{"report_id":"05de507b-d3d3-464a-8502-352b2be96247","version":0,"status":"done","tags":[],"date":"2026-09-08T18:40:07Z","url":{"schema":"http","addr":"dapp-raydium-route.com/","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"172.67.191.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dapp-raydium-route.com/","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"title":"Swap Raydium","dom":{"size":104947,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4038)","md5":"6bc9907a7f1d966aa9d77c01f4b4159a","sha1":"d2b3033a3c391ebb737e30c6a6cdcfe30869205f","sha256":"f5235b0f7a671530cfcea8e2d434e341164501999b4794097ddf3cebef9e9e5b","sha512":"5c3286843a1fe5a97b38de108d77215ec275bfac3fa7d6bd7948b6876b666d330c45ebf5138510adc6b336a3e38751a4f815b481682d0ad7d9c8749a48c1ea74","ssdeep":"1536:pMEuM61O66O7F6a4756aL+56aZoN6aSD3fOLefSermO7nO4x4+MqGnME:naTaLaTayZE","tlshash":"a3a350f032f056a5905b4fb09332790a5e49b6939fc5978cb25c1760efb2db7a4c7888","dom_hash":"domhashca3f3ad9e698f3d3ce16457c2830d3f7","first_seen":"2026-09-08T18:40:09.620214Z","last_seen":"2026-09-08T18:40:09.620214Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dapp-raydium-route.com/","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"172.67.191.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T18:40:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dapp-raydium-route.com","ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-31","domain_rank":0,"first_seen":"2026-09-08T18:16:42.292552Z","last_seen":"2026-09-08T18:16:42.292552Z","alert_count":12,"request_count":12,"received_data":1160956,"sent_data":6082,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.geckoterminal.com","ip":{"addr":"104.18.0.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-08","domain_rank":2852392,"first_seen":"2023-02-28T02:54:20Z","last_seen":"2026-09-08T18:16:43.010548Z","alert_count":0,"request_count":1,"received_data":32449,"sent_data":626,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"RackCache","description":"RackCache is a quick drop-in component to enable HTTP caching for Rack-based applications.","website":"https://github.com/rtomayko/rack-cache","common_platform_enumeration":"","icon":"RackCache.png","categories":["Caching"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp-raydium-route.com/js/ray-chart.js","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15eea4317b529bbd6bf39d1ea4662e80","sha1":"c74327c2112fe59eec71fc36d4084deccd586048","sha256":"6354744472651b322f69967940c743d61355156ce093e3e71dc8b2aa282f1aa8","sha512":"e4898268e53c3d880b222013f210eac323e4d5bf5f5da7cb826589b453d3115b129e87a8ab0ab3815de8e018172f0c11f5f13e557c79a5e27dd60b48b39272c4","ssdeep":"96:+Q6QEcCq+UrBKXPM5rCBAbf87MurppZsvUQPtnnomvFu7STzjlalPgL278n+LA:+sDeUrqP3vrppZsvUQFoIFu7SolPgaKx","tlshash":"8aa1756dedb321671033a1ae598f9509b3768103150adb607afce1503f9462d627affc","size":4750,"data":"","first_seen":"2026-08-31T15:14:25.489826Z","last_seen":"2026-09-08T18:40:09.626983Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/secureproxy?s=%2Fipfs%2FGaiNguosWdVhBh2R6kqaeAdaead10cfb883373262e58d8ae5b1144%3Ft%3D1788892776231","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6c9cdd53f50c5177f51264541a3bb72","sha1":"74bcd