{"report_id":"07feb8da-e2cc-48a9-bcb6-4f0e54a4fc26","version":6,"status":"done","tags":[],"date":"2026-03-25T15:36:16Z","url":{"schema":"http","addr":"fragment-verify.com","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"172.67.138.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"title":"AMLBot - Advanced Wallet Analysis","dom":{"size":18702,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2528)","md5":"ae84613df8c8e3c9d2cb1ecd291e6e25","sha1":"1814e0d4bc0ae88a8c2a148bcbc3885154308a16","sha256":"5a1a2de8870e14ede31b55509c930edadcef7ed1dbadee343920cec83dac4b0d","sha512":"2458208f8fdd66988f8b1b28356dcb24cdadc812b8bca556067857df4251eb49c65051a505cbda7791b78ab15e03a4497d63022fab2aaec1ed328cd1f458d080","ssdeep":"192:CVK4M9LWK05cb6beuKdYEw5s6Y6FyJbDUd3lwevc+eIPKzm9ST6wZ2IxdmfR7EIB:17MCDrT62fxdShNB","tlshash":"3082e42d9be30116a01399a9abf743553738c403ca0ec9a97b9d6314cfc75c9a8e771e","dom_hash":"domhashd176afba12a9e90467b615fb2351f493","first_seen":"2026-03-14T12:31:16.792877Z","last_seen":"2026-03-25T15:36:23.350923Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fragment-verify.com","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"172.67.138.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T15:36:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"fragment-verify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"wallet.tg","ip":{"addr":"45.196.29.102","port":443,"asn":21859,"as":"ZEN-ECN","country":"Philippines","country_code":"PH"},"domain_registered":"2023-09-25","domain_rank":62080,"first_seen":"2020-01-17T23:26:36Z","last_seen":"2026-03-23T03:09:36.59624Z","alert_count":0,"request_count":1,"received_data":25860,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.bitgetimg.com","ip":{"addr":"52.84.50.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-05-18","domain_rank":1433117,"first_seen":"2022-11-16T14:43:35Z","last_seen":"2026-03-22T16:58:37.318434Z","alert_count":0,"request_count":1,"received_data":2957,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fintopio.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-12-05","domain_rank":363276,"first_seen":"2023-04-10T20:03:08Z","last_seen":"2026-03-14T12:31:12.306709Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":445,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.mytonwallet.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-28","domain_rank":785922,"first_seen":"2024-07-22T10:39:01Z","last_seen":"2026-03-22T16:58:38.45812Z","alert_count":0,"request_count":1,"received_data":5475,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-03-18T17:51:41.023149Z","alert_count":0,"request_count":5,"received_data":202216,"sent_data":2476,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fragment-verify.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":907604,"sent_data":1819,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xtonwallet.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-06","domain_rank":60292,"first_seen":"2022-12-10T21:12:16Z","last_seen":"2026-03-22T16:58:37.182955Z","alert_count":0,"request_count":1,"received_data":8754,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"tonkeeper.com","ip":{"addr":"104.26.2.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-20","domain_rank":36988,"first_seen":"2021-08-24T23:38:14Z","last_seen":"2026-03-23T03:09:36.791011Z","alert_count":0,"request_count":1,"received_data":2060,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wallet.ton.org","ip":{"addr":"104.26.14.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-11-13","domain_rank":654858,"first_seen":"2023-12-21T09:52:39Z","last_seen":"2026-03-22T16:58:36.033666Z","alert_count":0,"request_count":1,"received_data":6425,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tonhub.com","ip":{"addr":"104.26.1.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-27","domain_rank":39539,"first_seen":"2015-09-27T02:20:45Z","last_seen":"2026-03-22T16:58:35.594742Z","alert_count":0,"request_count":1,"received_data":70181,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"app.tobiwallet.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-01-23","domain_rank":1452188,"first_seen":"2024-10-26T08:36:50Z","last_seen":"2026-03-14T12:31:12.339875Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.okx.com","ip":{"addr":"52.84.50.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2001-07-03","domain_rank":459285,"first_seen":"2022-12-01T01:12:01Z","last_seen":"2026-03-22T16:58:37.115907Z","alert_count":0,"request_count":2,"received_data":13622,"sent_data":937,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.binance.com","ip":{"addr":"52.84.50.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":10443,"first_seen":"2017-06-24T14:56:56Z","last_seen":"2026-03-20T09:30:01.824951Z","alert_count":0,"request_count":1,"received_data":584,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"deal-work.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-27","domain_rank":0,"first_seen":"2026-03-14T12:47:17.744939Z","last_seen":"2026-03-14T12:47:17.744939Z","alert_count":0,"request_count":7,"received_data":12358,"sent_data":4239,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"img.gatedataimg.com","ip":{"addr":"52.84.50.32","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-06-22","domain_rank":1518807,"first_seen":"2024-10-15T18:58:58.853052Z","last_seen":"2026-03-22T16:58:38.371886Z","alert_count":0,"request_count":1,"received_data":8548,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"public.bnbstatic.com","ip":{"addr":"52.84.50.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-03-27","domain_rank":355007,"first_seen":"2020-11-23T08:17:23Z","last_seen":"2026-03-20T09:30:01.674924Z","alert_count":0,"request_count":1,"received_data":3892,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"s.pvcliping.