{"report_id":"0bc48034-bc84-4cbe-bb7b-94024259801a","version":6,"status":"done","tags":[],"date":"2026-05-20T07:28:46Z","url":{"schema":"http","addr":"wintermute-prime.com","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"172.67.152.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wintermute-prime.com/","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"title":"Morpho | Wintermute USDC Prime vault","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wintermute-prime.com","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"172.67.152.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-24T07:28:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"wintermute-prime.com","ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-19","domain_rank":0,"first_seen":"2026-05-20T07:28:48.662525Z","last_seen":"2026-05-20T07:28:48.662526Z","alert_count":0,"request_count":15,"received_data":5386022,"sent_data":6832,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-05-17T23:37:57.921956Z","alert_count":0,"request_count":1,"received_data":87910,"sent_data":449,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wintermute-prime.com/","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a1db0051deff1f262e3077a99a6037b","sha1":"be0b6e23dfe0431814d7146690142145b26cd28f","sha256":"c6aad8d114f62205b8b825a4c0caf22bbd8bc654cff5250ea819ea6f312c99d4","sha512":"b1d3801078179bdc0de556acff99fb13c41f5cff83d6b82d852f748b2701e6c8c35fcacc39f185833fd086b0c17f7b7cdb15c30531edf7a6da1e9b6d18b07e30","ssdeep":"","tlshash":"4ef0a769b0366689156b323667fbc000be6a109f1049da40395c9dc04fe6394e94fe6e","size":599,"data":"","first_seen":"2026-05-20T07:28:52.993855Z","last_seen":"2026-05-20T07:28:52.993855Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/dte48sk0.php","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfbb0ffdc0302557cdba80d48c720fdb","sha1":"1e083b57ef1e535cfda30fe5852b004676249b7f","sha256":"e83bbf3275ef6259eacd61010c92748c0cfe9474e5ee6f1e7e9441db18123546","sha512":"59420b1e3453d9a07266d2d6576ad0bfd9f71333b8140544a1af517a6c21c9528bff406d36d2ab1f0259bc222007e35d236a4ff2df53a7aadd025cc3f7498f46","ssdeep":"3072:phaTWFkqqv2rWdKyVBAsj6QuDww6q91y1udUqD:phaTW5ocWTNJucw6Y1ycK4","tlshash":"b804e7a9eb53c0ac4d94258e84b7b84ee5650d268d1cb457df1eecc03529fa6c0932bf","size":178637,"data":"","first_seen":"2026-05-20T07:28:52.986191Z","last_seen":"2026-05-20T07:28:52.986191Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fc071dc0f5697b78ddbfb9f7075eabc1","sha1":"f5940e312bf711e29b9db62c0a1cfca8a6ecff8d","sha256":"0e28ea2510d82253c05b6d7e0d3f6b02a265db8c77137427e279c6a1fa93a861","sha512":"94769ebae9a5c020948e783382c2ed88a8abb4d932dfbb01f611dd2328dffd2d08b5d5a314af3451cbc46f9c4078a25edab0127e0ddc8d684670592e7543b088","ssdeep":"768:VOnsz6NHaOgacv8kuvcFcf4N6pc2p3cJcBFcRixe9nS1S9oUqchkTcpcP3cW1a6I:kLvuu7S","tlshash":"a743d8e1a98bd4e59e4621ddd037ec01e0281967ceacf193b92ddec2742df62844b17e","size":58952,"data":"","first_seen":"2026-05-20T07:28:52.994773Z","last_seen":"2026-05-20T07:28:52.994773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T23:44:02.612082Z","times_seen":130053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wintermute-prime.com/dte48sk0.php?m=2965436","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /dte48sk0.php?m=2965436 HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wintermute-prime.