9ca4a3b6135d017125dfb3b0da47a9f91a9","sha256":"e08789aad2046d205a7ea130fa3654d206520d41a0b01e75702f0348c18cfeba","sha512":"8c3c6533e38719a14636d140605a8828c6dcd7fd660dd59892cd0ae1f4cfa3f83a4e67a9b3d535c5a71e3c6ee3b935f1546e42fe55e64740f63fe33b06f3a83c","ssdeep":"6144:ch5gDTtrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csBq9NWCEiox3Ti/ESVPHSyyA","tlshash":"d0d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","size":645584,"data":"","first_seen":"2026-09-08T18:40:09.629885Z","last_seen":"2026-09-08T18:40:09.629885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fafc52d19d51969f167f3596874c16ee","sha1":"630cf4bbc81106b3b2a26d516a5823a143cfc754","sha256":"81e6895b56980c900c94109f41ac8d3840c553e9e472326f234fa0d2fee223c6","sha512":"267dbfb52a711bd46859b7eec59ac9bfc0ca5a53bce3cf20f29112a2e62a66f4af5ff3eb5519ff3bfbf4ca257e4514ed0eef73de4e2afd26f61d481f0a607d17","ssdeep":"","tlshash":"60c08064d9704fa0980804b6637d759475d0ad7c5087649ac9fd8e4f6c4df415f48551","size":180,"data":"","first_seen":"2026-08-31T15:14:25.502238Z","last_seen":"2026-09-08T18:40:09.637686Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/js/lightweight-charts.js","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffe8aba3ef64da985404fba51099cfa2","sha1":"255e8b5ec12ec684025250551a441214638c178d","sha256":"9337118a31f17366952a4d7dc21b32fec1b741325401a1629ad3a1bc4ede6a48","sha512":"2c0f384f532256a38976d08b220275447c3bce24ca07d4c2be2ec6783fa0e51c207831faf7f80d45c6af03d9438d1c8fd9834bbedffc6b025d0823e546f94227","ssdeep":"3072:irWhrJ14l1UJnhIUMUIdJVcAAPoI49UFQmtUPBQjgaMBpqvgcD8:irorJAGJnmPUIdJVuoI492QmtUPBQjgZ","tlshash":"0df3c6527296f46203f186f604760402f31a7889398b856cb5bdddd73c9988e72bef78","size":163682,"data":"","first_seen":"2026-03-29T20:18:10.697651Z","last_seen":"2026-09-08T18:40:09.62542Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/js/ray-sol-seed.js","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06cdd6ad83c4cb583a123e402b5d7b1e","sha1":"549c6b47a82d522c4dfb623d58d4658ad881a5bc","sha256":"a15028e63ac2ab1db755c5eeb8cd585d936ab4281993d71b18c099ca90c0ae44","sha512":"3df09234b6fb79162f8bc1dfad7a57642fadd90113d632ae13b093acb8b212ad8382e6bb8116ccbb268f84e27b0ae8c57b3efb871025ff7aa0f3f2bdf1bf6486","ssdeep":"384:bt/Pr5HI4jBKKDJeUhz9riFJ0qcKeg5kqU4DKlqyVRJ:bt/Prl5hxoavg5kqUGIJ","tlshash":"7ac21fc85faccad4fc9993601fce9e588e770036dece18e85066f960d666ed7121cb42","size":27672,"data":"","first_seen":"2026-08-31T15:14:25.484074Z","last_seen":"2026-09-08T18:40:09.626219Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dapp-raydium-route.com/","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T18:39:35.875Z","timestamp":1788892775875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:45:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYCZ7b0NWHG%2FurnYuYAB30zlCAWdgmjxt1DNSxVHoO2z3S3A8Y%2F0sA7%2Ba1WfyFBY6%2F8wP3j6SJ%2B7zrdXwkNxOsGg%2BLnDGdEk0L8s95SB6Rh1Udv4RlZ6wtO6QObRJCh5XmPtPVwmvTp3\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a38013a9aa2e31a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101873,"size_decoded":18045,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4038)","md5":"882983e0d5f70a9ce0c4d0db7e022e20","sha1":"8f6eb692fc80495fe5b96d49a7c96e452bb