{"report_id":"04a8e87d-37c3-4057-a79d-cd93291edda1","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-25T22:00:05Z","url":{"schema":"http","addr":"yieldscan.site","fqdn":"yieldscan.site","domain":"yieldscan.site","tld":"site"},"ip":{"addr":"104.21.93.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yieldscan.si/solana","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"title":"Solana Tokens | YieldScan | YieldScan","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yieldscan.site","fqdn":"yieldscan.site","domain":"yieldscan.site","tld":"site"},"ip":{"addr":"104.21.93.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T22:00:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":2,"analyzer":9}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:40Z","timestamp":1772056780,"ip_dst":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":57656,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T21:59:40.482282+0000\",\"flow_id\":1908494232752112,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":57656,\"dest_ip\":\"8.8.8.8\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047866,\"rev\":4,\"signature\":\"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"8.8.8.8\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":57656},\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_07\"],\"deployment\":[\"Perimeter\"],\"former_sid\":[\"2851058\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_05\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"DoH\"],\"updated_at\":[\"2023_10_05\"]}},\"tls\":{\"sni\":\"dns.google\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4645,\"start\":\"2026-02-25T21:59:40.430064+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59558,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.661078+0000\",\"flow_id\":92143973497830,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59558,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59558},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":945,\"bytes_toclient\":1654,\"start\":\"2026-02-25T21:59:42.654310+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59572,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.665564+0000\",\"flow_id\":1705814726151508,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59572,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59572},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-02-25T21:59:42.658772+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59588,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.674078+0000\",\"flow_id\":772898437337107,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59588,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59588},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2673,\"start\":\"2026-02-25T21:59:42.659475+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59574,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.675179+0000\",\"flow_id\":40411092357029,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59574,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59574},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2673,\"start\":\"2026-02-25T21:59:42.659365+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59598,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.683678+0000\",\"flow_id\":1815576910382659,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59598,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59598},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2598,\"start\":\"2026-02-25T21:59:42.673347+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59610,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.689337+0000\",\"flow_id\":1364695538616512,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59610,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59610},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2673,\"start\":\"2026-02-25T21:59:42.673984+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59614,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.854829+0000\",\"flow_id\":1189198879959440,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59614,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59614},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2673,\"start\":\"2026-02-25T21:59:42.829840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T21:59:42Z","timestamp":1772056782,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59626,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T21:59:42.906266+0000\",\"flow_id\":1110034042763125,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":59626,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.39\",\"port\":59626},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2674,\"start\":\"2026-02-25T21:59:42.898933+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-25","alert":"Hunting_JS_WebAssembly","trigger":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"yieldscan.si","ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":27,"received_data":534723,"sent_data":13954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uygft-a78s.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-25T18:10:52.490414Z","last_seen":"2026-02-25T18:10:52.490414Z","alert_count":0,"request_count":4,"received_data":2851706,"sent_data":2223,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-02-25T03:05:04.781981Z","last_seen":"2026-02-25T03:05:04.781981Z","alert_count":8,"request_count":8,"received_data":5642424,"sent_data":3848,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dns.google","ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-02-25T13:18:10.072221Z","alert_count":0,"request_count":1,"received_data":800,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yieldscan.site","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":7667,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-06-08T11:44:06.830735Z","times_seen":93880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a03b83d5b2b797082e85774315f57b4b","sha1":"25f016863745f59fab26d4aa1ddf3e99454401b3","sha256":"a3c454a96c907699c89da28b9018b83d115aca89f737224fe252488b1512533f","sha512":"ccfe57d2d274d50a0068de0ef0dbff39a725f13af08d9d23e5d40040c359172c62fb0c4630ee687ca330c9cd27a53b78f71622d033e3d3a33e97c931d8f4bb94","ssdeep":"","tlshash":"63e04f40f446e8e69c22b91a60354d354098ae7c55a55cc457cfc78245614b50746b8f","size":314,"data":"","first_seen":"2026-02-25T22:00:14.551106Z","last_seen":"2026-02-25T23:03:30.6177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42c021948ad13c58559b777fa22fbbad","sha1":"29baa5f62e9d61826e926e6fa19fe54d33b19230","sha256":"eae915143659436b65813237a9bf4689f6a2400eaecf5e7449be3b8c285dfddd","sha512":"d1c5bdba3d63f3148daf7aea3cf4363e28bb7119071579adc08ff4dfdbda52fa56c78af43e0876ad8df017a7398e1df50ba036103ab2118dbecd6365722cecbc","ssdeep":"","tlshash":"22e026a9f780dcd25c62df0a96672c7490cccc7a0470d898501ec07a0925c154294450","size":324,"data":"","first_seen":"2026-02-25T22:00:14.552601Z","last_seen":"2026-02-25T23:03:30.618675Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/main-app-75fafb3e997a8bf3.