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbiPhw%2FIAGzxjvHyj6FLTjlVgHBBHc4DhC6Ha1zYrQoMDW6l1ewtlzYlH053nn5A2Udrz1nOLO9wH3pe13gAFiJi1erAOkomYGnzJt2FWKNibhbVsNUZ65LjW%2Bn4RGwjvJRoSu4FKA%3D%3D\"}]}\r\ncf-ray: 9fe99fb8783a0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3442104,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a4578f5d20bea4d2d063a7d95a83f182","sha1":"decdbf07862dcfdb82be85dccf508bd7cc7327a2","sha256":"ee7aedccaf6276bd2ccc6dd9cd0b1b7a35a36a9d95f475327270e175d79f019e","sha512":"dc47ba92ffd07973b55cd1390a61bb250a9c68450aa6abae6fa3d3a0fe83f8745b9ad0ab8dc413cd063b0f980b5b560cc0b6bf5653a6a1ad154d7a5519295cc2","ssdeep":"24576:KzV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdV1jP6MF:Kz7OwPEZJsZ6u","tlshash":"16252311ada7fd9e4f8cbe6574bb7e4369411f82888c54cfe622e5c4102833582dae1f","first_seen":"2026-05-20T07:28:52.970878Z","last_seen":"2026-05-20T10:39:17.122919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T07:28:18.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:28:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 19 May 2026 15:54:20 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvE24sOlwqNQ6ZHIVBqai2PODaR%2FiieDdMkKP6FzLiCCCTJ3BAqwve2%2B8wBdo%2BnxF6eBXOzYEFBQaK12zawtGBPUV2L8Y5OMyNbaQSJ1CLAHbi4uFfgXU130pmUYdbXhiWWjPWZiKQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fe99fb2ebc15688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1410166,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"ca4424ed338749b354aeabbc6e3f620b","sha1":"3829742a0cb368597a1873cf014add50bbbed55a","sha256":"3ad5bf2a4c5789aaea72b0b8050f1bf5cc4f4933d630e03cf57834e5952c34e6","sha512":"2442ea6286c79aef355a6bf31f2436f41b91bcf61155ba38b76b02f5b620d3f3d8b260972310d0b3d82c28cc12622f0f4ea8de85e16a1d8f0ccc5307e229629e","ssdeep":"1536:vrkzFMYokePcFcZd2r/6/gu5qwc7XrKPMI6/6/gu5qn/6/gu5qwxJnJjjjMp/Vpu:vrkztcn2QYbAF2AYn3yiuQat+Y","tlshash":"e7253bc0e2b205fa680f92d5ab2a77c72e1660738946c95df7dca7902f470d8ad076dc","first_seen":"2026-05-20T07:28:52.972377Z","last_seen":"2026-05-20T07:28:52.972377Z","times_seen":1,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":32,"dns":17,"connect":1,"send":0,"wait":114,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/dc232e818687e863ecc39b4e2f3a4b7c116d2d76.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:18.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /dc232e818687e863ecc39b4e2f3a4b7c116d2d76.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:18 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Q%2Bnv5creuzE0wrLYD5TzkBd9pDVoarza5UadOi2ipQCsEYEHfJJ3rqdciuS8siONdCx7gqCORdXKUJkBquVZI4JkIRNxAHxIaQp1G4QsmG40%2FUNnhoFv%2BvA18A1kxrzMjJ6rvkVSw%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-376\"\r\ncf-ray: 9fe99fb488180b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f70eb90d9ff5749a7e550087a29c051b","sha1":"dc232e818687e863ecc39b4e2f3a4b7c116d2d76","sha256":"023cb61355103fa81f581b85664728561d86a5a422276899fecd6173f4b6f5a8","sha512":"c32bafac74704aaa25826a9441528a94faf82796134a660c75bd4d8cf45a3914015616a5b59339315894112140335fd79bf91677338f30ec9996491e47e575c4","ssdeep":"","tlshash":"4f118195f4e37d83ea4503d35d38dbe42fef8527c24096b962e714c17a48919e780f11","first_seen":"2026-05-20T07:28:52.973407Z","last_seen":"2026-05-20T07:28:52.973407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/eth.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /eth.