9d4be","sha256":"c7205c2dc163a98503f5b6f916ce99cfcd97460af92030c45d8179af051e36ce","sha512":"bfd77e7104f84be010b608940e06dde877f203099fa2394a5179848f118d0ecd45a2776353d22a86de910825a1b9293f7206fc7b0997a8dd38a0ca9d3f615250","ssdeep":"1536:pN4Hr61O66O7F6a4mm6aLN+6aZ366aSu0fOLefSermO7nO4x4+M5GCI:maPaza7asb","tlshash":"83a340f032f056a5905b4fb0933279065e49b6939fc5978cb25c17a0efb2db7a4c7888","first_seen":"2026-08-31T15:14:25.457756Z","last_seen":"2026-09-08T18:40:09.623295Z","times_seen":4,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":19,"connect":37,"send":0,"wait":162,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/style.css","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.255Z","timestamp":1788892776255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:44:30 GMT\r\netag: W/\"6a93369e-13218\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3xmUogCaqinXD2U0c1mPshMJpHOaXKRl5QMqK6R6C0BIbWXRrBGWAsJUhUpB0GajuIV%2FxS0BLfwSp%2Fhv9HrhYaonYVAHEKbObOxyo2QEPnKGHjSJhQEw5UUjapMGREFkeah8Av0DC%2Fd\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a38013abaa9731a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78360,"size_decoded":17934,"mime_type":"text/css","magic":"HTML document, ASCII text, with very long lines (15504)","md5":"18b2adbe8a1a8fce7bc1e8eace4e0759","sha1":"3e8e454b3fe0791116f3407254ff0e588cbc43ed","sha256":"81434e8e149851143e397deb0587ba1e1567ff36a635415effb1c17e16240660","sha512":"b343fa4e571e584c77a67474ec6ee0938c7b8a0751df964e5a2fd198c2b15f2734b59976fdf4254744d49d42916c16e8e16958e9391043eb11a5e186588d499b","ssdeep":"1536:h+dYy8cS5zRqlmeCkoUHDLgfgq1+8Da6Kzq8CarUn:dmS5tqMeWcNFDxW","tlshash":"ab7363215220e1fc5c23ea0923b99f2ab318b815ad415bbf77e151a8cacf6f4155fe13","first_seen":"2026-08-31T15:14:25.477158Z","last_seen":"2026-09-08T18:40:09.624393Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/js/lightweight-charts.js","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.257Z","timestamp":1788892776257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /js/lightweight-charts.js HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:40:28 GMT\r\netag: W/\"6a9335ac-27f64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLtueTNLHesB8C%2FPdfWcm%2BUgYQycjh%2F9vfdQTrI0zfOGIFmrHr08LNpb5EYI0hg7lKp%2FKkfxbhYsTfpV51cJ6t3F%2BHtazQOZWCTAJIyFuhy471Yn8WO5RH3JwKgZUbjo4BSxgf8%2FAJdQ\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a38013abaa9b31a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163684,"size_decoded":59157,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65349)","md5":"ffe8aba3ef64da985404fba51099cfa2","sha1":"255e8b5ec12ec684025250551a441214638c178d","sha256":"9337118a31f17366952a4d7dc21b32fec1b741325401a1629ad3a1bc4ede6a48","sha512":"2c0f384f532256a38976d08b220275447c3bce24ca07d4c2be2ec6783fa0e51c207831faf7f80d45c6af03d9438d1c8fd9834bbedffc6b025d0823e546f94227","ssdeep":"3072:irWhrJ14l1UJnhIUMUIdJVcAAPoI49UFQmtUPBQjgaMBpqvgcD8:irorJAGJnmPUIdJVuoI492QmtUPBQjgZ","tlshash":"0df3c6527296f46203f186f604760402f31a7889398b856cb5bdddd73c9988e72bef78","first_seen":"2026-03-29T20:18:10.697651Z","last_seen":"2026-09-08T18:40:09.62542Z","times_seen":9,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/js/ray-sol-seed.js","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.258Z","timestamp":1788892776258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /js/ray-sol-seed.js HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:41:06 GMT\r\netag: W/\"6a9335d2-6c18\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7kwlV0CTCN36cICozOn%2BU8d6xzY2yS%2BUPc68xEpv1NKI6jmdHHBZud8xltMKgJZICe7zslnGfwadtF14V9fDDSoW7KVaGk9rS48i64CH1KHYm5ac95o8je3TCbXTFs0yqn%2FkAU3dRRn\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a38013abaa9c31a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27672,"size_decoded":8487,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27671)","md5":"06cdd6ad83c4cb583a123e402b5d7b1e","sha1":"549c6b47a82d522c4dfb623d58d4658ad881a5bc","sha256":"a15028e63ac2ab1db755c5eeb8cd585d936ab4281993d71b18c099ca90c0ae44","sha512":"3df09234b6fb79162f8bc1dfad7a57642fadd90113d632ae13b093acb8b212ad8382e6bb8116ccbb268f84e27b0ae8c57b3efb871025ff7aa0f3f2bdf1bf6486","ssdeep":"384:bt/Pr5HI4jBKKDJeUhz9riFJ0qcKeg5kqU4DKlqyVRJ:bt/Prl5hxoavg5kqUGIJ","tlshash":"7ac21fc85faccad4fc9993601fce9e588e770036dece18e85066f960d666ed7121cb42","first_seen":"2026-08-31T15:14:25.484074Z","last_seen":"2026-09-08T18:40:09.626219Z","times_seen":4,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/js/ray-chart.js","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.260Z","timestamp":1788892776260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /js/ray-chart.js HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:41:44 GMT\r\netag: W/\"6a9335f8-128e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pr9KBJMSqPIKRpHQj2hZZ3X3YaUbjAoaP2RHhLeecX%2FtmdMZ4jzkRfQUMPqAijzrgo34yn8Zyc6PrRhlKauL2TzVOXMfSj9cfcl0nz6eq%2Bt2yUWwG8KPpO7wfxMM0yzqihhvdKplzoWy\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a38013abaa9d31a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4750,"size_decoded":3089,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"15eea4317b529bbd6bf39d1ea4662e80","sha1":"c74327c2112fe59eec71fc36d4084deccd586048","sha256":"6354744472651b322f69967940c743d61355156ce093e3e71dc8b2aa282f1aa8","sha512":"e4898268e53c3d880b222013f210eac323e4d5bf5f5da7cb826589b453d3115b129e87a8ab0ab3815de8e018172f0c11f5f13e557c79a5e27dd60b48b39272c4","ssdeep":"96:+Q6QEcCq+UrBKXPM5rCBAbf87MurppZsvUQPtnnomvFu7STzjlalPgL278n+LA:+sDeUrqP3vrppZsvUQFoIFu7SolPgaKx","tlshash":"8aa1756dedb321671033a1ae598f9509b3768103150adb607afce1503f9462d627affc","first_seen":"2026-08-31T15:14:25.489826Z","last_seen":"2026-09-08T18:40:09.626983Z","times_seen":4,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/images/ray.png","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.269Z","timestamp":1788892776269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /images/ray.png HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:27:52 GMT\r\netag: \"6a9332b8-767\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHG6IZTPBWYuW1Xo92R87C3rEXfH5tw3jmRE3LvkUs2zucppnsg6wDjI1rf6fmQ1bUSouaPe%2BZaWIlnGXmwbBSJHak6m72THc9nnQw5B3GMGx1M%2F7dgASnVEtivTWeuJ5cYy0WAntiGr\"}]}\r\ncf-ray: a38013abbaa231a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1895\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1895,"size_decoded":2830,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0f2aafa3e91d31d9ce21fc262459f734","sha1":"e60cd4cad231a212d794daeec4481f8025a0f5eb","sha256":"bd88c2af1b4dcce762560d444560461d594d390e0bf91e42c7f98c413b764965","sha512":"081bd5e253df0da2eae909a0b8f26d7995d07d9423258c3c1820ef0230b38dfe64731b76b81366c08f0c7101eefe727ff19767b0ee4338a42c0625938384618a","ssdeep":"","tlshash":"a5413ba0ad869d30c9e150f52d84c29acc73158a54f797a32c6a32e95e18029f0963ee","first_seen":"2025-07-04T10:15:14.821933Z","last_seen":"2026-09-08T18:40:09.627768Z","times_seen":24,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/fonts/font_b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec.woff2","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.337Z","timestamp":1788892776337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /fonts/font_b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec.woff2 HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:25:06 GMT\r\netag: \"6a933212-c068\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXsh%2FJRwzqNVdSw7cR18ZPzpol9zri689inFg0ML%2FGRyXWEvENGAfDo1%2FKT%2BUyfaIaag99tpfTEXvJXgw2EDjN3hCqnLBntjW9P77FUXmdUOMm4WqtlPoGjQbxxVFyHF1sYmF5MEdJi7\"}]}\r\ncf-ray: a38013ac2ac131a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49256,"size_decoded":50201,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-09-08T18:40:09.628943Z","times_seen":581,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/fonts/font_b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec.woff2","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.338Z","timestamp":1788892776338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /fonts/font_b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec.woff2 HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:25:06 GMT\r\netag: \"6a933212-c068\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiuWku1pX5balt9CjA3T98h%2FSU%2F%2FpwGpWQ9Av0ZuiFOXhIs%2FCc%2B0phzElhpOULAwXe51LtQFq0xqPboWDGuOePdiE65ssFL6h5QCguyzFOM9YOEZqcI0Hz6mj%2Fv51TVmicVVLj9F%2FyLO\"}]}\r\ncf-ray: a38013ac2ac231a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49256,"size_decoded":50207,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-09-08T18:40:09.628943Z","times_seen":581,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/secureproxy?s=%2Fipfs%2FGaiNguosWdVhBh2R6kqaeAdaead10cfb883373262e58d8ae5b1144%3Ft%3D1788892776231","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.254Z","timestamp":1788892776254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FGaiNguosWdVhBh2R6kqaeAdaead10cfb883373262e58d8ae5b1144%3Ft%3D1788892776231 HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"9d9d0-dLzZyko7YTXQFxJd+zsNpHqfkak\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=j5XwLW59lbMNxV4ic6kg1A.js\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2026 18:39:36\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 