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-07","domain_rank":1545203,"first_seen":"2020-04-26T05:25:14Z","last_seen":"2026-03-22T16:58:37.651955Z","alert_count":0,"request_count":1,"received_data":1407,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fragment-verify.com/icq-drainer.js?v=122.0.7","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b1790a544e0a9ee19021759b197985","sha1":"73c685179a3409b574ea57e5d31648de627faaa2","sha256":"1518834c9463017df5d95b65fb6981971a5afb2b24d04b67c5a17071b342782d","sha512":"278a1391691622ffe251199e1bcd31ac9e9c8a9ea309fd2b3c057e223054f2e48085b6525a3bf3afe8d878c19aedd5ff2141ee794ff9ef0053f53924e74dd422","ssdeep":"6144:JocORu90mzL19pz7UoVZtsEb+7hZ9wvtMj/aM2oEVY85tPBtd6VI/E7UkQ7wibKX:Joc70oVZtWIMT6O85ZIRHqyxqjV5M4s","tlshash":"1f053ad67381b161139b42d9843f0405f3395daa140e246cf7a8ecea7e78988d1b7fb9","size":859081,"data":"","first_seen":"2026-03-14T12:31:16.817814Z","last_seen":"2026-03-25T15:36:23.36729Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T04:59:40.760522Z","times_seen":237559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T04:59:40.760522Z","times_seen":237559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T04:59:40.760522Z","times_seen":237559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T04:59:40.760522Z","times_seen":237559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T04:59:40.760522Z","times_seen":237559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1568e96ffcbe219406a9fd9b548fe84","sha1":"11726d5a6e7df7c91e3f027d284014458af19673","sha256":"16be7fa227007c224760ffc78e4b9067e2b349d79042dc19b7e7fd04e0f1a35e","sha512":"3f92bfebd1d48314c5ff28f17d0c30e1a0653ee49597626d62e6a9f822a2b68770262862a86b2c8f138ad5bdc3a097360bb751c216c7f0d2f2eb2eca73e9085a","ssdeep":"","tlshash":"ca7000020a8a2200202002ee2200e2008a302002a0acc220a002000238a828c02883ab","size":23,"data":"","first_seen":"2025-09-08T03:49:16.09016Z","last_seen":"2026-05-02T06:11:26.285779Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cba4ab48f6f270411a1e10e4997e12ab","sha1":"b170c06cd844f2e6a6caf5c5e2bc63e9d83d2ea7","sha256":"01d4f221d7b03dcfc09771f09659f4ba91cc2d83b665a5af5852b556fa8ae19b","sha512":"80584f4094febb9707df89ecc37fb64d722f360d6e93be122e14dd3c74d738c8ca94863ca839d2c25154a86f6879c4a7db698f72fbd7999bfcbca995167280f9","ssdeep":"","tlshash":"12d02e2141d80632202b700c8a0cea0cb1af08375a26ea427a894791bfa211ad03a2d0","size":252,"data":"","first_seen":"2025-09-08T03:49:16.09127Z","last_seen":"2026-03-25T15:36:23.371054Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T04:59:40.760522Z","times_seen":237559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"deal-work.xyz/tracker/visit","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"OPTIONS /tracker/visit HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\nReferer: https://fragment-verify.com/\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkSh2xzN9twNOKK4cxO23xgTqR7T9WRnU757Z6%2BGyqqOFnChA9YIkzxAnTpF6ZIBBX0STbuG3xtFPe7Q3TYzGiPM4fJjgEO4UFi%2Boi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1efd00e85ebe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonkeeper.com/assets/tonconnect-icon.png","fqdn":"tonkeeper.com","domain":"tonkeeper.com","tld":"com"},"ip":{"addr":"104.26.2.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonkeeper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 03:33:40 GMT","end":"Wed, 20 May 2026 04:33:32 GMT"},"fingerprint":{"sha1":"05:C7:C2:5E:02:7D:1F:E1:24:1B:29:02:78:12:D2:DE:E3:DD:63:96","sha256":"8E:ED:CA:81:74:4F:5F:05:FD:0F:28:83:9B:E8:1F:CE:16:AB:EE:7A:B1:FB:79:69:58:83:23:01:E5:E8:1F:B2"}}},"request":{"raw":"GET /assets/tonconnect-icon.png HTTP/1.1\r\nHost: tonkeeper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fdb53285ee469cb1c827e9dc50218e17\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4E0gwQ%2BD6aYXSqdvJLf5S1%2BVTwI6jcphSgqeEySoxUlm%2F20QXwuEA6qtigznpdJ4R3nr8Y5TmQSqgBPaDtsV3biL07RcR1g0oSAd2r8bunCWjHHjtoVDNM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 9e1efd01deec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-08-10T14:10:21.101164Z","times_seen":995,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":85,"dns":20,"connect":1,"send":0,"wait":47,"receive":3,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_logo_288_mini.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_logo_288_mini.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"21792ff74f93cbcc3638c79fdc840caad35cf662774736d4a072349237457db3\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: F646:FE4A6:E0C655:F22D4B:69BB5C38\r\naccept-ranges: bytes\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 8\r\nx-timer: S1774452957.506951,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: c9ad80e89b8ca9dc95a9b51c7339a2c28b2694cf\r\nexpires: Wed, 25 Mar 2026 15:40:56 GMT\r\nsource-age: 166\r\ncontent-length: 2656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"c0453148d4a154472838f9795b345ad4","sha1":"a43a21ecba07f3e71ff525c91a1da9a120019d05","sha256":"98e4edb321f929be72c57efb3149f476057255631db59ea3003167c0ab4138c6","sha512":"952c63573241b0a1944760dda12218a3ad7b35eb8a08d29df3a224b08b931dd2fe39bf00d43695e263dd8fbbda17e5bede9b7bfbb0c2cfaa4c25d6b819cfb453","ssdeep":"","tlshash":"9f51e6cfba258ee53c6ac8195c7e9c61c6ceed98784ab344c921b9c2423153c2678d97","first_seen":"2025-05-21T09:31:59.826267Z","last_seen":"2026-08-07T15:01:20.05275Z","times_seen":571,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":129,"dns":13,"connect":29,"send":0,"wait":43,"receive":7,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.gatedataimg.com/prd-ordinal-imgs/036f07bb8730716e/gateio-0925.png","fqdn":"img.gatedataimg.com","domain":"gatedataimg.com","tld":"com"},"ip":{"addr":"52.84.50.32","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gatedataimg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1C:48:16:DB:08:C5:1B:E0:A2:1B:DD:F2:6B:FD:E0:EE:04:68:A3:B3","sha256":"8B:13:3F:8A:48:DD:77:D7:34:A7:65:5A:70:FA:17:CD:E3:C1:1A:DB:1D:08:A3:BC:C4:07:AF:3E:DA:9F:66:94"}}},"request":{"raw":"GET /prd-ordinal-imgs/036f07bb8730716e/gateio-0925.png HTTP/1.1\r\nHost: img.gatedataimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8030\r\nlast-modified: Wed, 25 Sep 2024 03:59:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 25 Mar 2026 05:51:27 GMT\r\netag: \"f97807ae7ba8f30ccf818e0a427a0f3c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4ecb87f89fb78847d0c397cc575bc254.