19:56 GMT"},"fingerprint":{"sha1":"88:87:D0:41:6C:4B:CB:E0:90:BB:73:E4:27:9D:79:14:A1:C3:E4:F6","sha256":"FB:C4:4A:FF:1D:DD:D5:D1:78:DE:78:F1:8E:BA:05:05:93:49:50:12:48:03:66:3F:4D:BE:CD:15:B6:42:8C:4D"}}},"request":{"raw":"GET /compression.next.umd.js HTTP/1.1\r\nHost: blindfoldfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blindfoldfinance.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:50:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 04:19:04 GMT\r\netag: W/\"6950afb8-649e3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 73456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=198cbJww2SCFwHx8LEQk0YoraJ3tWsKnozNcta%2FBk7YVzGjBJmJvzxKql%2FtpD7YSTHe2e3aLaL9nbZgCGxAc6kZiDxa1D759MusHsKOBh3eWXd7U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd78a458dbd3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65159)","md5":"1b6a8ce5dd9c857e6cf8f42f9acb4d7d","sha1":"fa56741062094322241608e64d0b49b8c29968af","sha256":"d332b238e3a60da088752de2f5a14b50f1a70dd05c664f866dd28c510e7d1c7a","sha512":"8e9df208c28e8ce6043508ea4bea4b58c55f951f0325e962b19e275832e95a102957d980e0b1b25a51a0c493fd579250134cde80a80e7c1d51705039a7809e8d","ssdeep":"12288:6RmcTqMc85nMQ437TulwF4lMNltFmJL9Y:6eMc85DJL2","tlshash":"899423994583364f426079d1963f7185c4c6296f0f883a9daa18937ff0e8b5321f7be2","first_seen":"2026-01-02T16:39:48.453815Z","last_seen":"2026-02-14T09:55:59.069454Z","times_seen":14,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"blindfoldfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