33737751adec5c070b60805e6cb207f3\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5X0hVWc%2Fv7S5jwTO6MgWjHTvUXafEcnqco8z8EOvjhfrIO3XbBqp7M4ir5Vnc19KTgruj3KALlOmt5lignQXndNPvraZovII7Uf6bCyNabgMAnfLMMb3uJ39z7fR66gZ1lfBNhbVSIq3\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a38013abaa9431a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645584,"size_decoded":141236,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e6c9cdd53f50c5177f51264541a3bb72","sha1":"74bcd9ca4a3b6135d017125dfb3b0da47a9f91a9","sha256":"e08789aad2046d205a7ea130fa3654d206520d41a0b01e75702f0348c18cfeba","sha512":"8c3c6533e38719a14636d140605a8828c6dcd7fd660dd59892cd0ae1f4cfa3f83a4e67a9b3d535c5a71e3c6ee3b935f1546e42fe55e64740f63fe33b06f3a83c","ssdeep":"6144:ch5gDTtrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csBq9NWCEiox3Ti/ESVPHSyyA","tlshash":"d0d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","first_seen":"2026-09-08T18:40:09.629885Z","last_seen":"2026-09-08T18:40:09.629885Z","times_seen":1,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/images/sol.png","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.263Z","timestamp":1788892776263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /images/sol.png HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:27:52 GMT\r\netag: \"6a9332b8-327\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rSCBGqUj5f5IBGRLXSwVdn5bSiSsyEbGDs1%2F365nmbfBdEzRgsdTOqkf%2F%2FiOpeEDpAwFuKqQM6bSyF8qDMjh5iFTNoitAmUL50MiJ5GBgfDr4p1Zu91G4TMZf%2Fu0UmpMQm%2FSFTcJEUkE\"}]}\r\ncf-ray: a38013abbaa131a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":807,"size_decoded":1747,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"6516a7f9cec0e6e2ca89df62996fd183","sha1":"67099434c3ea122cc620669b7b0b9c63b3986ebe","sha256":"857e2c245012caea394efe6fcf4f3b2e9c9abb52f79df502fed0d5480cc4d331","sha512":"e9805d3fc274a7a167215d9047251956a2cb966a062323e1ace6e296e390cdbfbf488796c86d59948aef10830d6622962f6c9faf93319e0ae683cf5c06fd47ff","ssdeep":"","tlshash":"8901868517861e7ecc0ca77d4217ea18563dc73dc6328ab39c2a501877b9f00a7b4745","first_seen":"2024-12-23T18:04:32.312731Z","last_seen":"2026-09-08T18:40:09.632388Z","times_seen":305,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.geckoterminal.com/api/v2/networks/solana/pools/AVs9TA4nWDzfPJE9gGVNJMVhcQy3V9PGazuz33BfG2RA/ohlcv/minute?aggregate=15\u0026limit=300\u0026currency=token\u0026token=base","fqdn":"api.geckoterminal.com","domain":"geckoterminal.com","tld":"com"},"ip":{"addr":"104.18.0.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.565Z","timestamp":1788892776565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geckoterminal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 00:49:03 GMT","end":"Fri, 20 Nov 2026 01:48:59 GMT"},"fingerprint":{"sha1":"B0:1C:F7:38:3A:86:25:B5:39:0A:2D:34:66:BF:0E:C0:CE:95:ED:C4","sha256":"CA:96:28:4F:5D:84:40:6A:D3:82:CF:B6:E9:35:90:16:23:58:90:5D:F8:F3:D2:0F:EF:46:6B:7B:AD:2D:EE:8A"}}},"request":{"raw":"GET /api/v2/networks/solana/pools/AVs9TA4nWDzfPJE9gGVNJMVhcQy3V9PGazuz33BfG2RA/ohlcv/minute?aggregate=15\u0026limit=300\u0026currency=token\u0026token=base HTTP/1.1\r\nHost: api.geckoterminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dapp-raydium-route.com/\r\nOrigin: https://dapp-raydium-route.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:39:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\netag: W/\"677da2919e5629363cff2d5c47d62e5b\"\r\nx-request-id: b5df1b9f-d135-4c69-988e-7fe51b50f1ca\r\nx-runtime: 0.366594\r\nx-content-digest: b770ebb288620f3625b27509c4087bc1d8df7baa\r\nx-rack-cache: stale, invalid, ignore, store\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nset-cookie: _cfuvid=IB208qoojXvCsvWfecbgqsdillmXvoSI1ZkfkzM4VnM-1788892776.5905983-1.0.1.1-yqMWgWtnDcjQC_XNoqsbCyIvY9f_4Mx8l3iTMMVmXs8; HttpOnly; SameSite=None; Secure; Path=/; Domain=geckoterminal.