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: K-itF5L4MGUVI9pY594upzklHx-nd7J0-UfntfhsvSZogVWfm0k65g==\r\nage: 35092\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"f97807ae7ba8f30ccf818e0a427a0f3c","sha1":"f27822f62c669f0cc0c8ce0dc75936bb59d72c64","sha256":"8c2e6fc90600c3ab7c3d1c974a33113b08715852ec04de8d244a35a884a1261d","sha512":"85b38689a484a831975b3b06548c6e3bdb65f03ac1bdc17fe5b02a572c906dee3c98171369523fb62ad00373b4ceea46b7227c23c73119aa59e22950ae22fa75","ssdeep":"192:wS+8nMurZ7v0Z2j3IFQVHvtAmnbVQE+y5hX1Mkdoavj6bNX75QQW:XCurZwu3IlmOE+cOQjWr5QQW","tlshash":"f5f1d0c2c4665c8d3aa5485fbf634321b9837b37588fafdda881246d1080780b30f345","first_seen":"2024-10-08T20:51:52Z","last_seen":"2026-08-07T15:01:20.084714Z","times_seen":654,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":50,"connect":12,"send":0,"wait":3,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/OpenProduct/openmask-extension/main/public/openmask-logo-288.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /OpenProduct/openmask-extension/main/public/openmask-logo-288.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"3bd3143ce8353aa8b9d4296ec4a937b1000cf8fc46a68e40afc9cb03a4030555\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 2142:385D58:F8F813:10D0023:69BB7489\r\naccept-ranges: bytes\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 35569\r\nx-timer: S1774452956.471098,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: cfce7103a6e089a82ab88c24bf7930062ac059ee\r\nexpires: Wed, 25 Mar 2026 15:40:56 GMT\r\nsource-age: 166\r\ncontent-length: 6912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":6912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"01781f31a294a7f938b3465853c3c415","sha1":"1bd08a5089fea9a6fb60fdecd76d6442167d9830","sha256":"25ef6e0912f90e0adea8597b19554aa1518521e6cf0a88cfaec303808cf4d4b8","sha512":"c6cf1a428835fb81d444169095fb143ef8aece980d9ce0e06f53e98a1f40c03c554efd9b53f5ef56d983711bc59e2f26a44f87e694c512db551e1bd082b96140","ssdeep":"96:7c3GRYpoQxCYkE/FESncoi3MaINhe42kPHVOMjoRKnpdY+o4QfuVg7w6Wgcl2JCx:7DYi9oFnp9ame4zYApM4QGV56WgSCojv","tlshash":"7ae129a8e70ca7b5c9689537a5205db2ccc2064c7b785a00d0eff895b6b7c77e03612b","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-08-07T15:01:20.040088Z","times_seen":687,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":29,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:35:55.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment-verify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:33:10 GMT","end":"Mon, 15 Jun 2026 14:33:09 GMT"},"fingerprint":{"sha1":"3E:45:B3:BE:EC:9D:9C:BE:BB:30:9E:F4:C2:F5:76:0B:58:92:A5:68","sha256":"F8:4F:09:F8:32:A1:F1:2B:DB:47:D9:4A:C1:C2:05:82:EE:1B:5E:21:B3:5B:52:15:42:AF:3C:22:41:CD:75:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fragment-verify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 15:32:10 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJbtWBDBUIR1spr3w23FMR85R5rVZKYpUfC7Di%2FYo3%2F7wSgRsySNreRhUhSzIb6e8Xq4iBPiI58IJXUOFZgFBAwwhZauXAJY%2FzsxZdi%2F7a0LBoc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e1efcfa2c0496b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13842,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a52c236f71c321d72600a681cf08f43c","sha1":"d767d9f2bb673c0ab0ecf7862ac70bfd864d1859","sha256":"6bcc7b7aed9e2bb301f1de6b7fb34efc82dec99f22a4a07324e461b6dc2dad9b","sha512":"8c7815430fcb1e50cd90830fa5695b7c8548d911fcbedbca142eb94397d5f6510416c2a3a8825ee8b957b2ef6f31d6fbefd5511217ed8ca6cd60e8c095833552","ssdeep":"192:ogK4M9LWK05cb6beuKdYEw5s6Y6FyJbDUom9VR6wZ2RxdmHD:67XsR62GxdM","tlshash":"9052821d9af301566457a0b96be753947b78d003c90ec8287bdda254cfcaac4a8e374e","first_seen":"2026-03-14T12:31:16.81027Z","last_seen":"2026-03-25T15:36:23.355328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":60,"dns":30,"connect":8,"send":0,"wait":79,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"fragment-verify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/drainers","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /drainers HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Full-URL: https://fragment-verify.com/\r\nX-Wallet-Name: ton\r\nx-nonce: ea4c8949e58dba76e09ed849337d4ad8\r\nx-signature: 555c71390808029e8ad4bb6e1ba8bd30b0cd09268276fa7bb22b3dc876ff97fc\r\nx-drainer: 5Wn0YD\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"123-8HPd+9DyrAEfXxCjhWtjN2iKymY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cx98dp1x4k0nu%2FNylDXtUiZU23Tvfk8fgE6Cflop%2FpJltAxGHxRAc%2FbPAQTnYi4C%2BnsVuCUvAET7VHS3bmAnQeghqj5q%2BM%2BJS9L9EmU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e1efcffee0dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":291,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84149caa518436c8cb8d3e0b08939d0c","sha1":"f073ddfbd0f2ac011f5f10a3856b6337688aca66","sha256":"d57f4cfeedd92a441c24a8bd37863809d3b27326d8ad78e14deeee1b56682f32","sha512":"2d5d1054a6525ae51a88b8f2799e1f530cfebe82b18bb3cd73b6d5c0eacc713668d0bc7ce772ed85b8383f8ef654ceab9f5cc7e31d6ea413527c770b7aceb098","ssdeep":"","tlshash":"35d0c297ce1c80b88d0a334e143b3e825abca6338005222cb049452152716df2073807","first_seen":"2025-09-08T03:49:16.060743Z","last_seen":"2026-03-25T15:36:23.355933Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/ton-connect/wallets","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /ton-connect/wallets HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fragment-verify.com/\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1c30-jfKmdNGkht2aoFjNSVyMg1Tf2SY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fV7AAl9fG37vuKzP%2BhYCxtmF0KYgztUypnASOb%2Fc1TYiZxgaLgHrnLUgi1ieK10PfVm6EKZJtx70g15FkeKjORuaw1zfL1NSME5Mzvs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e1efd00bfe6be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb0712c515f219b44768e46e87555cf0","sha1":"8df2a674d1a486dd9aa058cd495c8c8354dfd926","sha256":"56e4e057249d56250862b0b74c59aadcf6f4633b9f8ac876d5f36c36af9a3e04","sha512":"ca39ce3656e7a1bacadf2c609bd0bf1d756b6c16d96da36570e03163d00fc5727d6e6f3b3217db9a32f96b1f0db1fd0416b251eaf89ee07ecd0a3b8bb0e0b756","ssdeep":"96:uhg6SHGgaqGVcHRGHsShJCeTHNFiYIyzCFSx539MHAyAw8IEWNXNw:fHla0+ssnzN00CITzL","tlshash":"26e19cab13e88e2e275053d6288f3e6dd206218fcdc0eca9d714dc9882bd7e5115779e","first_seen":"2025-12-04T05:06:33.476667Z","last_seen":"2026-03-25T15:36:23.357314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public.bnbstatic.com/static/binance-w3w/ton-provider/binancew3w.png","fqdn":"public.