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYO1x7GttLk5qME6m6o6%2BkbU07aG%2FFY4GibOSdz8MTIYZTooaF%2B9KeNwd9Qe7XBU%2FjOv9BoB4N2M%2Fc%2FHDo8zwYckF9T2TsHzcKw37T5dM7Jhl8in1hqzIDuiZQXvF04tau846HQzYA%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-9cf\"\r\ncf-ray: 9fe99fb7c8320b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cdbe166780c1bec81cbad6945ed2d0c","sha1":"aca0d446cfa601f609a1fa2993744f1be4f0b84e","sha256":"e7e9834c3d30e0ddefcd9d2f6aedf47147ca6aedc55e9ab880e98aae7e201fb5","sha512":"14b05af0dab6dafb9a4c01dea11014de61fa2deade724997f7d5cb9d7411d84d790d4ee969628bc5aba3e195b2ecb9269f2f9990bad442136260021871403199","ssdeep":"","tlshash":"f8510062e47e4cd9c11d42f879f96913611a3097c28e0d217de09151ee022b3b76ef9d","first_seen":"2025-06-09T10:46:44.944315Z","last_seen":"2026-05-20T07:28:52.974771Z","times_seen":24,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/armitage.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /armitage.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wjo8a9Vxb91cdraZTfecm7Pude4LWdNL1SiPy6n5QM5IihPIrPXyPInaYNqxAJhQhBr0wknjMF9x4%2BnD6lFNTiRI60ueFfvTyY46SWya50hPPGF0GigcEDCXscT07AvJTM%2FcVvQTGQ%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-442\"\r\ncf-ray: 9fe99fb7c8330b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bcd5565d92474fc89c9681db1add335","sha1":"a5d39552769cd79f11c1f9dc09e79361e15588f7","sha256":"e37fd4b6ad9b274888a8e6a24373bfde767b6cc1ef29aaa7fed736371d483bfa","sha512":"2354ac9ba44ed03402eda31c2041314c8774381eb0825bafa12e43aa2f6242c3603a57cad36586f23853da2b658407bd9ff334d7612c0e82f241daeb9c3594fa","ssdeep":"","tlshash":"9d1142e2142ce3466e08d73d924664fa302104e97349c519eae02d0bec8f379791ab9b","first_seen":"2026-05-20T07:28:52.976446Z","last_seen":"2026-05-20T07:28:52.976446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/0rlhvz.ql_0kl.css","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:18.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /0rlhvz.ql_0kl.css HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0c7ecb-1c70a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjZB7NmWu%2FPofYbAMs8MKO2R9Fc2z1hia9xd06pb2ZuDpO%2FFJOYSvaqS1lNTPQotUDejHmKA19TYzfw1SH%2BnYsO2YsWXGxMElRzUqbs4Vye821tiodXdXIcoOJYDlZTDiJvaasIx3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe99fb478150b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116490,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0c4e9b85a6a3d56c20a1d28417aeb13e","sha1":"56b4588716d66df1067f051e2703599d67cc9b48","sha256":"6f0688ac989982a64b472e506f9db723b9b04b298e8d8a3bfbce5a3fe2d706d4","sha512":"b611d414feba8dca0da06746d4980540741fae536819037c0b615af7d176a08bc85df75b687ea0dbaaf3fc758755b1013d3ab9dcd7407269e45433ec2f0d6aaa","ssdeep":"3072:dB6i2csqht5MT8iR/yBAhRHfJvD6KgLmboVF:Ki2csqht5MT8iR/yBAhRHfxgLmboVF","tlshash":"f9b34f40f124eb3b6d2369bf539dda8c6718b0518d00ebf8ba21311147e77fb69a3952","first_seen":"2026-05-20T07:28:52.979431Z","last_seen":"2026-05-20T07:28:52.979431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/FKGrotesk.woff2","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /FKGrotesk.woff2 HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/0rlhvz.ql_0kl.