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a38013ada96a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_cfuvid","value":"IB208qoojXvCsvWfecbgqsdillmXvoSI1ZkfkzM4VnM-1788892776.5905983-1.0.1.1-yqMWgWtnDcjQC_XNoqsbCyIvY9f_4Mx8l3iTMMVmXs8","quoted":false,"path":"/","domain":"geckoterminal.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=IB208qoojXvCsvWfecbgqsdillmXvoSI1ZkfkzM4VnM-1788892776.5905983-1.0.1.1-yqMWgWtnDcjQC_XNoqsbCyIvY9f_4Mx8l3iTMMVmXs8; HttpOnly; SameSite=None; Secure; Path=/; Domain=geckoterminal.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"RackCache","description":"RackCache is a quick drop-in component to enable HTTP caching for Rack-based applications.","website":"https://github.com/rtomayko/rack-cache","common_platform_enumeration":"","icon":"RackCache.png","categories":["Caching"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}],"data":{"size":31198,"size_decoded":12123,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aab73b056ce7997220f1f4212d4208a2","sha1":"b770ebb288620f3625b27509c4087bc1d8df7baa","sha256":"677da2919e5629363cff2d5c47d62e5bf785a1a7c851a6badbd7865340006f8c","sha512":"fa22ffb0a01cd8a1d50412eb638c24e01a4d19f8b2ff02f2441a13e0dd09fdd83f28db47c6c612515372ed6c59fcf87301007c8d1b46bc16ed40a1ba7f1187a6","ssdeep":"384:BSI1mGf3u/O8kE8yf6QNH+xKAhf1fhF5OpVsAnpTjV6OX7Fjg88:UIg/H4ykh5+mAnpTjT7t8","tlshash":"d8e26ff8579c45d5fb0fe39c27ff5a799233102b69d608c89a7f48a68921ad30f0c549","first_seen":"2026-09-08T18:40:09.633387Z","last_seen":"2026-09-08T18:40:09.633387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":12,"connect":10,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/images/image_8349663b28875435a09ef425cd95d64d5bc21b1b.ico","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:36.766Z","timestamp":1788892776766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"GET /images/image_8349663b28875435a09ef425cd95d64d5bc21b1b.ico HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dapp-raydium-route.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:36 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Sat, 29 Aug 2026 19:25:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bm20nDka0qQh2SzTxETIX80LEf%2FUd4Dy1ubm7Gn%2FB6CB3aYBwl%2FeKe2PoTUQSkNdSS%2BEBYT14KA3Pe0ZimqoEZ%2FrQ8IXZY%2BiPhk%2BfWvpG42Ltw0jIxqvP%2FTsQ%2BPQv4VlDvG7GepaEK9C\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 1405\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a933212-634a\"\r\ncf-ray: a38013aedbfb31a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25418,"size_decoded":25361,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0852ee59bec12689159c352345987cfb","sha1":"8349663b28875435a09ef425cd95d64d5bc21b1b","sha256":"536f8422beceeee32e1021494bc2119519fbc649688da9efbdcd06b9359536b4","sha512":"b38726e698ba80f7cf36ea3f415d68ba92388a1aca057226c1772289d73e12672d6f93084f6c423df4ecbe838d961ea7576bf297b9658a1b8b9e043a16fa0be5","ssdeep":"768:T1+YSPSYeL3kil54VS8WjTmCW7MwVSkGg:T1/SPSYeLJkWj6cwVSZg","tlshash":"48b2e17239b94e7b6118061906b32be42a239ab2b50fdb17554aec41723dfdad13c72c","first_seen":"2025-01-19T12:16:37.598644Z","last_seen":"2026-09-08T18:40:09.635673Z","times_seen":387,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-raydium-route.com/secureproxy?s=%2Fjmpd%2F","fqdn":"dapp-raydium-route.com","domain":"dapp-raydium-route.com","tld":"com"},"ip":{"addr":"104.21.36.