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da20220fd375a6efc059036860efc3c5","sha1":"f629b1c2c91c5e488c8a7035e10404aeaa4dd135","sha256":"049088cc15080db3240136d09533bf91d8cbae0f839350e3e8af874a3685e8ea","sha512":"49b7cf2e4bbdc4434fdad157185bad43add6cfee51147f24d44968aa6bb9c72f3a1d8cb70563b6dbb712027c7833ba22b6a85eec204f1a2d27fba8a7a0f11c53","ssdeep":"","tlshash":"8af0829a2b4c701f2913ad24fdd35c2e295e416428a718501a04ddb12c33aa893f1c39","size":461,"data":"","first_seen":"2026-02-25T22:00:14.54243Z","last_seen":"2026-02-25T23:03:30.594453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f9305bfe231b46f46f6aa4f9601f2a2","sha1":"8d69cdd50045daa452152815e21bc2affd617503","sha256":"8bd4b9b1946d5eeeb34ec58e7a74084486a14275555be285f9f000a66be65dad","sha512":"09b1ca85d25a7310e780af028459e9a82c4f0e7724e51d2df745acbe0becfd442c2fd31a336fc36f8d3467a29d265db1c4cbbfef732ecdf67b0d980e0890901a","ssdeep":"","tlshash":"cd21d01be5a36471f866306e67cbf60531375847810eda047e0c9d017fa5116873e6da","size":1378,"data":"","first_seen":"2026-02-25T03:05:09.99146Z","last_seen":"2026-03-05T13:47:43.068318Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/fd9d1056-eb2731ee3896fb3a.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-06-08T11:17:52.491186Z","times_seen":3597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/not-found-28b12234c0c95546.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"869c7238e07a6ce9bfbcdfebf7914c7c","sha1":"fdeab027390043f07f8bf23a1cb97e7fa3ff740f","sha256":"304b9ad1a12b4f2e82838e78a7281928866fe70c7717a0f73b8d6171fb724a1c","sha512":"65e12ebfc8e87f13adcf83ca8522839e2d7cdecdc3a807a73d1b52e5e93402b21dd897671c0961a26054d6b46991b68a07b34814cde893a9c24445b66a0dc707","ssdeep":"","tlshash":"1ad0a7893b807c1d791769f858a70c5525f6155a346544c165308c911c3223c4342c48","size":212,"data":"","first_seen":"2026-02-25T22:00:14.512243Z","last_seen":"2026-02-25T23:03:30.607532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/noir.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cd1b9b8607dd45a581a9c12096d9d30","sha1":"78548296a7960b9f80af365eb0a9ed3444ae0b7f","sha256":"0f75d9b667a7e0a064019d334afdacf24a9e7f2f0fe247d49a8e69eba29b58e5","sha512":"c3c3fb508327f7512f2ec401a5d20b52cd764693e3a157aab7619bd7ea26bcdba12c97ebaa748bffd6bc1a19b51f92687afe531af2186bc7796aae833955ddbe","ssdeep":"768:Z7p4/JGg274TclQPP7GQ5kIP/smN8mZLNgY7BBIipaf0+48AUH:Z7p4BGg2ETcePjVkIPEChVNgY7BBIipQ","tlshash":"e8d22c9bce4f2e518b745e0923de2ccd092d1b8e68e244cd550aa7c9d68f56704ccaed","size":30191,"data":"","first_seen":"2026-02-25T22:00:14.496938Z","last_seen":"2026-02-25T23:03:30.598522Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbcc9b88614fd5b6add4b429e31fd2a8","sha1":"0c218f50c22fdbae52551fd865c44efa4eeac3e0","sha256":"d2633b4a3cd6cb44a12ef99512af79f5f2df1968a52b84cb43e731833dde5ab4","sha512":"57fad505ab3b35dff1c60a2cf1a98c6c38b417b91d6eba4c9e5a351ca272b16c753f58fcc2afc5d121bab6dfa9da556888ef828f3d9edd43557f65dd7ae12bca","ssdeep":"","tlshash":"eac0cccba023a82300a08800eb2232023f22232e3c20a000eb3cb2030e00acbc0b8f0c","size":174,"data":"","first_seen":"2026-02-25T22:00:14.555329Z","last_seen":"2026-02-25T22:00:14.555329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/webpack-046267dadd7b2845.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca0d1d30702f5eba37e3038119e4bd30","sha1":"acddd9069af3f2f21f35d865ec0c7ca38ec2cffd","sha256":"8700c05b663d64fdf6413ecf7b837f7346b846ac286403a31e9c18f0dd8946ef","sha512":"443c14425dafbd9311b3b1484750652712159109fefbb52e6cb2484cc629a3503370f0258b7895ce807c5323b7129774b7dc5e4b15f1dcb091bdeded001647f5","ssdeep":"","tlshash":"dc7186dd71a1f8ba1783a4a1043f9556f23f28b2281ee4e0cb29d8f5fc355498513fa9","size":3557,"data":"","first_seen":"2026-02-25T22:00:14.501018Z","last_seen":"2026-02-25T23:03:30.536854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/layout-2613fa502550798b.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea754d71c4b116b3ea2dd89f9987e45d","sha1":"874cbe7e13b4fb4529276639ba80581e00b968f4","sha256":"adba96c5a9a0ea1e387d0ef5925cb023b151aaf269517564d1528a574f535870","sha512":"0984ccefacc63b5ebdd2687189e12b2ba0aaecb181c1e2648ecca036d2e4ccaaf0da3eeca9d844bc7c4de5085ada6f97a0547fb07bfe72ddd465a216d50de2a8","ssdeep":"384:me0S+z0F80qSSX4M/hM1M/FRHBOTXONp9cIRev0:Cz68ZSSX4MJM1M9RHgT+Np9cIRev0","tlshash":"f06230bbb39036bf6ac48f9205ea5689a7e4178e76670404d797993cfc14ef39438630","size":15882,"data":"","first_seen":"2026-02-25T22:00:14.518449Z","last_seen":"2026-02-25T23:03:30.557477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/solana/page-1a5cb1fdb657d606.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15a003bfcbfd3968e8a862ea0fa5659e","sha1":"ee2f6efd13f9a9dcb90179a40839f112626ff81f","sha256":"2619137e1f0d6fe4004ea73a458fc741d347b5da84caa88373252cf3467e131f","sha512":"97e566a7b2a2707047e67fc335f5e3fb83ec45a0508b3aa4ae4709d4cf27cc06933e91cb32c3143989ee64a0b6f462ccba03c98e25a8925e921e97d00b1787f6","ssdeep":"96:xCQZzkrXs4ESekGuiljnDrPJaUEHcI7TiyZeWCTAUoSMxtLlLqDIDmnoYGTaj3Ff:kAzkrXs4ESeuiljn3PJaUOcmTNZeWCTZ","tlshash":"6cc1efb7a7a0758f0ac857bb00e91649e7ed2b6b3037481097938c7efc60a979539620","size":5799,"data":"","first_seen":"2026-02-25T22:00:14.507915Z","last_seen":"2026-02-25T23:03:30.578324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/298-bf2007cb3d8a0cda.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b61251fedd10830b27fbc2d3571af24","sha1":"21d0584374cb7e6a1530fc64a1cfec2ecefebcbe","sha256":"9514cd722381c955a3d491262048aa7903a731ef97e45dca430f685b9f641494","sha512":"ead1713a2e136dfbc9960386f880563e8c17ec9d27f054cc231433b94877dd8830b1b1cc771e4ddc0c622c3a808569e9982bc32ff84ff13ffa0078798c328755","ssdeep":"192:4QehBycBsvsDJSixFyWearv7DIQjb/dHA4sQCwka/U:Fehccq0lSmAYrDP3dHAfi7/U","tlshash":"fff1d6b572d27ee8e7aa002c18ef900c717f5f85dd0f8818f568b80765564d4f9a2f88","size":8185,"data":"","first_seen":"2026-02-25T22:00:14.533898Z","last_seen":"2026-02-25T23:03:30.596594Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7700cead12ac49f71a3027b606dd3a12","sha1":"550abf250fa5c23dc7d427235ecd1bb9126cadbb","sha256":"7559347f2e9c5a65c0f4a7cd40f14d4636a828e79686fe59d5c808d1e87ffe78","sha512":"9eefc2142b0c6f2c14655f324316f77d74d01908d2d41fd86db994479dd01dee4449429ac11e50bfd3c7a64bdb2698f7c097eecdb87851ed28c94f148da93824","ssdeep":"49152:U4+xtaUFAYp8Su3ilTYDMsvpXrdVCiG/NdUgmS9UT9bCWCawOJGSH17129hBpWL2:OxuitgJCWCawOJq","tlshash":"dfd57cb073b1707907e792d454a71100f234a44a700984bcfbec95e7af9aaca957bf78","size":2843020,"data":"","first_seen":"2026-02-25T22:00:14.558811Z","last_seen":"2026-02-25T23:03:30.616565Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-25","alert":"Hunting_JS_WebAssembly","trigger":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/117-7957cfc86edc1919.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-06-08T11:17:52.495209Z","times_seen":1714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/972-c0d6482dc92141f6.