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 209440\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6a0c7ecb-33220\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBe0hakm05vBAYrNJTMAAZgsymyAnEzCiZFwiY5mTh%2B0g2L53ThPuyfLXEoaAA%2FO64k5O4xew85uJwywX4thUhq6%2FkKUBvr40Kibl0ToswSG5KEMJvRHy2IK7xR0S8Ym2SxOle1SaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe99fb6f82f0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 209440, version 1.0","md5":"104a6a3d4ed8cb6a98f7e25a3176b5f8","sha1":"6d981c7aae5b63f942d09485c429f2833bd02c28","sha256":"d571364277257ea76ad9949c20c89d5569559529ec03e47dee1415a06d271da4","sha512":"f029e2da079b461e8e127d198c1d03ae7f7f971d51b53b7e410918d3d24cec12c7abbfcf02c3dca0be4bfda2794336ae73071995c15c357b61fbcfa94ab4958e","ssdeep":"6144:5by2stgRXHIsLv1seeuAYwvjEGCLcMxJzV83:5by2sGpnrquARwpE","tlshash":"5524235fea8652f098d444a220a0d80210bbccf6e5953a75f4fb466387f76da78c0de6","first_seen":"2025-06-09T10:46:44.93423Z","last_seen":"2026-05-20T07:28:52.981387Z","times_seen":13,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/usdc.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /usdc.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A77Rmq%2BSQkQC1bmcg7KiguNHKUpUTWgbzQH1SHxhKQ0u8gpAKB1QgyWZzgd7kaRp7%2BI8aSidc%2B0QT38HaFqsoXH11EOJd4TktYyH2IqIcmkr7dBGX7%2B30SACPEHF9eXrR%2Bh1w1WZCA%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-6a0\"\r\ncf-ray: 9fe99fb7c8340b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b5972c16a9795dcf6e2e2d7e3125d21","sha1":"9b1cbfda8bd93368b67de6e9aba62fd250bfc7ee","sha256":"913adf09fc3097cfee7f76a3226bacd52237f2ac714817d68eaf73bfc3a72109","sha512":"c271a0fcc19d8a62481e3c72dc679186d89f28b642fd5322b3e66250d4d63e549b6a468cb407ded0d92b5786e0e1fd3b99cc218da873133d2ab80f6af03fb791","ssdeep":"","tlshash":"d7312918eb950a399848c393ada42fa53a0f73bdb114c2fc94b45e30b935c9cdde508a","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-05-20T07:28:52.982459Z","times_seen":704,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/wsteth.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /wsteth.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVVmEpo1rVXCTVj4C2uYAb8WLX5hLiQHqXcLeOUBij1m522JKOY%2BXDYtXhKUEcslVBFc%2BQWcA2cX08%2BsWqOFq0bjPRYAu49eSEoEbzXpZEaij3eaJ3glqHTrXaZ5M%2B4jZ1hl5RcBMw%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-3f4\"\r\ncf-ray: 9fe99fb7c8370b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"098808bb5b21077ca684507291a56875","sha1":"4203193bfab81a4bc0b367231f1f26d0ab1216a4","sha256":"9d65a2337ca666ce755faa4f4927672a5d40e2d92abfa85dc508ef05b4f53112","sha512":"ff3f6f6dc61104476832c3d71673d461ea5578612d66cf1b02af3ec003b9da88fd792cc8ee7689e325145d32b27a5824ccfbab4aea7e0e37f46dfad290dba07b","ssdeep":"","tlshash":"6a113adc960490f94c9657feef5ce29b002b60c9a364058cf7500b50a382fafad61e4a","first_seen":"2025-06-09T10:46:44.897985Z","last_seen":"2026-05-20T07:28:52.983078Z","times_seen":55,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/favicon-192x192.png","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /favicon-192x192.png HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a0c7ecb-e1a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icjWWGaMKEWtEFu4u8Bqp0H6EBvA3kyVor5FNrOCI9ibIxtvH9hoUM2WwZFIxA0nhLtgbINB1jRjqPa4eMJiJddYZLQjsE8jRu4O1V6t413iIq8yDDRJHsVg8QOej8IPSY9RPh6I7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe99fb858380b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8118acaa3189ce595b57f282be36ba8b","sha1":"84eca74f13450d8cf12e9e596218b6a622928d3c","sha256":"7743648bcfe9a33cbf19c1966926cafe602745278f2ca90883c8a529e8e139c1","sha512":"92e25febdb291051c7985cebc4c155feefe56ca0117095e77946959da5a4f25dde3877ea5dbc6af33a830108e26f782f291bf249999b6d1a4cfbb106749ce71d","ssdeep":"","tlshash":"7b714c5a7f5e85b0d886441b9f1a3ce8e4d41a78860eaec505875ced0b70f21833e642","first_seen":"2026-03-05T01:08:31.172473Z","last_seen":"2026-05-20T07:28:52.984609Z","times_seen":7,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/dte48sk0.php","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:18.