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"52.84.50.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:AF:F8:16:BA:38:D3:92:CC:06:D0:21:3C:49:7F:84:25:DA:57:2F","sha256":"E5:53:5A:4D:15:73:C1:86:18:5C:67:94:60:62:42:8A:A9:EA:B6:AA:81:2B:BF:13:0E:E8:60:83:1F:BD:5A:92"}}},"request":{"raw":"GET /static/binance-w3w/ton-provider/binancew3w.png HTTP/1.1\r\nHost: public.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3327\r\nserver: AmazonS3\r\nlast-modified: Tue, 24 Sep 2024 17:31:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ndate: Sun, 22 Mar 2026 01:24:36 GMT\r\ncache-control: public, max-age=604800\r\netag: \"5a11a30728446ef34ac8014d50ec00f7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67fb37d4b7930077be54eaea3254b4ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: zDeQqRbTXlIptQ_gvE98nc6ObKSBFbXb2gDIWYOGE7r-bdkNY-6uzw==\r\nage: 466975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5a11a30728446ef34ac8014d50ec00f7","sha1":"1db62c52214cbc93f970d9555d83e4efdb8830c5","sha256":"807e8174dace81c78fc32dbfcf20bba9317bb6502a47c6697245abeb5edc13b9","sha512":"d6d37e34d98f3ad1aef0c87cdd8abc1acaf1bbbee1317cf87edb67c3c8d194ff45ba65ac3d4b47146db0a71cb1278191ead2ef36bf19c47933e35e1ac1e57c89","ssdeep":"","tlshash":"db61f7d41d4b02f2626b3811167b743e9835c4227e58bb6e32a1bf9b8354a391cad792","first_seen":"2024-10-08T20:51:51Z","last_seen":"2026-08-07T15:01:20.059276Z","times_seen":661,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":50,"connect":3,"send":0,"wait":8,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pvcliping.com/web/public_image/SafePal_x288.png","fqdn":"s.pvcliping.com","domain":"pvcliping.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a257abe1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 17:28:56 GMT","end":"Wed, 27 May 2026 18:28:50 GMT"},"fingerprint":{"sha1":"EE:AE:7E:61:DA:99:47:C3:CE:E6:9E:84:42:14:14:11:5F:B9:9B:E2","sha256":"E2:B8:22:FE:03:DD:3C:FE:DE:88:09:85:FC:33:F4:65:BB:4C:3A:E7:32:AD:50:B1:33:D8:FE:08:FE:92:56:8A"}}},"request":{"raw":"GET /web/public_image/SafePal_x288.png HTTP/1.1\r\nHost: s.pvcliping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBZu8lWbntJqtzKHgNvx51qhBNMhCc0lZzReUmndb%2BE%2F%2F%2BP9v5KAq0PfI%2Byq2phIaQDIALYU3eXO021f90DoEM2BrCK83AZh1DGobq48qQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"0538634f954d877d5ed633b704fc475d\"\r\nlast-modified: Fri, 19 Dec 2025 03:14:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 26166\r\ncache-control: max-age=86400\r\ncf-ray: 9e1efd020d415621-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-08-10T14:10:20.963553Z","times_seen":1076,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":23,"connect":17,"send":0,"wait":23,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.ton.org/assets/ui/qr-logo.png","fqdn":"wallet.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"104.26.14.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ton.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 13:12:51 GMT","end":"Thu, 30 Apr 2026 14:12:34 GMT"},"fingerprint":{"sha1":"BC:E7:8C:89:32:62:5B:93:4D:B9:81:53:ED:09:7D:8A:73:B5:5F:07","sha256":"68:D5:76:BA:3E:7C:A5:8D:C0:18:D3:48:82:05:FA:86:27:A2:DF:90:81:B5:F1:C3:4C:54:76:E0:97:A6:66:E9"}}},"request":{"raw":"GET /assets/ui/qr-logo.png HTTP/1.1\r\nHost: wallet.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 01 Sep 2025 14:05:27 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"68b5a827-150a\"\r\nexpires: Wed, 25 Mar 2026 15:29:55 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 23F0:2EEB93:19236F:194D06:69C3FAC3\r\naccept-ranges: bytes\r\nx-fastly-request-id: 40f20fc9dc37391d8dd02f925ed818f5c54903b1\r\nvia: 1.1 varnish\r\nx-served-by: cache-fra-etou8220134-FRA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1774451395.422045,VS0,VE123\r\nvary: Accept-Encoding\r\nage: 360\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDGLeKR1xsrS64LXEsYV2bOrM%2B1%2B79e0HvYi1%2FkWvO5zU0N%2Bc30A%2F0sVN0GtxWMg%2F0ERxEMkYH%2BEvRE35xCFTRDVhK%2BGZNg6k%2BohDRk%3D\"}]}\r\ncf-ray: 9e1efd026cbe76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-08-10T14:10:20.957398Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":60,"dns":2,"connect":17,"send":0,"wait":30,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/iso","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"OPTIONS /tracker/iso HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\nReferer: https://fragment-verify.com/\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOLSHC%2FnmWRJNMWRooeZdMfbkXWtHZ6OI3bDryYaNU3TcyFJrwArPLm56VuIorBMGn24ictG%2F82nyLw5cCHgHwLmeqRpn39XqZTM4eo%3D\"}]}\r\ncf-ray: 9e1efd003eb7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/iso","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /tracker/iso HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Full-URL: https://fragment-verify.com/\r\nX-Wallet-Name: ton\r\nx-nonce: e1956304de7328136ecbbc4bcb9c069c\r\nx-signature: 5a22aef2f5fb534e78975189d8d566483183e4c3659c58f89592104d4d6964b0\r\nx-drainer: 5Wn0YD\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11-uYsXJ3CId9A6avA5R4/fIP7VP+Y\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7sOg%2BysDRBXG3TI9nHXUdDIqwbmBfXVE2IIxKT0QHSL0YC9Jv1xUPnwifYntYbeN3xcc6iSag%2Fr9k1YQTf07mb11VHVLwlIBIah7Og%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1efd006f2ebe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bffddac39537afc19d111fef12f86c3b","sha1":"b98b1727708877d03a6af039478fdf20fed53fe6","sha256":"64a85c336f4638fe26cf8a82ae665a0288e30999dbaa24a6868210902ceb95b3","sha512":"d7ecd4a4f48eb791e13844c859d06f466a7ad615ca2339afb01d10c4353b82f393df429343eed464bc28b525b9452e38a41cc1ff787c419201ce409f8cce0a53","ssdeep":"","tlshash":"a360000002880c0202028000888a000200ab8080808a20208880220080000080000280","first_seen":"2024-10-04T10:16:58.918962Z","last_seen":"2026-06-07T22:21:05.344591Z","times_seen":24,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonhub.com/tonconnect_logo.png","fqdn":"tonhub.com","domain":"tonhub.com","tld":"com"},"ip":{"addr":"104.26.1.