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b13ad7edddc9f56fea315f7e3f1ff8","sha1":"15d90ae6649cd117e17f200e42aa02fa9f5e5126","sha256":"ba8d97dba2235cf174abe4e9a93fe5e75da8bc4799381cff8c38104bceb15941","sha512":"2d4063787640316d76dad78e3c0a3fd5f849b9bb7453da2f9c53f9fed4781ecc79cec92b3aa0b6e005473969580af38698e1ab9bf653e843f606b2d6982aa462","ssdeep":"384:05k1IdRMx3IG1DnLGRwqdggPG1kyDfLxvZKVSUENLd3NU7tpU2J91wMVG4x:akgRMxhdnLqkKByLX4tpU2ZhVJ","tlshash":"f1c2e8be71d2f8a2479b11a0443b1006f2be4caa145e6244f7b4c8dbf57056da1b3fad","size":26066,"data":"","first_seen":"2025-04-19T17:30:47.724841Z","last_seen":"2026-06-08T11:17:52.500846Z","times_seen":1077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"dfc9aa0be5fb09900cf7ce91737a355a","sha1":"e1765a883afbe000ec71f9aee172688ab3331e11","sha256":"5779f2b773451f12579ce3d3afb255bc857becab006dc630951d08cccc5dcf4a","sha512":"4906ec1c12eba772eb3c4f00f7a51b1788f3444160ffff96b4108c9258cfc0bca6440f81e9410d2ae055e4a76458956f92b295ebc3d0ce444d78edda74172a57","ssdeep":"192:EQ11Gh/u1IrpriQeXQIdCpqO4D4oMfoiY+0dhNPnsEsC32pf7kuqGZvkpSFVBbNV:X/IqDCpJmskwkEZxtN+NH6R+4n","tlshash":"29a2f98ebfa3123666a3712f2bafa15d717650031009cd24bdbd97002f90a75127afed","size":22562,"data":"","first_seen":"2026-02-25T22:00:14.561127Z","last_seen":"2026-02-25T23:03:30.620423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae6da90c9f5bf3e532023e8c0cb99eda","sha1":"d4520bdb888c48c67b2da122d9e08ac8d3b1af4d","sha256":"3575686ec65e0a93ad0c0353fe92dea1a660c9814d7ff03a5e5c911fb68a96a3","sha512":"d7141bd4e839ce9e437c00fdeb41e1e9c245a8bfea1dff6244b2f3e99dec23d993f6e87d4f789d3b09dbcd5847a8d3491d7688c171c64e5bf81e470a7d4917a4","ssdeep":"","tlshash":"d851ee7d6102de8aec9e3d29157e9c3a648d856f8757cdb5c2d9ce11434603a2787ec0","size":2464,"data":"","first_seen":"2026-02-25T22:00:14.562044Z","last_seen":"2026-02-25T23:03:30.622248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fae0320b49cf1d215df10dec4270bb4","sha1":"84527da7c69e49a493abd1fbfd491312e5dda6e3","sha256":"abb2aecdd8286beba06468afb963f0edd0f6ce108f2ad51811e56d8ac759b003","sha512":"2d409d1cd54f232376c232f5794e9ae6964245d4425265fbe33629792dbf5f86ab20221802033f73a268ca0a0875fece9c55579b1442435fed4cc2a2435a07b7","ssdeep":"","tlshash":"6da0125050804eab813140a2383844b122d4400c0188028403e0208934521246236c50","size":82,"data":"","first_seen":"2026-02-25T22:00:14.56503Z","last_seen":"2026-02-25T23:03:30.624683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b09b59231f65e5ffe8709ba0037c270","sha1":"0319cf04e2ecd3afb7c6d6578475784ef387b425","sha256":"50430a4994a7a6e322a8ba1b4cb8c3d229340bfc813cddea7b12a39246c2d0c1","sha512":"aa523331dfd1ef93f4a165fb654f6e38a3064ead508ef0ede2462b09a2fd336a0a21414c389c765323d815464f34e0cffc23b5c2b8eaff8ee441fa31ffcc982d","ssdeep":"","tlshash":"944148e2ed12ec05d7979e0d1cbe7d7524ccc2928249a41fea98cd2946c3d346fe1752","size":1929,"data":"","first_seen":"2026-02-25T22:00:14.566106Z","last_seen":"2026-02-25T23:03:30.626297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yieldscan.si/noir.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /noir.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Feb 2026 17:39:44 GMT\r\netag: W/\"75ef-19c90bc4798\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Z4zgu8v54jikQHCmvy60WlwZByF1bJLe2mMYOBOJS%2Fo5gflpjY2yZ65C4sswAmEFo4%2FSPYleBUnXeH%2BUIZQOd48DSuA2Rj3ZgJk7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789d4bec21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30191,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30191), with no line terminators","md5":"3cd1b9b8607dd45a581a9c12096d9d30","sha1":"78548296a7960b9f80af365eb0a9ed3444ae0b7f","sha256":"0f75d9b667a7e0a064019d334afdacf24a9e7f2f0fe247d49a8e69eba29b58e5","sha512":"c3c3fb508327f7512f2ec401a5d20b52cd764693e3a157aab7619bd7ea26bcdba12c97ebaa748bffd6bc1a19b51f92687afe531af2186bc7796aae833955ddbe","ssdeep":"768:Z7p4/JGg274TclQPP7GQ5kIP/smN8mZLNgY7BBIipaf0+48AUH:Z7p4BGg2ETcePjVkIPEChVNgY7BBIipQ","tlshash":"e8d22c9bce4f2e518b745e0923de2ccd092d1b8e68e244cd550aa7c9d68f56704ccaed","first_seen":"2026-02-25T22:00:14.496938Z","last_seen":"2026-02-25T23:03:30.598522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"GET /demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Feb 2026 21:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cE4RZZ0jA2zLn0AB9oXKGjnMrfaLZJ94j%2FfwgqaH97qPzaJbwl%2FOD0nOiA2OTgbiR%2F1dCIGlwhHJ%2Foo0fupVIB%2FU5Lx6Fxf1p951MbOVQR8cu2UPTRJTmw6rEFjWwA%2BsRfa7hof\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin,Accept-Encoding\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nx-ratelimit-reset: 600\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::hkdtl-1772056780675-9610927333be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2846964,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33714)","md5":"5c734a557628d24d590421dd8b578a3c","sha1":"10c3727bfcb7bb280af8240701f098b86e475078","sha256":"799fd656a484d348fe98b07b82a5a283e8332c3804210ecbf6373a4e5753bb7f","sha512":"15e733138e12f03b57c20a79d56386b412baa4a67cb9dcde20ccfa1ba262513b634e46884c2e602a3b0eb3141e8a0b2ef0a74045fc91d20a47708fcef1ea41b9","ssdeep":"12288:x44LZxNuaZYNUIFPfLUlKY4Ue+jFy1rq6c5249AZQmYN8Ge5CK3i/R0u4gpJl:x4cZxtaUFBE1r5c52aAZSu3iZ0uTJl","tlshash":"28256cb073a1b07a03eb92d594661100f334941a700d84acfbaca9eb6f959cf957bf35","first_seen":"2026-02-25T22:00:14.498134Z","last_seen":"2026-02-25T22:00:14.498134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":30,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass2-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3967947\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"5a6a3867cbfe36845cfc495e5ca7f0ea\"\r\nLast-Modified: Fri, 23 Jan 2026 15:05:42 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78abecc5723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"77c8cf44927733853063e12a9c919838","sha1":"e753f4fab619a4ad9c7e362f7dbca7d28c6af569","sha256":"0a412e42c896359759d6f578d9439fdfa66c8387c55de84440861ea71f463e59","sha512":"23e51c246c2f5f89fb1e53fad2bbba306a23f2a5d708b1b58dd8b8a60a382c9e38d475a7b57e90d617d2f87524659ca3c63da65c0248367925c1f5ab8bb570c6","ssdeep":"12288:VEznytgluvfiMoSnqYsA4Xp8fvndMMr95Hl42YSbZQxiVUSmj3+SSB9WV:avufiMHLszpYKMLHl4XSjC3h+s","tlshash":"8ff423e9846d4c8222510261295a753c2053b03eddf7bc39b1acdf9dc69ee3e8ce91e5","first_seen":"2026-02-25T03:05:09.958112Z","last_seen":"2026-03-07T02:01:37.50279Z","times_seen":62,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":37,"dns":1,"connect":6,"send":0,"wait":149,"receive":136,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass1-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 6028322\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"cf5ac8fca45e5d0409fef8923c179975\"\r\nLast-Modified: Fri, 23 Jan 2026 22:54:15 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78abeb853181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"13ec753f0f7ac3f2e09cd8fb3d159fd6","sha1":"fb7c640e5ea1b3eb5af719aec31fe04a971c27db","sha256":"69c12f796a581c42a4dfedd57a615fdc0407867c0ab2577507c6afe5320d5b26","sha512":"79c55e8cc4ba19d93751be035f34ffea46704d06b08da0ee65a013c3bb40a7f3295156bc659db38df831457a65d53ed01bb79812b5903f66de13108d99c85e9a","ssdeep":"12288:WKLOlpdbVhOBbi61VlVP30w5qYO8DgLhC9bxl0zY6+wqzta5YpqXl5M0k+3uJH:WKS1/OBbi61/Vvx5qYONFC9VGM60S15M","tlshash":"b4f433f9941e38c2eb42b5617c2f12219dffb09b487f5fe24b40ba6a23dad4443d9458","first_seen":"2026-02-25T03:05:09.960469Z","last_seen":"2026-03-07T02:01:37.469286Z","times_seen":59,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":35,"dns":6,"connect":5,"send":0,"wait":162,"receive":132,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/webpack-046267dadd7b2845.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:39.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/webpack-046267dadd7b2845.