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /dte48sk0.php HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO8M%2FihaS%2FePJrq88h%2B5%2BL5qNj7Rk1kRKaGnd2xJQTeWkNck7KVw0xnaLQuX7TpkjBD2rlS86BLgcMWRPX0Knf2cxGrv5QuB%2FlKh%2FMvOugJXZsGZvPj8SfLd1KqiAEKkWlcwggngfQ%3D%3D\"}]}\r\ncf-ray: 9fe99fb478160b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179081,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58066), with no line terminators","md5":"cfbb0ffdc0302557cdba80d48c720fdb","sha1":"1e083b57ef1e535cfda30fe5852b004676249b7f","sha256":"e83bbf3275ef6259eacd61010c92748c0cfe9474e5ee6f1e7e9441db18123546","sha512":"59420b1e3453d9a07266d2d6576ad0bfd9f71333b8140544a1af517a6c21c9528bff406d36d2ab1f0259bc222007e35d236a4ff2df53a7aadd025cc3f7498f46","ssdeep":"3072:phaTWFkqqv2rWdKyVBAsj6QuDww6q91y1udUqD:phaTW5ocWTNJucw6Y1ycK4","tlshash":"b804e7a9eb53c0ac4d94258e84b7b84ee5650d268d1cb457df1eecc03529fa6c0932bf","first_seen":"2026-05-20T07:28:52.986191Z","last_seen":"2026-05-20T07:28:52.986191Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:18.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 20 May 2026 07:20:25 GMT\r\nexpires: Thu, 20 May 2027 07:20:25 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 473\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T23:44:02.612082Z","times_seen":130053,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":93,"dns":0,"connect":20,"send":0,"wait":25,"receive":21,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/wbtc.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /wbtc.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faMvBZ7bids%2F%2FIT1prgYzu7WKMIpM4luyq5x49wO6wWouz2mTw1xUKQS13bHsidRiBUnZcD0Odvs9FmPv%2BT3l9%2B8rEPJLxZzClGq3I3lRxlwJfcKco31WTuCzB9paUi4mRqggukK%2Bw%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-b17\"\r\ncf-ray: 9fe99fb7c8360b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bea66337b70e53f1af073dae5b73c981","sha1":"65e3121b2726cc9e68b4c5a1f52606dca4786f38","sha256":"d745d18108ec5f7afd41f068d81c89ca6425d05f3b7b5cd58c533a8757f1dd46","sha512":"0c1189225a7258e68f0e09c8d0427d02630b1ff790e8bf1de54012e3d3a2c3b3fc67ee9aafdd0d0951092ddca6a830a2ff55afdc82ed8f8601aa1ffa4fa51c63","ssdeep":"","tlshash":"5e5151fc334599f0d229d3c7e705147ca52fa0e6ab60ae60c254cf27a956d9a8c10bd5","first_seen":"2025-06-09T10:46:44.931169Z","last_seen":"2026-05-20T07:28:52.987833Z","times_seen":22,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/a9464d0ff4d7dbee3606276fc643b906c3659f29.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:18.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /a9464d0ff4d7dbee3606276fc643b906c3659f29.