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dapp-raydium-route.com/","date":"2026-09-08T18:39:37.517Z","timestamp":1788892777517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-raydium-route.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 14:35:19 GMT","end":"Sun, 29 Nov 2026 15:32:45 GMT"},"fingerprint":{"sha1":"D3:99:3E:68:26:9F:3B:EC:87:3A:2B:4A:21:D2:D2:18:C4:89:16:F2","sha256":"D0:26:59:AA:79:F7:E7:15:76:CE:BB:20:53:5B:81:67:FC:D3:E7:EE:E7:C1:20:8F:47:0B:AC:F1:6E:41:78:76"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: dapp-raydium-route.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dapp-raydium-route.com/\r\ncontent-type: application/json\r\nContent-Length: 1300\r\nOrigin: https://dapp-raydium-route.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1300,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB2QIAAxAAEQARAzEDJwA6AyAAAQACSgMAAO8nhn2XtsKCAUmLfNQmZLsmns8fcJACAAC6oUUsBRXMUYewuhRq2ml_V0rlDVXyeRwZSC-u7bQdEL0eHUQcxEjhmVq_k4wi5v4KNy-_trxFdDus48oJAs8L8qKf0I-1pZrbKUji5AXqn5gTept_kqw-lOLCBQDblMrtnbwZfop-siKf_fv9-SVLah6Fg5sq_dQWb3B4IdfvaQDOnxks-SazSpkdOwyPGLwZsxmZA303AUWUEf5-1dQndr4YUJsHnTgSmGBLVqZUe3krlegvbIkHc7iYNiF7B58qoKwR7ufugwL3sPMo7tVfJKzTESYU9hsSSUVVOAmQTg7nXXj4jOz5ZMdUk_3z-lg7p90YtRqPvbjY1XWSL2_0_YmGUgU2njDjSN7ISppPJLA3PnrucP6_IuXWk8MKxhftTH_3tjmmGdOEGC6lkRS2yPWRVT_nq6BTyreZDI7N-UCKFoOCXFTSGb1LOICb9flm--J3yNEADSt6QW1mMZQoXArylY6bNJ0fsTsYscPekSRF7bhgiWM5MIdcBmFYREaxekO7MaJerQlx3-AkIJo0fumRSLynIVqXfWQQDx_CDNannCt1tv9Kh7zMIyEzMIHNG7g3_zZikUR6Gb_YjcFvGxYMnMJnBNH7biVLC0pxEXJHJowUVi7DkvXPLIwq_EeLW9pe18buji_DBOmZOT6h6omjjDQIsFbELLwdWyoCYDuFmzdOUY_JajdUQrSikIvG8Id3dr-w0kpAmK30QVXBBbTLX9XBxYByG7pPBf3tWrlaiSYEaFt9zdOCvjh31qvYnxFzP_andQGMtLLB6bD6x9i455eJ5PvhdHg2o3l1paD82iqQ1pwrZvU0d4h3z2rF-iX-egztkLq2gh77nWCIloMihX7Ujy_Jpy5r3r67EF7CFIcvWBcT7ASIBWVFR9bVkCrHpNgYF-HKPHJ_DX6hXEugm2fGU1U5XxcnRAA5NpZYXweYCRWR-74OxhQXo1238OeICWYdTNqESn0SX0YaKGuRrCLfPl8z1G8yxVGgUrGAJPPMqNAyDn2DWGH1KzFhXKGMLZbt_nfeX2fGpFnmioES5nxfvYGTtjO-uhmsYDU_Suqj5y0xhInn-SoGKLHBwXEtkVBsNO4pthXlbmNk8h_xbl48uoIQKixBY7zZX5P-QFGYCZBfJPhrpaZkOfqQEA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 18:39:38 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1788892837611\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 09/08/2026 18:39:38\r\ncdn-edgestorageid: 1445\r\ncdn-requestid: 66d802937d06cf3d15acfa7681a44930\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gv9V5hO7a7kJX9pAAwNh51Y0NApQnwVV8vOiZXjhCAzV%2BWwy9raQqblQI5Yo6CMtqLoi3G0fb1RsB4fDj0C0esXQjZWh7nsc%2FBxQeywxYz55m%2FXHAipug0nPaFgKmdfSZHvGNVjHjfYW\"}]}\r\ncf-ray: a38013b38dd431a2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3287,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"dapp-raydium-route.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}