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"de5-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hke%2FhGfnqM3pMOpUAQbDwVwHchdgfyQLWwQ%2FdyYVhKnhyU%2FLlpl9bHGMmCnf9iMSealS6Y7EjuCJLcKnyXoZS6WBNiebFb6DoMYwVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789abb7821e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3557), with no line terminators","md5":"ca0d1d30702f5eba37e3038119e4bd30","sha1":"acddd9069af3f2f21f35d865ec0c7ca38ec2cffd","sha256":"8700c05b663d64fdf6413ecf7b837f7346b846ac286403a31e9c18f0dd8946ef","sha512":"443c14425dafbd9311b3b1484750652712159109fefbb52e6cb2484cc629a3503370f0258b7895ce807c5323b7129774b7dc5e4b15f1dcb091bdeded001647f5","ssdeep":"","tlshash":"dc7186dd71a1f8ba1783a4a1043f9556f23f28b2281ee4e0cb29d8f5fc355498513fa9","first_seen":"2026-02-25T22:00:14.501018Z","last_seen":"2026-02-25T23:03:30.536854Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/972-c0d6482dc92141f6.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/972-c0d6482dc92141f6.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"65d2-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udGF2IP%2BHF1tB%2BmCh%2BqATqlAt0b36L52Xl0OKtnWtlHevTnumyreRKoMcTfZRjT%2FT5nhxse4FeUC%2F5JLBNF0UhfbGcXemlyktTMzBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789b9ba421e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26066,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26066), with no line terminators","md5":"f4b13ad7edddc9f56fea315f7e3f1ff8","sha1":"15d90ae6649cd117e17f200e42aa02fa9f5e5126","sha256":"ba8d97dba2235cf174abe4e9a93fe5e75da8bc4799381cff8c38104bceb15941","sha512":"2d4063787640316d76dad78e3c0a3fd5f849b9bb7453da2f9c53f9fed4781ecc79cec92b3aa0b6e005473969580af38698e1ab9bf653e843f606b2d6982aa462","ssdeep":"384:05k1IdRMx3IG1DnLGRwqdggPG1kyDfLxvZKVSUENLd3NU7tpU2J91wMVG4x:akgRMxhdnLqkKByLX4tpU2ZhVJ","tlshash":"f1c2e8be71d2f8a2479b11a0443b1006f2be4caa145e6244f7b4c8dbf57056da1b3fad","first_seen":"2025-04-19T17:30:47.724841Z","last_seen":"2026-06-08T11:17:52.500846Z","times_seen":1077,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:48 GMT","end":"Mon, 20 Apr 2026 08:41:47 GMT"},"fingerprint":{"sha1":"58:4D:E1:0C:42:51:7E:9C:BC:BB:A3:A2:D6:87:E2:BF:29:0B:91:D3","sha256":"14:62:92:57:0C:20:C6:D3:87:73:6D:53:FF:B0:73:36:30:5A:02:CE:BE:1E:C6:7A:1F:C1:EF:68:1A:5A:E4:33"}}},"request":{"raw":"GET /resolve?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nOrigin: https://yieldscan.si\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\nexpires: Wed, 25 Feb 2026 21:59:40 GMT\r\ncache-control: private, max-age=60\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 197\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"16ef10c038e8097aee159dd29650dcb6","sha1":"b1ccb51105d4d8b112d837bcffaa9b3ec3f459fc","sha256":"9abdaf2a1fce0b3cb417c59ed3d95456485fb53330c5fb885b97ab6b1b25db20","sha512":"8d0c1585059777973f2802f4a4b48589b737566a50bb61678b3cb9c68bc1e4fe1c24249f54177426d727d25833aa402bb1e5cd471d92abec76155d4ae3fc2399","ssdeep":"","tlshash":"93d0c289908481adb6066794c08b14469f6c22a272acbe599b842e74e6cb291b496257","first_seen":"2026-02-25T20:48:30.850331Z","last_seen":"2026-02-25T22:00:14.503785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":130,"dns":1,"connect":21,"send":0,"wait":40,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/api/v2/handshake","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"POST /api/v2/handshake HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/octet-stream\r\nContent-Length: 71\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 25 Feb 2026 21:59:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSyXiaGoOzKJV0frugGWxPEB2lq%2Bn97v9w1%2BC4wrPLB5UjvzBrkk9E5r0nMgC4I2IOk%2B7wIgMJVqWio7tQvl%2Bu0HBxOV%2BPJO%2BwWiPHIrg9yHu3ul%2F6SuPy5F9wORSL5ej81Iui1r\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-session-id: cace213cf8f81870260a221563ecce89\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::bv7m2-1772056782162-7fd17abd3e4d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"74407f3f50628a0f1b18257c2a677f74","sha1":"780626260c5bd7a7b7f494643cdb4549e0a06e00","sha256":"fb280197dc8e882032e38a29252e9d832581b948206524c1bea5379652074bb0","sha512":"eddd67d0b757d6de5d4c572af31c1f0a0a0b556a218b0c3f5bd1dea11536ef1ddac4e18aa715873af0d11d78e45f7dc83192a62e8701ff15edaa16bb458e1514","ssdeep":"","tlshash":"cfa0118ec2a3a202a08280308ac28abc3000a0b002328c88a082ab082208022ab0a0a8","first_seen":"2026-02-25T22:00:14.504507Z","last_seen":"2026-02-25T22:00:14.504507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/api/v2/binary","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"POST /api/v2/binary HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/octet-stream\r\nX-Session-Id: cace213cf8f81870260a221563ecce89\r\nX-Config-Id: 699b6bdb44e2554e27be7387\r\nContent-Length: 111\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 25 Feb 2026 21:59:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJq%2F77JJMYSXXkszFRj%2BSY5WU5uspWkthDuJNx8YZ6kWESYeYZIX3Ila6WcIlib%2FmJSR6MZ4YLX70axV3qzmH2bYLyb3YraeR8SzSiejflNuvzRkGa6wNzsyjLqL3jgUZTTd8NA2\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::bv7m2-1772056782643-510957c84482\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"e68205d5bb1e36dcdfa9adf03155ce23","sha1":"be8ba111636ae977bc551556967a26012db020c8","sha256":"468f82a9dc0e2dea86b5ec087875eef33a4c70f4ef01f87fa8102180572deb44","sha512":"b585dd8e7d7c1bca95eab28df7b08d8bcf5aac265f2e01570a36084d3d0389d47b50f1c523e148459562e1d9656584c180c76d3670a124b70e8b5810ea5e2876","ssdeep":"","tlshash":"ccb0124953cb006cdc45923125252325b103d401201f5650f4510815499058b04e40d4","first_seen":"2026-02-25T22:00:14.505823Z","last_seen":"2026-02-25T22:00:14.505823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24576\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"6000-19c8b12aa6c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43D%2BL2soiON7c3p1PiB7GV2lgT39dxecrXEOQ2efTdj1IflzSJzyv9%2Fp6teu1idyfumWCkJo6d88IFtacFuWxJdU%2B0zqkh69YsGE8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d3a789b8b9621e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-06-08T09:56:10.720246Z","times_seen":8903,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/solana/page-1a5cb1fdb657d606.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/app/solana/page-1a5cb1fdb657d606.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"16a7-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPtIqd1WQY3%2FnkC52QV%2BRl%2BC62wHKJ7he3PBsGyc2svLb93tfCXz%2B3ckRytsBj%2BhbJnW7CR32koALbh%2F7YwydK7NsgBGtS9yMshLeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789c7bc821e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5799,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5799), with no line terminators","md5":"15a003bfcbfd3968e8a862ea0fa5659e","sha1":"ee2f6efd13f9a9dcb90179a40839f112626ff81f","sha256":"2619137e1f0d6fe4004ea73a458fc741d347b5da84caa88373252cf3467e131f","sha512":"97e566a7b2a2707047e67fc335f5e3fb83ec45a0508b3aa4ae4709d4cf27cc06933e91cb32c3143989ee64a0b6f462ccba03c98e25a8925e921e97d00b1787f6","ssdeep":"96:xCQZzkrXs4ESekGuiljnDrPJaUEHcI7TiyZeWCTAUoSMxtLlLqDIDmnoYGTaj3Ff:kAzkrXs4ESeuiljn3PJaUOcmTNZeWCTZ","tlshash":"6cc1efb7a7a0758f0ac857bb00e91649e7ed2b6b3037481097938c7efc60a979539620","first_seen":"2026-02-25T22:00:14.507915Z","last_seen":"2026-02-25T23:03:30.578324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/pump?