{"report_id":"0e8f8f96-3a03-4427-9549-c568da17644e","version":6,"status":"done","tags":[],"date":"2026-05-11T12:27:13Z","url":{"schema":"http","addr":"seduce-fjhtcxulyk.edgeone.app","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"ip":{"addr":"43.152.186.21","port":0,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"seduce-fjhtcxulyk.edgeone.app/","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"title":"MetaMask","dom":{"size":64715,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24937)","md5":"16887a1c7f1f81abac3301e786014dcd","sha1":"6c0d4fda85a91896e38f962f844f9713307eb479","sha256":"c598923c4fcb62db776ae5898b482ebefdb160c10ae4c62fd0cdc5b137733887","sha512":"d074b1760fecafcc15a4b1f2fcbfc3a4c9c01af1424b1d990d17ed78b6f3ca3ca1a96e453db076c9de1e786ac2bcbbae809553faa2b31735daf9794ad0e5a52b","ssdeep":"1536:ZLQRi3V/pkp4x2/kM4pkcXM9Iol7vckDS+qC0:FQRg44k/Jaolbck7p0","tlshash":"3b538e7239b699d120df8cc86a665a2d6df46213d109c448ff8c97f48fa3c6cdab7204","dom_hash":"domhash55017e3cf74dc557bf4a99ad01e79696","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"seduce-fjhtcxulyk.edgeone.app","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"ip":{"addr":"43.152.186.21","port":0,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T12:27:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-11","alert":"Hunting_JS_WebAssembly","trigger":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-11","alert":"Detects file containing Telegram Bot API","trigger":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm_bg.wasm","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"seduce-fjhtcxulyk.edgeone.app","ip":{"addr":"43.152.186.21","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2023-05-10","domain_rank":0,"first_seen":"2026-04-24T13:17:55.262588Z","last_seen":"2026-04-24T13:17:55.262588Z","alert_count":17,"request_count":3,"received_data":180636,"sent_data":1394,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":22015,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.iconscout.com","ip":{"addr":"172.64.147.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-06-01","domain_rank":1011342,"first_seen":"2017-01-06T17:08:07Z","last_seen":"2026-05-09T00:01:36.09705Z","alert_count":0,"request_count":2,"received_data":11357,"sent_data":1036,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":1,"received_data":56071,"sent_data":582,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm.js","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"ip":{"addr":"43.152.186.21","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"b27f1348f70865ce93ea4a869c67cb37","sha1":"1519245d28c4a481be67c1f12de2b49338ef7975","sha256":"d32d7faca4d88422812091af31fa4e85d64042b6fa74125e793200dc27ac10d1","sha512":"26f90d4724e8967497174a3c84390caf957eeb7ad59a8a959d2aba5005a56dc4b3feece7b9451304fb9ae23df5161abc280fca3d8985dce9369f7fa39f80b208","ssdeep":"768:/sQjonHIDMDOQzi8y1ryTpcw0wj5CcEzK5NqHy6UoZDicwiTa:/sQjonHIDMD3zi8y1ryTpcw4uoZDeF","tlshash":"f3c20f4839f720a58b97b0ba4b0fad5966365947274cee94b94cc7a05f3306cc1e7acc","size":27259,"data":"","first_seen":"2026-04-24T13:17:57.794441Z","last_seen":"2026-05-11T14:34:45.296614Z","times_seen":6,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-11","alert":"Hunting_JS_WebAssembly","trigger":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"seduce-fjhtcxulyk.edgeone.app/","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"ip":{"addr":"43.152.186.21","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T12:26:51.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.app","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:84:C7:1E:F8:5A:EC:5F:B1:17:36:FB:01:CB:DB:C1:0E:C5:4D:09","sha256":"D2:65:EF:F3:E0:E5:38:B3:F8:DB:9F:90:CA:EB:E3:58:AA:0B:3D:23:0F:A0:A1:7C:7A:AC:21:E2:D7:61:A8:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: seduce-fjhtcxulyk.edgeone.