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:18 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJBj8XrCxRkWGUttQ3UGFKMTmd1TDXGRhiZoWdTg3xJnjMxdqM9AtPglI75lkNLbslXPgA4yzrYdS%2B1RKzOvaqhdkvrtGTFw7iT9IDy2cyFnm0nAhY4IIEWif5upzQpIGChR9XcfjQ%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-2b4\"\r\ncf-ray: 9fe99fb488170b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bd90b2e92f7a64ebf87a330c925e487","sha1":"a9464d0ff4d7dbee3606276fc643b906c3659f29","sha256":"a2521141598e200bc3e14a1fafe0cf85a004b21c7369a9eb0edf363a63c74d15","sha512":"f2ee8e652f2a97fb2f5ea64e5b8002d613499d051028da52078c91e9f07800b112b18c7b7a1decf453eb1a6695146719f718cb03eea71bafb45e5ce80f865e81","ssdeep":"","tlshash":"2601b459b4e37dd39b0903d35d38c6a06fdf8617865086f9b3e724c5394ca4aeb80b11","first_seen":"2026-05-20T07:28:52.989572Z","last_seen":"2026-05-20T07:28:52.989572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/cbbtc.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /cbbtc.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2G8dBCz4mrJlYcgIRxphYlL3lZL9IvOmVdDUywtkggfQu0xjkTcdhiOe5Tl79CUwe%2FeAUkBKciyGlXMOXJii%2FepBoFSs%2ByGiPEU9jWzzPuOi4PvHxSjYQ79L06%2B1hHK8eITxfCzG6g%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-650\"\r\ncf-ray: 9fe99fb7c8350b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84899fdc22f1f4560399033d06799e58","sha1":"95c254c5771431d4269c44255ea7c47a3211f0cc","sha256":"dc9509cd5b998d174682e89665b23fd5863962cac1de087d7022aa000ff20451","sha512":"3fedc07bb4421a077691149a345bb50e4a1189a88285e68c11f5bbfe7227f204b3d64acf60b443453b6a76b9ca22b1e7715fca4cc9c58eabfca1fcde47eef362","ssdeep":"","tlshash":"31311deedbf022c6c065d3f97328046e72df9cf9a704cf82a6281e88692541e87dd5c0","first_seen":"2025-06-09T10:46:44.939714Z","last_seen":"2026-05-20T07:28:52.991411Z","times_seen":19,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wintermute-prime.com/favicon.svg","fqdn":"wintermute-prime.com","domain":"wintermute-prime.com","tld":"com"},"ip":{"addr":"104.21.33.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wintermute-prime.com/","date":"2026-05-20T07:28:19.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wintermute-prime.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 14:45:26 GMT","end":"Mon, 17 Aug 2026 14:45:25 GMT"},"fingerprint":{"sha1":"31:C1:95:38:F1:82:0E:8A:96:80:0B:D4:F1:09:9B:CD:EB:3D:4A:F6","sha256":"20:33:60:02:89:33:11:EB:1A:3F:C4:AF:F9:C7:1E:35:2E:6D:D1:C4:AF:36:49:A3:F8:96:CB:59:B1:B7:4D:A3"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: wintermute-prime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wintermute-prime.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 May 2026 07:28:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8ZjgTCANAyKXF1Xh%2FFBw3Ckpzhi8ho6QK1z1BlJ7%2B9ZYz4UwBb3hn8gOM2keVrzV5l1L9fNZFM7iSMzPH1ud1y8zlJxkxBUMT1EpE3q%2FFAm%2FKgiTM6pR%2Bs9JoL4XWa7C%2F2iGDDdOA%3D%3D\"}]}\r\nlast-modified: Tue, 19 May 2026 15:16:27 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0c7ecb-8b4\"\r\ncf-ray: 9fe99fb858390b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a28c2da9cd63a8b136119b35569b614","sha1":"3b97b35087aece2d59dd2a77ec74852090dfb452","sha256":"f7f393aea99109a83c59b161c442359fc804e625b9fa30149aa337afefcb9c63","sha512":"8bef5eaf50fb49bd9336a66e3ff2e9c19bc3f25f41ee6df8d4a08585898d94158549f978ad1a6a5f5d5af3d437c22df5882a6ed460e7afea06e383979f6224ff","ssdeep":"","tlshash":"aa4195ec7f6dc574d880a3d8eb262099631ff6eaaac29b74c3017e0738418d98e118d5","first_seen":"2026-03-05T01:08:31.173294Z","last_seen":"2026-05-20T07:28:52.992837Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