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 05:16:33 GMT","end":"Sat, 09 May 2026 06:16:21 GMT"},"fingerprint":{"sha1":"A0:6C:6D:2C:53:CF:6D:A1:C9:01:62:95:B8:6A:98:20:4D:6B:83:FF","sha256":"19:61:E9:07:31:8F:31:FA:74:FC:A8:A7:BC:56:96:B9:EA:4A:56:B4:E5:CD:F2:EF:12:24:D2:0F:D6:0C:DF:7B"}}},"request":{"raw":"GET /tonconnect_logo.png HTTP/1.1\r\nHost: tonhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 69267\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"tonconnect_logo.png\"\r\netag: \"aafd05d9de4af75985d1b39589517d53\"\r\nlast-modified: Wed, 09 Jul 2025 13:14:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /tonconnect_logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::57p4m-1753485404594-425e82e961d1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 30115\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCIjUWFpubaqRV4JbFbQq947Ck%2FJV%2F0QoYXALqmATEtrc8U9a3NBub76Otl9CVwsSGYCJMr6uiTAsg%2BB60LyUiQ26Ldk1KFP9Q%3D%3D\"}]}\r\ncf-ray: 9e1efd01dcef35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":69267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"aafd05d9de4af75985d1b39589517d53","sha1":"4a55ca19e919bee7bc4a3fd4240c47b8a75f0a9b","sha256":"6781d3a7cdd5d44f7083892ec03d04058bca8214da9e7f27300e9a68e5b6aff3","sha512":"3890e38e55fd770fca7f6a8afddbba3ff6a28ea52fdcf59ec956a18cfc66cf9228cca744d5b2d1a4d76730aebcac3ea746ad9a4147603b3300551b69437fc330","ssdeep":"1536:QsznNmD+76/5T4d8bbZ6CQK/WHEXhyQ+X+:QsDN6n5cgtrQICEXhyhO","tlshash":"c563025cb32bc9197193341250729e49096bcb09710feb8fe7a590e2e7360b979260e7","first_seen":"2024-04-21T23:23:39Z","last_seen":"2026-08-07T15:01:20.04327Z","times_seen":690,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":81,"dns":23,"connect":1,"send":0,"wait":18,"receive":9,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.tobiwallet.app/icons/logo-288.png","fqdn":"app.tobiwallet.app","domain":"tobiwallet.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.392Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /icons/logo-288.png HTTP/1.1\r\nHost: app.tobiwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/visit","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /tracker/visit HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Full-URL: https://fragment-verify.com/\r\nX-Wallet-Name: ton\r\nx-nonce: aac85aeff506ece6e388b33d780f836d\r\nx-signature: eef15506654cd581e554bb1ce36ed98549b95b2e2d673ca8a7411a6a5c178db6\r\nx-drainer: 5Wn0YD\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-ratelimit-limit-visit: 1\r\nx-ratelimit-remaining-visit: 0\r\nx-ratelimit-reset-visit: 60\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXgB%2FjdKwAFdXo%2B4zPbw7HVsPDO7wTJxihfyExwjb7kyv0pbrK%2BbU0XavrKYSI6xkflHeYqr6QgjWMHmPvTB8T3d645j7oMPXMYzEMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1efd012919be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/drainers","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"OPTIONS /drainers HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\nReferer: https://fragment-verify.com/\r\nOrigin: https://fragment-verify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVyHfZHCOXlk9cNYM2e%2BxuprZ%2BFOtj2xRWEISpZ0vBu2yVUXKuT5PHSnff%2Blr1yjF4JMW8%2BNUshFVvtGT0R3pYOxBiEZBTD5orqA8hg%3D\"}]}\r\ncf-ray: 9e1efcff7cdede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":69,"dns":51,"connect":8,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.bitgetimg.com/image/third/1731638059795.png","fqdn":"img.bitgetimg.com","domain":"bitgetimg.com","tld":"com"},"ip":{"addr":"52.84.50.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitgetimg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 18 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2A:62:D8:BF:3C:71:66:A6:B8:59:AE:13:12:43:5F:AE:B0:26:0E:74","sha256":"0A:97:0D:1E:E0:C0:2A:E9:31:96:E0:5E:69:71:28:EB:EF:3C:A0:13:E5:6C:C9:18:BB:9B:00:4D:2A:DE:6E:4F"}}},"request":{"raw":"GET /image/third/1731638059795.png HTTP/1.1\r\nHost: img.bitgetimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2176\r\ndate: Wed, 25 Mar 2026 15:35:58 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 15 Nov 2024 02:34:20 GMT\r\netag: \"66f9465dab82cfa9e91c008cbbd83649\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=2592000;\r\nx-amz-version-id: kTM.fRny3dTfee6kRzxAx9r5poaeak4k\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 62e740a3ccdabe7c6d3d19052f330dca.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ZKnYT3WILgVAPlX6pLxTU9AgXRkZzd93UQuaSrCsc43BmP7r6Fn2pg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"66f9465dab82cfa9e91c008cbbd83649","sha1":"1b5637ff897b66c739fe9988075114d834924582","sha256":"ac6d46035cd7a544ecf1978702511542f56d35ca51c729551ba0da5bfc5a9176","sha512":"6aa2e1429617b91a28d51062eecadace89601888912ca88f46d5c2395136f9c3c4a21cac2afa9a2a7f4e5a0603e4654a1a07df910544b1b59bfa25e8f6450729","ssdeep":"","tlshash":"2041dde95a824bf1340a315246797a3fe420c4603916be1f65403fafdf96a794d9c6cc","first_seen":"2024-12-02T10:58:55.343769Z","last_seen":"2026-08-07T15:01:20.063713Z","times_seen":650,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":70,"connect":4,"send":0,"wait":747,"receive":0,"ssl":346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/icq-drainer.css?v=111.0.4","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:55.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment-verify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:33:10 GMT","end":"Mon, 15 Jun 2026 14:33:09 GMT"},"fingerprint":{"sha1":"3E:45:B3:BE:EC:9D:9C:BE:BB:30:9E:F4:C2:F5:76:0B:58:92:A5:68","sha256":"F8:4F:09:F8:32:A1:F1:2B:DB:47:D9:4A:C1:C2:05:82:EE:1B:5E:21:B3:5B:52:15:42:AF:3C:22:41:CD:75:47"}}},"request":{"raw":"GET /icq-drainer.css?v=111.0.4 HTTP/1.1\r\nHost: fragment-verify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 15:32:10 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69b973fa-7c1f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnPKFTrzCSZbyrGPX%2B0YRszr84RjA81gLiMxXEKeee%2BrhkHfyKst1a1A%2BlC0%2FJQXbHcxtZ9eCRkPqCYu068%2B6XU1md4QVjI%2FFiV51fcah12A5C8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1efcfbbbe0ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31775), with no line