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/pump?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNXT7s0SrYd2A3vHo%2FNL5DdOOhkV0JJLjSgaAHpT1ROoDFzKYMEPkpUiEmBG0KBqaNWvjLTsI6uyPb16hwxjCEp3eQZ7g5ll8PtS5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dabf521e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"0c9a96428bc44e9151a854c75cbf368c","sha1":"9cb13c19c2f701036b022d45adcf8e5a066c4611","sha256":"d4bf03a7a76ee976c7000f9e4044f08427f33e3d3b92fd184de38efe538dcab7","sha512":"d8ff03b7a641b079ff31b3a283996c4d301a92169e51926493afc92838da39967b1a933e5d61aa6aa93ecdadd03e1b1ea89d9aa7c54fdbdd230b5cc7f407f9d0","ssdeep":"","tlshash":"b3c08c1302647ea3fc2932c4043ce00e3acf82eb004c087080fc591613b1333940f5e8","first_seen":"2026-02-25T22:00:14.509343Z","last_seen":"2026-02-25T23:03:30.608809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/meteora?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/meteora?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwf7HRgmT%2F8LtVe867hM18fDaCzfTyuivk5qIlBSIi1jH4XBHyFt78gZxwN2IFlU%2BePBn4XXDOjH3X2ZLAk5TNWmlQIaxu82j1DFwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dabf921e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"a9927fc85782318cc28e5506e5ecc4cf","sha1":"7b1aabcf17acba3b3523eeff4f4c34f9da945f5e","sha256":"9ce2d651d238b8cfdaadc6d4286e1ee16aa4db042b3fca6ad85c614e5ae1c4f2","sha512":"908e7f870c0196f69f2043c5c516c6d21530877fd540b2bd283abddc78204d158e85fd2436de17ed7e58de1038ac1ee671eede252078b9f61ef0d5d8b2a111e2","ssdeep":"","tlshash":"4cc08c1212547eb2bf293f96043ee00a3ace06cb004f5470c0f0a916137a333980b5e8","first_seen":"2026-02-25T22:00:14.510864Z","last_seen":"2026-02-25T23:03:30.599901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/not-found-28b12234c0c95546.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-28b12234c0c95546.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"d4-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6idtXzKjg%2BMxRlAwfpEf4m%2BM7U4bTJPWQEw7Y2zot4p2LwK9x5FOrGz665%2BWp0CTKucRCuGAyYr57POVexfHdo1RX7OguAXi3GJ1w%3D%3D\"}]}\r\ncf-ray: 9d3a789b9ba521e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"869c7238e07a6ce9bfbcdfebf7914c7c","sha1":"fdeab027390043f07f8bf23a1cb97e7fa3ff740f","sha256":"304b9ad1a12b4f2e82838e78a7281928866fe70c7717a0f73b8d6171fb724a1c","sha512":"65e12ebfc8e87f13adcf83ca8522839e2d7cdecdc3a807a73d1b52e5e93402b21dd897671c0961a26054d6b46991b68a07b34814cde893a9c24445b66a0dc707","ssdeep":"","tlshash":"1ad0a7893b807c1d791769f858a70c5525f6155a346544c165308c911c3223c4342c48","first_seen":"2026-02-25T22:00:14.512243Z","last_seen":"2026-02-25T23:03:30.607532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/favicon.svg","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 22 Feb 2026 20:06:17 GMT\r\netag: W/\"101-19c86f5bc49\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xq7Kv4V%2F8pbPs9ewztFNFi51XFW0pHonB4ckzlDqFaW7YJrqYBPklDygtnT95exhXXCevsXTGJO2%2Bk%2BSbUKqEE2dSYmQ6N%2Fu6NVjsg%3D%3D\"}]}\r\ncf-ray: 9d3a789b2b8921e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059f787b603e0596f74489cc29133688","sha1":"7aa6b156c1ea0f7c7d7164a8bc1793d89d9f134d","sha256":"f25cb0609e5ca945254f6ec736059e6ec5e8eb5899914924602ffbf66898a42e","sha512":"64a2f80f12039a8031a9c25b8464812a20ae05c1bf165b054ddd2587bb084bc2b915946bd1625adac93a548b6cc27166000a4b01262c8057db2929411420e19e","ssdeep":"","tlshash":"5cd09529c0889705c70c4e02750d75e5708fd4cb5d45c914f6511539d4c7dd76ac635d","first_seen":"2026-02-25T22:00:14.513517Z","last_seen":"2026-02-25T23:03:30.550529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/api/price?chain=solana","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /api/price?chain=solana HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/json\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ruc%2F0LSgDkBSdw0qZ%2BPUfjnguc3yrDpXQs0SxbIuQ4bScHDSAI7sNnvGmhz28x10Z8sZwZ6UqE2XBZ4V9Nrqy0rdDDZh1ri4eaSr4Q%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d3a789d4bed21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ec14ee8d4a0348b35f223bfef4b33621","sha1":"21abdc8ff94315761d56d71c23e3016906292352","sha256":"74b67b3f3043147b264e7b79628c3d23a7f978f9ad2ae79dd7b4ca5f6b5e6591","sha512":"eedfe1218e37e103c4a68837478c1f9ae40cd160b294742d85f40278ab21842c3ef0c30a2935b76e815b75df2591be6bfa62890f6e3e79d760f01c7c1cd938da","ssdeep":"","tlshash":"8f900203b7900465c441618041242e3265d813b246241569d0cc7124953602e6483417","first_seen":"2026-02-25T22:00:14.515029Z","last_seen":"2026-02-25T22:00:14.515029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/orca?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/orca?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pnaKG5iTDg6Uiv%2Bkb%2FsjL3hLQMyHMIxjLYI7t4y%2BikmwKQ8rgQmZCeg%2BXW3H7Oy10KPjNnNq7MU0ejoyUlESdSN7CRIW1bpy0eXCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dabf821e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"938efabc599d41a4ab08c6a754c1a41c","sha1":"84e1fab28db52ad1c71f5fab382ed35d7ee0ea66","sha256":"2ada488b4b86b07e120e7cc01cb9bea9470b31faec7bf17c2155e738dc4e1af8","sha512":"66e9a0d262e14c7aa9bc25ab72ec6f1099cfdaf1fd77875be0becc05083a2c7c7b1c579c8214e10362c21a81b6f1dd3db5646af7f43f232bdfbe45eb86db72fe","ssdeep":"","tlshash":"acc08c1202587ea2bc3d32d6003ee00a3ace86cb005c167080f05a162371333140b5e8","first_seen":"2026-02-25T22:00:14.516452Z","last_seen":"2026-02-25T23:03:30.540897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass1-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2031700\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"a22dc9face81ff1665651f1052a0a99f\"\r\nLast-Modified: Fri, 23 Jan 2026 22:55:18 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78abdc7c4c11-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"eeebcd74061a9dcd7dfad338ebe1d46a","sha1":"23148fe8cd0cfe6b4379103d03dabde517e9bfd9","sha256":"631978ce1c77fdc8360949130dc08a761d8a5cbf0b87875b7b1556706cabc068","sha512":"e151fd7805ccbf649173ed454739604bbb31cbd0daa1dbf057454363c74532c9a5c2310e516f087f21ef09e5cd7de46e91d67e01815274b82573caae494eff45","ssdeep":"12288:/2TA4vVLmF/WbRkFOppRWsWNbGSQHJAUOUsLOsWZssG5bxVWhseThDII57tSKnXb:/2TAaRkFipRWRSlpAzUWOsWWvbLqhDVr","tlshash":"41f4233ac26c0681a9a500112e6526604c337cbc54feea3383eddf3adb5b92d6da5295","first_seen":"2026-02-25T03:05:09.955526Z","last_seen":"2026-03-07T02:01:37.494267Z","times_seen":63,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":127,"receive":80,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/layout-2613fa502550798b.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-2613fa502550798b.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"3e0a-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qW%2FIWrdnuDWy3XJdR%2BYHFKLzviLgzsGoK5v1j6jGJbp6fpJ3jKgyekatsBJqmRsZOpS1FZXxIos0XJc0ISJDcX2eKqtCRoCDckfxXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789b9ba321e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15882,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15882), with no line terminators","md5":"ea754d71c4b116b3ea2dd89f9987e45d","sha1":"874cbe7e13b4fb4529276639ba80581e00b968f4","sha256":"adba96c5a9a0ea1e387d0ef5925cb023b151aaf269517564d1528a574f535870","sha512":"0984ccefacc63b5ebdd2687189e12b2ba0aaecb181c1e2648ecca036d2e4ccaaf0da3eeca9d844bc7c4de5085ada6f97a0547fb07bfe72ddd465a216d50de2a8","ssdeep":"384:me0S+z0F80qSSX4M/hM1M/FRHBOTXONp9cIRev0:Cz68ZSSX4MJM1M9RHgT+Np9cIRev0","tlshash":"f06230bbb39036bf6ac48f9205ea5689a7e4178e76670404d797993cfc14ef39438630","first_seen":"2026-02-25T22:00:14.518449Z","last_seen":"2026-02-25T23:03:30.557477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/jupiter?