terminators","md5":"680a90d4058d937add448567916348bc","sha1":"1ad2dc050b62559eeb0b869486c00af768d0de8e","sha256":"573023f328f974e40f18425d880c49de6ea75afb14fce1748c9b55254834a8bc","sha512":"8f1ccc8a3372bac57a8bf76ac9993138e0a7dcd77284244bb33ea6304ea00552a12a2c80f2b36059a3920927728d540b18d62e6beaffe980c51bd5f8c941a8df","ssdeep":"192:F7w3TY5MVka7JXea7JXek7JXeS7JXedVEni2iYi1iiiZi2iYi1iiiXsMX+zzhLNl:dwkmFnh1lsMM9Dr3YhgeJCknl1ThsP","tlshash":"ece263056529917e6c13a8e9c3ccb88d7518b0d09c3f59fa7f6250226bc37f82eda719","first_seen":"2024-12-13T22:54:00.977989Z","last_seen":"2026-04-18T21:10:36.824025Z","times_seen":11,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"fragment-verify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.tg/images/logo-288.png","fqdn":"wallet.tg","domain":"wallet.tg","tld":"tg"},"ip":{"addr":"45.196.29.102","port":443,"asn":21859,"as":"ZEN-ECN","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wallet.tg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 11:40:04 GMT","end":"Mon, 22 Jun 2026 12:39:58 GMT"},"fingerprint":{"sha1":"BD:E3:41:B4:51:66:EA:82:8C:F1:0C:D8:E4:1E:39:6F:8E:AD:9D:A4","sha256":"46:04:86:12:BE:65:EC:33:CD:C3:2E:1E:72:E2:81:89:22:27:E5:53:78:C4:EE:F7:4B:8E:3C:45:63:5E:AC:2F"}}},"request":{"raw":"GET /images/logo-288.png HTTP/1.1\r\nHost: wallet.tg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self';  connect-src 'self' https://sentry.walletbot.me;  script-src 'self' 'unsafe-eval' 'unsafe-inline';  style-src 'self' 'unsafe-inline';  img-src 'self' blob: data:;  media-src 'self';  font-src 'self';  object-src 'none';  base-uri 'self';  form-action 'self';  frame-src 'none';  frame-ancestors 'none';  upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 25 Mar 2026 08:52:15 GMT\r\netag: W/\"5f15-19d2431c618\"\r\nage: 6280\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nset-cookie: __cf_bm=VbaCADHUI3M5MXRczTnzsa5oJKgRrjbv.gp7xzt_3mw-1774452956.534277-1.0.1.1-fqYjBLf8gOaP_NiIixLMPVOnrk.QOC0hxL9KIOw8I9wp2idjGG8iJ9Lox.KFATT8MFseGRW9GcpJeSn4CvIQlxCibuRfs6Cpf41to2tTkWJHtvkvYDDCP4FjqsGpnMdF; HttpOnly; Secure; Path=/; Domain=wallet.tg; Expires=Wed, 25 Mar 2026 16:05:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6k7G0DRH6LM%2BLnmpdl%2BrKPlnUWh%2FL3WDjEVtxo%2Bvo%2ByItPWoOqmoAn%2BmETkCl9cnQVicQhd%2BmV0QJL8Jxq9QVGd3DZrW5Wy6dr973idkgIfjS2YeEfD8kpXbqQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e1efd024bc0ad29-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-08-10T14:10:21.002271Z","times_seen":842,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":158,"dns":20,"connect":27,"send":0,"wait":53,"receive":7,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/delab-team/manifests-images/main/WalletAvatar.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /delab-team/manifests-images/main/WalletAvatar.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"8dbb8cf969074110c12c47e9e303ff0e0ce7e7f65699b681d502c8cb9ec6f330\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: E488:F19E:210254:244932:69BCA1EB\r\naccept-ranges: bytes\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 8\r\nx-timer: S1774452957.501611,VS0,VE3\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: b67b788434d5fb4910340e44a73e02f3ee2d095a\r\nexpires: Wed, 25 Mar 2026 15:40:56 GMT\r\nsource-age: 166\r\ncontent-length: 125350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":125350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit grayscale, non-interlaced","md5":"76785cabe454661186dde236a5e887be","sha1":"037a3fdb5a329176006e067a17047146157568cf","sha256":"3f7399ef75d19d2278cfe2b9a7bc1fb8d396de9f28806f60e730f1734a2fa015","sha512":"2607fd9ddbea4a129920a047de7b9000bdbb407dc42e965811c0b329e785bf4f15bc46e2e083de823393311edf1a17f09eb4fc69ef99d2f98921d92c69717f7f","ssdeep":"3072:iM1uQX3BaDEhqwF4zkUDGxdeac82lyg5iv16yXYRHK:qG3wwq2kGXeac82wg5mFMHK","tlshash":"94c31292da37fbd1f6741640f125ba6a4533427a0507a39f8a6f82ed508878f29f1dc3","first_seen":"2024-12-14T03:28:29.072761Z","last_seen":"2026-08-07T15:01:20.06002Z","times_seen":651,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":37,"receive":16,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fintopio.com/tonconnect-icon.png","fqdn":"fintopio.com","domain":"fintopio.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.379Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /tonconnect-icon.png HTTP/1.1\r\nHost: fintopio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.okx.com/cdn/assets/imgs/247/58E63FEA47A2B7D7.png","fqdn":"static.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"52.84.50.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okx.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D2:38:2A:1F:20:84:68:74:CD:DC:50:00:85:1B:2D:8A:98:5D:3F","sha256":"E1:BB:9A:FD:D6:9E:AA:06:56:F1:DA:CB:1C:4C:5A:B4:B8:42:10:39:55:0A:7B:77:CF:2D:CE:80:B0:08:9F:E5"}}},"request":{"raw":"GET /cdn/assets/imgs/247/58E63FEA47A2B7D7.png HTTP/1.1\r\nHost: static.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1481\r\nserver: Tengine\r\nx-oss-server-side-encryption: AES256\r\ndate: Wed, 20 Aug 2025 12:06:13 GMT\r\nx-oss-hash-crc64ecma: 2315367713013820641\r\nx-oss-cdn-auth: success\r\nx-oss-request-id: 68A5BA351F19783834F5E93A\r\netag: \"C72D04242C776739DC65B00DBDCAFFD1\"\r\nx-oss-storage-class: Standard\r\nx-oss-server-time: 20\r\nx-oss-object-type: Normal\r\ncontent-md5: xy0EJCx3ZzncZbANvcr/0Q==\r\nlast-modified: Mon, 08 Jul 2024 09:10:25 GMT\r\naccept-ranges: bytes\r\nvia: ens-cache7.l2de3[272,272,200-0,M], ens-cache12.l2de3[274,0], ens-cache5.de13[276,276,200-0,M], ens-cache6.de13[280,0], 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nali-swift-global-savetime: 1755691573\r\nx-swift-savetime: Wed, 20 Aug 2025 12:06:13 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public,max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b53a9a17556915731972462e\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: HRE0WD8u6nhQ9DTKE_I0jaijelAADnemubrtzuK758rfZuHaoIUbVw==\r\nage: 18761383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit colormap, non-interlaced","md5":"c72d04242c776739dc65b00dbdcaffd1","sha1":"63100f059745133569fae6f2d882c27aba01b524","sha256":"18f089d08eec3be12ebbfaf98d8e3706141d1a0ced66e01d81f9ea053d643b3b","sha512":"8125a45c50652872bc8939c168452f2b8796a36ce6800c17add4d30c4819829171058be3b83a77598c649b1cec5c6890ad95cfbe793d0b797362c4e577ac6692","ssdeep":"","tlshash":"7631b41433e0c816f62d597cf00751ab9c22d14e1bc083a635e1e39ee4aad34f34d89e","first_seen":"2024-07-27T14:53:59Z","last_seen":"2026-06-28T15:09:18.446737Z","times_seen":429,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":56,"connect":4,"send":0,"wait":8,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mytonwallet.io/icon-256.png","fqdn":"static.mytonwallet.io","domain":"mytonwallet.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.mytonwallet.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 04:24:32 GMT","end":"Tue, 19 May 2026 05:07:23 GMT"},"fingerprint":{"sha1":"2B:07:22:0F:75:A2:28:48:BF:FA:E2:04:DC:60:AD:86:6B:A6:BA:9F","sha256":"3D:CA:61:56:88:84:C5:8A:C2:2B:7A:E1:CD:C9:91:9F:1C:DB:10:7B:66:C3:3D:42:3B:8C:CB:FC:32:18:16:64"}}},"request":{"raw":"GET /icon-256.png HTTP/1.1\r\nHost: static.mytonwallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2c065393c462dd7b5b4a94a114b8f4ee\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxEJo8E0ihDf4PLdK98Wr9wuUGOcwmoR%2F0slkcvoRkAMEjK%2B4K9i1OwkgPrN37aZSgNX%2BQuupYT8psdsyuS8CRZcsyjC1YHajHxMM0OndyHe1He23w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e1efd01ef6295bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":93,"dns":24,"connect":9,"send":0,"wait":22,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.okx.com/cdn/assets/imgs/2411/8BE1A4A434D8F58A.png","fqdn":"static.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"52.84.50.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okx.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D2:38:2A:1F:20:84:68:74:CD:DC:50:00:85:1B:2D:8A:98:5D:3F","sha256":"E1:BB:9A:FD:D6:9E:AA:06:56:F1:DA:CB:1C:4C:5A:B4:B8:42:10:39:55:0A:7B:77:CF:2D:CE:80:B0:08:9F:E5"}}},"request":{"raw":"GET /cdn/assets/imgs/2411/8BE1A4A434D8F58A.png HTTP/1.1\r\nHost: static.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9949\r\nserver: Tengine\r\nx-oss-server-side-encryption: AES256\r\nx-oss-cdn-auth: success\r\ndate: Sat, 15 Nov 2025 00:01:32 GMT\r\nx-oss-request-id: 6917C2DC6AC5903837BC4173\r\nx-oss-storage-class: Standard\r\nx-oss-object-type: Normal\r\nx-oss-server-time: 22\r\ncontent-md5: 6Vkf3wo0Ww+UGzt1OfkwKQ==\r\naccept-ranges: bytes\r\nvia: ens-cache21.l2de4[198,198,304-0,H], ens-cache37.l2de4[199,0], ens-cache23.de10[201,201,200-0,H], ens-cache18.de10[203,0], 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-oss-hash-crc64ecma: 12924123756059949631\r\netag: \"E9591FDF0A345B0F941B3B7539F93029\"\r\nlast-modified: Tue, 05 Nov 2024 14:25:18 GMT\r\nali-swift-global-savetime: 1763164892\r\nx-swift-savetime: Sat, 15 Nov 2025 00:01:32 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public,max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b5fea617631648921932166e\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2jhME9uStXaItWyogBQEaiq8kJLZA6pRXJz4cEpW8rAVj35zCOLDlw==\r\nage: 11288064\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"e9591fdf0a345b0f941b3b7539f93029","sha1":"e02d4eaf76c848f97015b5ad68cfc3bd8d933d81","sha256":"25cf7ad2b8096da84a50cc694883fb1ba05803607fbb4f38d0fa2b78c3562244","sha512":"8979e2df797dedb9d545f0621c1411e3ab1f003e64844bb97ff436987bffd9371c3a27672a39e0a748357d095eb5477f13e9f6347cd7b37d31abdaa0cd148953","ssdeep":"192:EhWkElo67DLxVTx/H3Gbglet2fdj7UEQVX4G7NW16dhwNv5nO/J4J:EhWkyV7NGbZMVj4EwNW1KyN2J4J","tlshash":"b522afe0c2500d6bc46d09879fb3b4130a59f9b5ed8c74c0c6fb33ad8f5519e0195e8a","first_seen":"2024-12-02T10:58:55.332433Z","last_seen":"2026-06-28T15:09:18.494513Z","times_seen":365,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":153,"dns":56,"connect":5,"send":0,"wait":5,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/hot-dao/media/main/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /hot-dao/media/main/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"1de198e102f5ad105bd6b35fdbcc11433afb16c250a55372b26bd0d56ee7d629\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 9658:13A481:1F0649C:26FDF9A:69C1DB5C\r\naccept-ranges: bytes\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 8\r\nx-timer: S1774452957.504125,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: e28be8be20de5ba1b61eb3fef192861664d69daa\r\nexpires: Wed, 25 Mar 2026 15:40:56 GMT\r\nsource-age: 162\r\ncontent-length: 54702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":54702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"a127d8a6a542f1a60214ad74673a47a9","sha1":"5979dfa3ced667400d5269b14962f316d9783353","sha256":"102a1096653e51db8911e8bc6250d50871e237429d977267cb265870332c99f9","sha512":"0521b5924984dbb1b318dcdb722feb9e5d569cf50315c3bbb14977659e421ac43baf402d2123efcfade09b88bc5251a3eebb0db5bf20c8848110bb8d7b77a04a","ssdeep":"1536:KsKssThL7syFw6VqKiHFOSkUn8TjkV2cur4Q3AI:KtsslL7sshiHFO5fTjkV2cukQ3AI","tlshash":"e93301d6195349becd3119ead03f0a1cd5981bc2183a6797d8cc34ceeb8229573deda8","first_seen":"2024-08-22T02:48:25Z","last_seen":"2026-08-07T15:01:20.02999Z","times_seen":661,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":5,"connect":28,"send":0,"wait":18,"receive":14,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bybit-web3/bybit-web3.github.io/main/docs/images/bybit-logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /bybit-web3/bybit-web3.github.io/main/docs/images/bybit-logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"fc957d79a09dde604efa1186e885a97f7669a52fb3c2aba4aa522c6e91518c42\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 34F6:90853:3E0F2A:466966:69B9F45E\r\naccept-ranges: bytes\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 8\r\nx-timer: S1774452956.467288,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: d905956b285628fe7c0e375b9786ac7a2b054fd8\r\nexpires: Wed, 25 Mar 2026 15:40:56 GMT\r\nsource-age: 166\r\ncontent-length: 8225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5e0935c6eab1c5511a9e7feb27fe30db","sha1":"fe638d9a82f782f9b59151ce2f26680af422f1c4","sha256":"8033687342c3375ab3b21208a4af4ff5f272ad9fef15c9d8d79cbb3c8c147724","sha512":"656df1b4b4a5b19aef528e0d8b0060fd34cf2a8da79a2d3e9ee5e059212952aadbd13dc62c6ee77b862b3025b620a8d5aa8d9de80ec65e69f8ff6bf26c15f112","ssdeep":"192:wSpdi9sODYBglLjsbytX9qunUm9ES61gIbJri8vM:Xp//mnsS9qunUbS66IVE","tlshash":"5c025c9f64ed5438fab30a4a365e043d468f3b552c664d738da5bb97a1783c40c47b32","first_seen":"2024-09-08T13:18:12Z","last_seen":"2026-08-07T15:01:20.022333Z","times_seen":656,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":25,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtonwallet.com/assets/img/icon-256-back.png","fqdn":"xtonwallet.com","domain":"xtonwallet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtonwallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 