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/jupiter?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLSTVhS16fSpea%2FKUAKWtNEUWYRgQdhRkJmXCclFLCdPnsD8mPH4O0WlV5qt85cpTHguF6Pshm6F0OG4HND5C1ZUTRH7xKZhJG7SiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dabfa21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"88566f59994ae85d870aed835fd4afa3","sha1":"9764986519e5699612737bfbeeea4395addfcd2f","sha256":"35a47885d583fc3bc4dec301c41a44a38a50acb1774fb77d85c2a456393d34ef","sha512":"fbd1b7922cff20d2391b481df2f52160eb3e67200d51cc56a60b2eafc3e5e7e567fb0049288efccd6f53c9934540600bac0ec0f88512ba868113178107148cbd","ssdeep":"","tlshash":"fec08c1202547ebabc2a3284003cd10a3acf02cb108c067080f09d269372b33a42b5f8","first_seen":"2026-02-25T22:00:14.519788Z","last_seen":"2026-02-25T23:03:30.574313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/kamino?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/kamino?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQyd8k%2BVtt8fbQYBywThgY1OLvaX1gCw8VmvS0Is3cuc9B99y8y6yt6s5STNTbGvz49aGPOx9aCMZOKa9OZW%2BuCliZZiFPw%2FMO0k9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789e0c0e21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"6bcb8e830e759627fca26f242ab263f6","sha1":"da6ed9edf06c68eef08a152a01822dba62284985","sha256":"e7260289007566c40a1b08e4e2bfef41ae3a1e37243bfe0dca9a7ad530f10627","sha512":"4dbd8d2ec9001f02ead8773cae61270eae15496b916c543a3d239be5bb5a3373519253f1016cbc0b19e6589344396f2cb995aad3f9668cdc440978e4f004f23e","ssdeep":"","tlshash":"65c08c5302987fa2bc2d3294d0bcd00a3ecf02cb108c047081f099161371333146b9f8","first_seen":"2026-02-25T22:00:14.521319Z","last_seen":"2026-02-25T23:03:30.601535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass2-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 8319275\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"ffdbd9550fb16af66a8cf7717da03833\"\r\nLast-Modified: Fri, 23 Jan 2026 22:06:40 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78acfea60883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"589dfc1cda320239b5ffa144fbc72c39","sha1":"bc905d626cc383b1c3e161d585df3a667164c927","sha256":"3ed7ae1939c55ffa191a3d546b810f7d83dae59763af66f696ea8c793aa64128","sha512":"c802caae51ba658070a7a46765e5a6bf8d6d4d7a3d264cfe5b7d13794f087536e4fb417240cb646133ab4d8a83d6823d19e88a2ed0e6ae4510d2aa1bdedf936c","ssdeep":"12288:bw+YEyoNI/qVAQPiktG7xzVnTRZQ7UarysToF0O4aNwT5+8YI7r8CUBJGszdI:bDYQNB1s7x5nT9wysI0jlfn8CUBJRzdI","tlshash":"2bf423b8e03c5657d6a62025391d27c0bde7e0299cfe7d3233c898218bdb5bd1d58a1e","first_seen":"2026-02-25T03:05:09.974212Z","last_seen":"2026-03-07T02:01:37.473104Z","times_seen":25,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":158,"dns":2,"connect":8,"send":0,"wait":132,"receive":30,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/marinade?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/marinade?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJjX2%2FbkcKz%2FRvzDYGFlitGePV9HYsOA6UmaMZcWl%2BG%2BuHbAgZts8swqqvFWMDsoFvUcvfsRt10dlWoZzb4o1LyhqPT2C%2FNr6wgrDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dfc0c21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"68f3ca2d8ac5dd3c8074e61583bfee7e","sha1":"991253214d4b0caff82bf499da091f0a69d0aed9","sha256":"b5e2604a655c24fc825c0aeb1e9c2a02fa456b5e8b7717c4d32cb8fbf589e5ed","sha512":"9413d741726b1362243d5d75a58a3c90daeeee65e023eec09a0edd4010c6be019583ea60a2a87c0f3e6a2e7fb89d4d59249387e642a73d6f905ac5e9a8bab87c","ssdeep":"","tlshash":"f7c08c1302647ea2bc693a84043ee00a3ace02cb005c4c70c0f05a1613ba333146b5e9","first_seen":"2026-02-25T22:00:14.523842Z","last_seen":"2026-02-25T23:03:30.54288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T21:59:39.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Wed, 25 Feb 2026 21:59:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCqaiCPdVgh0tWfTX8f1ebDU09IHqIuod6JW8P%2Fr%2FlUdOt972tfWrQ4vsv5eg5Dj0TcDWJg1Lmj1zKWdCu6gRscOT0TfeumTaOERRg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9d3a7898cdd9a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":62,"dns":27,"connect":8,"send":0,"wait":45,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/fd9d1056-eb2731ee3896fb3a.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:39.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-eb2731ee3896fb3a.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"2a322-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dniw33gssNV8KBZtBAgzdC6JuTtBn7ubHwTHne1fHal%2BL0lFyiE2qyv6SbjmX0jd2zgj0W%2B5RT5WnfQJ9VsRDSK7hVXKqYJrnvqgkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789abb7921e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172834,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-06-08T11:17:52.491186Z","times_seen":3597,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/css/f66bce4dec8e3651.css","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/css/f66bce4dec8e3651.css HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"83bb-19c8b12aa70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bg%2BMZE1r2TR98UIu0UdivyIimAOsGJwvM4pDezv3WWvG11mYVYMb8eSfmtRx6cesNHeJXipFO4SxgAKxl3O2vWe9d4UjhaimBB3xlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789b8b9f21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33723,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (18583)","md5":"c59525ded64f16d266128bdbe4021ceb","sha1":"3d279486bcceb9777fded216d46ea886a4c59d18","sha256":"d0708446b357d1a8e8cf13c469617d5d5b0a7167eeecf57afd1fd9d355b1324f","sha512":"5ea886b52873bd412bae7a379f425fbd44f978cea067baae1f18dc058810d4fb0d9c50988b5ad0b8d14e065508246a4efb29ecb72443aab951114441a59437e0","ssdeep":"384:VZij2NG8OAbPx9RXKp4hBxA95swYJH0b9HRKYw70cqsx/hrXV2h6:VZijY1x9RXKp4TeIHk9Ha7/rXUh6","tlshash":"d6e2a818c525442fac33b8f7b1ccbf1a642a60c5ef654aabee194605cfe75b33692704","first_seen":"2026-02-25T22:00:14.529608Z","last_seen":"2026-02-25T23:03:30.548046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/favicon.svg","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 22 Feb 2026 20:06:17 GMT\r\netag: W/\"101-19c86f5bc49\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ud66RLNn%2BMcQfwqzFYTg5yckBPNMr4%2BXBw5BDcwyixOHvIMVAEoUdHfVTrqzAHW85r9%2F%2BtTwgw4hd95C3dnVusTYpc96UFcoTV3PfA%3D%3D\"}]}\r\ncf-ray: 9d3a789c6bc521e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059f787b603e0596f74489cc29133688","sha1":"7aa6b156c1ea0f7c7d7164a8bc1793d89d9f134d","sha256":"f25cb0609e5ca945254f6ec736059e6ec5e8eb5899914924602ffbf66898a42e","sha512":"64a2f80f12039a8031a9c25b8464812a20ae05c1bf165b054ddd2587bb084bc2b915946bd1625adac93a548b6cc27166000a4b01262c8057db2929411420e19e","ssdeep":"","tlshash":"5cd09529c0889705c70c4e02750d75e5708fd4cb5d45c914f6511539d4c7dd76ac635d","first_seen":"2026-02-25T22:00:14.513517Z","last_seen":"2026-02-25T23:03:30.550529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/298-bf2007cb3d8a0cda.