20:09:50 GMT","end":"Sun, 24 May 2026 21:08:30 GMT"},"fingerprint":{"sha1":"3E:92:3E:36:5A:17:35:D1:F8:84:87:AB:40:FC:45:B7:70:E4:0A:81","sha256":"B7:4A:FD:D7:CF:30:B9:49:AE:D9:9B:C5:EA:C5:9A:CE:56:FF:3F:62:3B:00:25:95:83:60:7B:58:5C:70:CA:06"}}},"request":{"raw":"GET /assets/img/icon-256-back.png HTTP/1.1\r\nHost: xtonwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 7747\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Apr 2023 15:34:09 GMT\r\naccess-control-allow-origin: *\r\netag: \"643037f1-1e43\"\r\nexpires: Tue, 17 Mar 2026 00:40:09 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6746:23B14E:4BA96:580E3:6878AB6A\r\naccept-ranges: bytes\r\nage: 521\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1753238934.941937,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8daa25d9a7df9911583634e312b45a5503d25e67\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZLoKM57xm5XGRNo1n2vVCXYa0V90V146gPnM3EST7gBxudrAgKO0ybJPwVCoJoG9ej90vZkTe%2BpODtb%2BAUaa6IClfy%2FzITB8YenGGOy\"}]}\r\ncf-ray: 9e1efd026feadd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":7747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"0983df3ca4f09d3d163cc00073d732da","sha1":"eae458b0b90c8b7c54fa7ee30a19262b4f6d322b","sha256":"ace8dd194c4e421b91d44669bab890974dc28265a1196dd41c48c70abe8debc0","sha512":"7dc6ce1455e78d1bfd4e749b8735e63add6d245a19b7f8010e13c643ac12f24f68545a6f615251a9fc85badfb7f1037b10fa133013141adfc4f91155f5e2cec5","ssdeep":"192:DHdDBqucOLMlzA79aKMgII+yIj34a7eDJCl9XMpgusjCMf7:VBq7OoNcn0wVa7eDJCl9XM/TW","tlshash":"10f16c34e467c40dda947244d6b305d47ed390118f97dbef5e6c5b2a2b888e38e82663","first_seen":"2024-04-21T23:23:36Z","last_seen":"2026-08-07T15:01:20.04483Z","times_seen":688,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":49,"dns":12,"connect":14,"send":0,"wait":14,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.binance.com/favicon.ico","fqdn":"www.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"52.84.50.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:56.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 202 Accepted\r\nserver: CloudFront\r\ndate: Wed, 25 Mar 2026 15:35:56 GMT\r\ncontent-length: 0\r\nx-amzn-waf-action: challenge\r\ncache-control: no-store, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: OPTIONS,GET,POST\r\naccess-control-expose-headers: x-amzn-waf-action\r\nx-cache: Error from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: TB3Rlii3iYlKYHTnkbStWu0mvshH5si4cybnyu04KiLXv3rjpimAvA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":79,"dns":3,"connect":13,"send":0,"wait":4,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/icq-drainer.js?v=122.0.7","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:55.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment-verify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:33:10 GMT","end":"Mon, 15 Jun 2026 14:33:09 GMT"},"fingerprint":{"sha1":"3E:45:B3:BE:EC:9D:9C:BE:BB:30:9E:F4:C2:F5:76:0B:58:92:A5:68","sha256":"F8:4F:09:F8:32:A1:F1:2B:DB:47:D9:4A:C1:C2:05:82:EE:1B:5E:21:B3:5B:52:15:42:AF:3C:22:41:CD:75:47"}}},"request":{"raw":"GET /icq-drainer.js?v=122.0.7 HTTP/1.1\r\nHost: fragment-verify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 15:35:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 15:32:10 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69b973fa-d1bc9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OaTcPxTExgZisSgL4OVjwU112tvMljGYJtO2QtC0zf%2Bjd8OMeLe2To1z8xyZNyUwv3HjkC%2BEs9B7kJd%2FS76xPNVeNbq9WAavI6MYgI7ah96Ch4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1efcfbbbe7ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859081,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44466)","md5":"49b1790a544e0a9ee19021759b197985","sha1":"73c685179a3409b574ea57e5d31648de627faaa2","sha256":"1518834c9463017df5d95b65fb6981971a5afb2b24d04b67c5a17071b342782d","sha512":"278a1391691622ffe251199e1bcd31ac9e9c8a9ea309fd2b3c057e223054f2e48085b6525a3bf3afe8d878c19aedd5ff2141ee794ff9ef0053f53924e74dd422","ssdeep":"6144:JocORu90mzL19pz7UoVZtsEb+7hZ9wvtMj/aM2oEVY85tPBtd6VI/E7UkQ7wibKX:Joc70oVZtWIMT6O85ZIRHqyxqjV5M4s","tlshash":"1f053ad67381b161139b42d9843f0405f3395daa140e246cf7a8ecea7e78988d1b7fb9","first_seen":"2026-03-14T12:31:16.817814Z","last_seen":"2026-03-25T15:36:23.36729Z","times_seen":3,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"fragment-verify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fragment-verify.com/favicon.ico","fqdn":"fragment-verify.com","domain":"fragment-verify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment-verify.com/","date":"2026-03-25T15:35:55.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment-verify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:33:10 GMT","end":"Mon, 15 Jun 2026 14:33:09 GMT"},"fingerprint":{"sha1":"3E:45:B3:BE:EC:9D:9C:BE:BB:30:9E:F4:C2:F5:76:0B:58:92:A5:68","sha256":"F8:4F:09:F8:32:A1:F1:2B:DB:47:D9:4A:C1:C2:05:82:EE:1B:5E:21:B3:5B:52:15:42:AF:3C:22:41:CD:75:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fragment-verify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment-verify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 25 Mar 2026 15:35:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3PbbSvVjhNf1fRnigDu%2BZOzl8zOyQjtG%2Fn%2FPgPQ%2B5AF3XlNu4vA5jNjXc%2FWNB9vPm2QyFY%2F5zsXOPI9%2FW486hDZq80ZHTA%2FII7keL8rkTyMCRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e1efcfe5ba3ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4c6b2512bc9d0d20c7403141a20dbd45","sha1":"3034db4a5dea5fa07ff98206da490634d06532a5","sha256":"a23ec3e6e0de6c1d13a88d6d58f4b3ebe33ae698b0641a386ab34167631f6fe6","sha512":"b4af8f1ae334450bb7b5dc358107fc37c16740e9757e251d906f2b117ca67d760e1ae0e77dce0154f251b2f7454bdf104723e6feb02a5f08d55dbbcb299de76e","ssdeep":"","tlshash":"53d02bdf5043628b4812156039c159c2274c12f6a47a85e86d86e4875298a7ece9aa8c","first_seen":"2026-03-25T15:36:23.368229Z","last_seen":"2026-03-25T23:07:57.146711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"fragment-verify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}