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/298-bf2007cb3d8a0cda.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"1ff9-19c8b12aa70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=753C6ZR02Cwf3wzz17AEdexrkCVWG9a1ep%2BJ6WUW3tHtLrPBKoJXtsyTg21FtbIplzy7MyYsDHl1sdClMFFgunm6DTIR2Y1DQjqpAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789c7bc721e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8185,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8183), with no line terminators","md5":"8b61251fedd10830b27fbc2d3571af24","sha1":"21d0584374cb7e6a1530fc64a1cfec2ecefebcbe","sha256":"9514cd722381c955a3d491262048aa7903a731ef97e45dca430f685b9f641494","sha512":"ead1713a2e136dfbc9960386f880563e8c17ec9d27f054cc231433b94877dd8830b1b1cc771e4ddc0c622c3a808569e9982bc32ff84ff13ffa0078798c328755","ssdeep":"192:4QehBycBsvsDJSixFyWearv7DIQjb/dHA4sQCwka/U:Fehccq0lSmAYrDP3dHAfi7/U","tlshash":"fff1d6b572d27ee8e7aa002c18ef900c717f5f85dd0f8818f568b80765564d4f9a2f88","first_seen":"2026-02-25T22:00:14.533898Z","last_seen":"2026-02-25T23:03:30.596594Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass1-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 6028322\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"cf5ac8fca45e5d0409fef8923c179975\"\r\nLast-Modified: Fri, 23 Jan 2026 22:54:30 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78abeddb32fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"13ec753f0f7ac3f2e09cd8fb3d159fd6","sha1":"fb7c640e5ea1b3eb5af719aec31fe04a971c27db","sha256":"69c12f796a581c42a4dfedd57a615fdc0407867c0ab2577507c6afe5320d5b26","sha512":"79c55e8cc4ba19d93751be035f34ffea46704d06b08da0ee65a013c3bb40a7f3295156bc659db38df831457a65d53ed01bb79812b5903f66de13108d99c85e9a","ssdeep":"12288:WKLOlpdbVhOBbi61VlVP30w5qYO8DgLhC9bxl0zY6+wqzta5YpqXl5M0k+3uJH:WKS1/OBbi61/Vvx5qYONFC9VGM60S15M","tlshash":"b4f433f9941e38c2eb42b5617c2f12219dffb09b487f5fe24b40ba6a23dad4443d9458","first_seen":"2026-02-25T03:05:09.960469Z","last_seen":"2026-03-07T02:01:37.469286Z","times_seen":59,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":35,"dns":7,"connect":1,"send":0,"wait":102,"receive":23,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass2-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 8319275\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"ffdbd9550fb16af66a8cf7717da03833\"\r\nLast-Modified: Fri, 23 Jan 2026 22:07:07 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78ad4b5cc272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134896,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"8a28fbb89bbaf3ffed566ac78e4c9242","sha1":"7f9ab04f121529a659f4b648d7e401417b725ae0","sha256":"fc20653b520487b54de71c6e65f1be20d801db53c61770ae108f75afce64914e","sha512":"ec29b24f246c9e419746ea6c4e598d51fd9111ef52bd5ead71aaab43b45a5d1d3406aa050bbc2754995f06e54ba062e46612ed2edf7c68c6585e7d06769f7203","ssdeep":"3072:bf5Iz++emEBeefEU69n8DMeI7bRooWIWGSICgjYnsAafT:bfw++FELEn9n81uoNI/ssNT","tlshash":"d9d312d6b47f9b18dea42574375a5ac93dd3117abcfd3c320680982c9b8393a2f4c859","first_seen":"2026-02-25T22:00:14.535555Z","last_seen":"2026-02-25T22:00:14.535555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":230,"dns":0,"connect":1,"send":0,"wait":148,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.site/","fqdn":"yieldscan.site","domain":"yieldscan.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T21:59:39.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 07:13:18 GMT","end":"Sun, 24 May 2026 07:13:17 GMT"},"fingerprint":{"sha1":"0C:4E:66:40:B8:F4:60:33:E9:CB:46:29:D6:6B:E0:08:8F:CB:66:64","sha256":"D1:4C:91:4F:5B:E9:DA:E4:35:E9:BB:76:CD:9C:47:8B:75:54:51:5C:2A:C1:C8:41:91:1C:A3:59:C3:A5:12:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yieldscan.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 25 Feb 2026 21:59:39 GMT\r\ncontent-length: 0\r\nlocation: https://yieldscan.si/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37rpGoLVTZmI2x5o4JjeYEZbzwNOJufzJrUbMnlHqBcUWpJTYe5UJGUrY8MExPHfjfNKPCGe9XmKMiFGI4DMiJBfxx0zeEIWUU5KVn2e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d3a78985d4d8b0c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":71,"dns":38,"connect":8,"send":0,"wait":11,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/media/bb3ef058b751a6ad-s.p.woff2","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/media/bb3ef058b751a6ad-s.p.woff2 HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40480\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"9e20-19c8b12aa6c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDzz4CvzoF9Au%2FE6a%2FBdUEufJWCyoo%2B9SgcFqYJVmFF1uxYpc3sQJSCOjls5HPMRx8nuhxnJKl21VGQ%2BKSKf7lcIL33xCf5evQlNUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d3a789b8b9721e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.0","md5":"782150e6836b9b074d1a798807adcb18","sha1":"c18da6cb430f645ecca85d567c76364f73ca2013","sha256":"1e06740a02a443fb7f3eeda8fcaa685a0f6c620e3f01e6666e847295469ce3ad","sha512":"2763562220673d56764f7c9bb248157afc7e96d0b69c51a095dc176cf37f95b003804c36f55878b304355e79186dbdedd67b81cda298a50d9efa77a471789fb6","ssdeep":"768:PzCE916JZPUvQSPYkJLjtw/WaCzpvZaFiPEEU4Q3iEYbUuwngyMy65c:PzCm6LPGQxkHw/63aq24Q3dYbQnHm5c","tlshash":"900302d25148f93bed32a96a6dd6721d9aadc433cea835df0dd814d28c1bc5cf5041a4","first_seen":"2024-10-19T19:30:03.443351Z","last_seen":"2026-06-08T11:07:01.146336Z","times_seen":5967,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/favicon.svg","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 22 Feb 2026 20:06:17 GMT\r\netag: W/\"101-19c86f5bc49\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyKTVgO8zrinGZnlTDyzjscGkteOD2ovoNyuMdQw3DZJIZLe39gn5VCWBnB3tNHlpMZYJmifiJHlfJ7jf981PI8KZx1y5D0CYumtPg%3D%3D\"}]}\r\ncf-ray: 9d3a789efc3b21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059f787b603e0596f74489cc29133688","sha1":"7aa6b156c1ea0f7c7d7164a8bc1793d89d9f134d","sha256":"f25cb0609e5ca945254f6ec736059e6ec5e8eb5899914924602ffbf66898a42e","sha512":"64a2f80f12039a8031a9c25b8464812a20ae05c1bf165b054ddd2587bb084bc2b915946bd1625adac93a548b6cc27166000a4b01262c8057db2929411420e19e","ssdeep":"","tlshash":"5cd09529c0889705c70c4e02750d75e5708fd4cb5d45c914f6511539d4c7dd76ac635d","first_seen":"2026-02-25T22:00:14.513517Z","last_seen":"2026-02-25T23:03:30.550529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass1-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2031700\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"a22dc9face81ff1665651f1052a0a99f\"\r\nLast-Modified: Fri, 23 Jan 2026 22:55:26 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78abd9c049c5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"eeebcd74061a9dcd7dfad338ebe1d46a","sha1":"23148fe8cd0cfe6b4379103d03dabde517e9bfd9","sha256":"631978ce1c77fdc8360949130dc08a761d8a5cbf0b87875b7b1556706cabc068","sha512":"e151fd7805ccbf649173ed454739604bbb31cbd0daa1dbf057454363c74532c9a5c2310e516f087f21ef09e5cd7de46e91d67e01815274b82573caae494eff45","ssdeep":"12288:/2TA4vVLmF/WbRkFOppRWsWNbGSQHJAUOUsLOsWZssG5bxVWhseThDII57tSKnXb:/2TAaRkFipRWRSlpAzUWOsWWvbLqhDVr","tlshash":"41f4233ac26c0681a9a500112e6526604c337cbc54feea3383eddf3adb5b92d6da5295","first_seen":"2026-02-25T03:05:09.955526Z","last_seen":"2026-03-07T02:01:37.494267Z","times_seen":63,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":32,"dns":3,"connect":1,"send":0,"wait":126,"receive":113,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass2-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 21:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3967947\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"5a6a3867cbfe36845cfc495e5ca7f0ea\"\r\nLast-Modified: Fri, 23 Jan 2026 15:28:10 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3a78abe9e5b28a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"77c8cf44927733853063e12a9c919838","sha1":"e753f4fab619a4ad9c7e362f7dbca7d28c6af569","sha256":"0a412e42c896359759d6f578d9439fdfa66c8387c55de84440861ea71f463e59","sha512":"23e51c246c2f5f89fb1e53fad2bbba306a23f2a5d708b1b58dd8b8a60a382c9e38d475a7b57e90d617d2f87524659ca3c63da65c0248367925c1f5ab8bb570c6","ssdeep":"12288:VEznytgluvfiMoSnqYsA4Xp8fvndMMr95Hl42YSbZQxiVUSmj3+SSB9WV:avufiMHLszpYKMLHl4XSjC3h+s","tlshash":"8ff423e9846d4c8222510261295a753c2053b03eddf7bc39b1acdf9dc69ee3e8ce91e5","first_seen":"2026-02-25T03:05:09.958112Z","last_seen":"2026-03-07T02:01:37.50279Z","times_seen":62,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":35,"dns":1,"connect":6,"send":0,"wait":120,"receive":146,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana?_rsc=8kzk2","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana?_rsc=8kzk2 HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUEGFG9aVnrmNpTnxNcdY%2BIWHoMAtUHKlSFI9useL%2BrV9zoHBuQG7ptzR5GqCzLgZ1ly6rbarVPFZTZhoDlAWbiYyNgodjCqC3ZnAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789c3bc021e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17110,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (14472)","md5":"d12a919aba7ef68f1fb9d578ec3d1f85","sha1":"a0ed0a9425b51ecda15b503b22c7e2bae706e298","sha256":"d269874c95e411c72a4f95e361405c914f8e5f463fcccab5f458d342058c2597","sha512":"2ac1a66f87a84a0d0ba09f030e1124a7b4fc7bcac784829494023843138ddf4a316dba6cc00a799ef648490176609d342d3220ac0d40432fa9150463820e1426","ssdeep":"384:I1b161GmZXMvrWv24ST9eCI1ANLtBdnCuL7h/bB7XJs:I1b161G+MvrWv24STM11mLtBdnRL7h/g","tlshash":"db72dc3da7425cbcbfab0655552fda2d622d437bd7968dbae2fe6d11038a0352d03380","first_seen":"2026-02-25T22:00:14.537859Z","last_seen":"2026-02-25T23:03:30.539176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/117-7957cfc86edc1919.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:39.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/117-7957cfc86edc1919.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"1e5cc-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yawhKGMDJndAdvauACZHQBrgVebnViui9PEedCiL5XhmI0Kp%2FlMpU05Dq1KXAQNJD7u6qZmmEZSemJrAwCnxj%2F10x2ZqTsvDbTY1gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789abb7a21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124364,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-06-08T11:17:52.495209Z","times_seen":1714,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/main-app-75fafb3e997a8bf3.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:39.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/main-app-75fafb3e997a8bf3.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"1cd-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNg8SweLPd980QJE1Z6PVkyy5PRJW8YDAWZMNDUu55SI3ZI%2FetmzJOyESfOmAaY7LjDOxkFj2sINVIER3hE1SiNcdkTqnUMrl7dOGw%3D%3D\"}]}\r\ncf-ray: 9d3a789acb7b21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"da20220fd375a6efc059036860efc3c5","sha1":"f629b1c2c91c5e488c8a7035e10404aeaa4dd135","sha256":"049088cc15080db3240136d09533bf91d8cbae0f839350e3e8af874a3685e8ea","sha512":"49b7cf2e4bbdc4434fdad157185bad43add6cfee51147f24d44968aa6bb9c72f3a1d8cb70563b6dbb712027c7833ba22b6a85eec204f1a2d27fba8a7a0f11c53","ssdeep":"","tlshash":"8af0829a2b4c701f2913ad24fdd35c2e295e416428a718501a04ddb12c33aa893f1c39","first_seen":"2026-02-25T22:00:14.54243Z","last_seen":"2026-02-25T23:03:30.594453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/raydium?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/raydium?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQmJz5x7D0NN49kapYepBq%2BoCydDE2iP3FDtjmYlLpnCnB00%2B48vjLPbzGM76wpLbpA5O3VrGfO0dXWjckdchwd8ngDTZK4z%2FaJL0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dabf621e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"94dc5a72ed736c4e0e77a875970e5358","sha1":"777ce68326f6a937ba1caa149265b2c24bf99c12","sha256":"eb276c43b52cddc358efb80e5008c9dca989aa0de3bdab5ed14bee57f8f94e9e","sha512":"d06d6d7a18da037ddb8a8bda85bf0f4ffe0a806c0ed2c26f0da3cd33bcfafbd63889c257f6a81e56717637c9901607a892925c91ab7504f9083836d96cce2360","ssdeep":"","tlshash":"49c08c5202a47eaabc2d328694bcd00abace02cb004e0cf081f05a2627713b3148b6ec","first_seen":"2026-02-25T22:00:14.54414Z","last_seen":"2026-02-25T23:03:30.604962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/jito?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T21:59:40.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/jito?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:59:40 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqrF9i1tJhPqbWCiWH92naeYHlovu0aMTAAg9JpiUs0e4unUBSvieD8WT%2BMKGHn%2Bq8Mqp%2FU7ELWqXW8fg8htGpFRqV9Dl0nucWtvTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a789dfc0d21e9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"7391973e46b47943586c4bd0e46a636b","sha1":"e90261640fb9398d24771bbc56b4c187467a520f","sha256":"18b84a6879831f636a33d1bb1eff8de6e8b48ce3a0b3fdae3cb470df593bcefe","sha512":"1b0de01ff0cfc7528dddcc85e98882e939fb5793e9ef610486c58c5048f3de5cdc29fa6cac309c6c9409f212096cd4b0c9a274419e7191e90bba2a0005d6f9ad","ssdeep":"","tlshash":"29c08c1202987ee2fc2d3384103cd10a3aee12cb00cc047080f09926137a333144b5e8","first_seen":"2026-02-25T22:00:14.545626Z","last_seen":"2026-02-25T23:03:30.546385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/api/v2/binary","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T21:59:42.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"POST /api/v2/binary HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/octet-stream\r\nX-Session-Id: cace213cf8f81870260a221563ecce89\r\nX-Config-Id: 699b6bdb44e2554e27be7387\r\nContent-Length: 111\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 25 Feb 2026 21:59:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nO9rH7vbURwdma%2FKQifUmmv%2BRt1RYOyQCVIML%2F4fvCPisUMlxkhT%2FeFyL30xfgWQm9k9zkqYTQrB9UvAeTFcfmNXsVMYin8%2F9%2B4p32HtnAcccMKulRvBHMNESIl6PBssIxNE9hv%2B\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin,Accept-Encoding\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::hq86w-1772056782505-7dce0624c2ec\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2a812a1a7fb9584d8d2bef4816c85396","sha1":"c441d53ffdd026e2a1902e4c1a5df6ca81b2a6c5","sha256":"446e08596ff3f091571d773f44ec722163e0cbefc6b7c896dfb709b81d5b60de","sha512":"659ff5b1b08f1de05fc8ed2fae10314a86622c7875ec65bfbb2f984b2d0dd09ee23892728446c2a2679afaa4f5e5fc34d1577f81a01f4eec55c4cc7a9be3c133","ssdeep":"","tlshash":"0a11b56e416b1b0ef2c7d2b1429195d1e04ab267a5e87c02983592a6e10baf4b0028f8","first_seen":"2026-02-25T22:00:14.547252Z","last_seen":"2026-02-25T22:00:14.547252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}