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 08:23:28 GMT\r\ncontent-encoding: gzip\r\netag: \"21e9069bd27c2cdfc464e45cf8bc3848\"\r\ncontent-type: text/html\r\ncache-control: public, must-revalidate, max-age=0\r\nage: 2088088\r\ncontent-length: 38138\r\naccept-ranges: bytes\r\nserver: edgeone-pages\r\ndate: Mon, 11 May 2026 12:26:51 GMT\r\neo-log-uuid: 1538569465630238891\r\neo-cache-status: Cache Hit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64749,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24937)","md5":"21e9069bd27c2cdfc464e45cf8bc3848","sha1":"becffd7884868fb6e14d22e336352ac2d2215403","sha256":"33a646181ebbe661dbdbab6391642dd98e9b04847ee9378a2ef9c0227fe1b4fb","sha512":"f550e53ad63cc81b5ff2524821a2b8b9412dfa5fe1edb61239c656c4d49c1c2c9cd27b5dc1f7b621c2cef9a3836c5833dba6afb80676686808741174e1c570f9","ssdeep":"1536:DLQRi3V/pkp4x2/kMOpDcXM9Iol7vckDS+qCC:nQRg44k/Oaolbck7pC","tlshash":"54538e7639b699d120df8cc86a665a2d6df46313d109c448fe8c97f48fa3c6cdab7204","first_seen":"2026-04-24T13:17:57.791256Z","last_seen":"2026-05-11T14:34:45.298102Z","times_seen":6,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":366,"dns":95,"connect":30,"send":0,"wait":31,"receive":4,"ssl":239},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seduce-fjhtcxulyk.edgeone.app/","date":"2026-05-11T12:26:52.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seduce-fjhtcxulyk.edgeone.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 May 2026 12:26:52 GMT\r\ndate: Mon, 11 May 2026 12:26:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21329,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f1522abfb2f0a52d3866bc11cc6e54fc","sha1":"15db7eed71085429578bf753908e054c16256db4","sha256":"ac0877eb80841eecb48e95b9c57ebd8c8ee05096e2e8daa0b65ed69a2a62d9c2","sha512":"476d1c9c7aa754c2b6823ee58f97af6059c778039e7897173892e98cadf97e54a58909558a58616094212ae75a6c2748a46aaa0a8d787d513e8bed643f2a2637","ssdeep":"384:jK84YnoBGpfd9c4xpxCW5VMtqYDuw4Ah0Oc3rqYIL:zbAc3vU","tlshash":"20a2e0814007a015ae57bcc737ce7d25ae0d12787500d5b9abfe4ac9dc86ca583b4fae","first_seen":"2025-12-31T20:43:14.648276Z","last_seen":"2026-05-11T14:34:45.295196Z","times_seen":139,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":83,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconscout.com/icon/free/png-128/free-metamask-logo-icon-svg-download-png-2261817.png?f=webp","fqdn":"cdn.iconscout.com","domain":"iconscout.com","tld":"com"},"ip":{"addr":"172.64.147.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seduce-fjhtcxulyk.edgeone.app/","date":"2026-05-11T12:26:52.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 02:10:40 GMT","end":"Sun, 26 Jul 2026 03:10:36 GMT"},"fingerprint":{"sha1":"B6:85:25:C6:AE:BE:4E:38:16:14:CB:D9:28:C8:6E:54:99:F7:74:F7","sha256":"CD:23:15:BA:D2:D9:4D:05:79:70:C4:6D:EC:AC:9C:E3:E2:99:30:A3:9F:89:40:26:E9:AB:86:F1:B5:08:09:28"}}},"request":{"raw":"GET /icon/free/png-128/free-metamask-logo-icon-svg-download-png-2261817.png?f=webp HTTP/1.1\r\nHost: cdn.iconscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seduce-fjhtcxulyk.edgeone.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 12:26:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4788\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"2261817.webp\"\r\ncontent-security-policy: script-src 'none'\r\nserver: cloudflare\r\nx-request-id: e29D8Hf4rxqCrDK15SKzT\r\naccept-ranges: bytes\r\nlast-modified: Mon, 11 May 2026 12:26:52 GMT\r\nexpires: Tue, 11 May 2027 12:26:52 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=bbofhAYwb6Yg1n4lrV8BtMihnqk6_u9QwaUvVH7XgEI-1778502412.1954947-1.0.1.1-LvqzMFgMTal1YTMjJFx2lFRcIABSlOFt7ZxdYV68RXzqUiEf54M3xamM_n2dUMxiWbavHmeaOjBWOmMzmonSj2DAv2Pzn6zbcsG79eE5z0dmI14i7.GgJ3agGdsWftgz; HttpOnly; Secure; Path=/; Domain=iconscout.com; Expires=Mon, 11 May 2026 12:56:52 GMT\r\ncf-ray: 9fa12cac3d135697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"073aed1ab2b3c741bdafc1b4c08ac605","sha1":"a7d235c1bf5cede2c55f85b51b3244f1629eddcf","sha256":"536a30d8c5f82eb519680f56cf72a82d4d4593f745c3006fc7b52f5d6aade8d1","sha512":"f68ef9b57d3121c1bd1132c53a95dcbf893943a698634e7e7d88f72692b3f95fd2f5699d5c0ea11da610ac4c7a19d46ed3252af726cf4ead4454e45bfca0fa05","ssdeep":"96:7v9XVQBLyfvZC/nEpEEY1KoxiID+nYXjcUKQOuQ4H48/+:heBOfvZ2EpeKGiID+wcUK18G","tlshash":"b3a17e42dd544c11c86246b709bf7b14b72478ca4873c1b97bb8b151f7721ae3d6b286","first_seen":"2025-03-29T22:02:09.704783Z","last_seen":"2026-05-11T14:34:45.295965Z","times_seen":32,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":51,"dns":35,"connect":1,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm.js","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"ip":{"addr":"43.152.186.21","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seduce-fjhtcxulyk.edgeone.app/","date":"2026-05-11T12:26:52.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.app","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:84:C7:1E:F8:5A:EC:5F:B1:17:36:FB:01:CB:DB:C1:0E:C5:4D:09","sha256":"D2:65:EF:F3:E0:E5:38:B3:F8:DB:9F:90:CA:EB:E3:58:AA:0B:3D:23:0F:A0:A1:7C:7A:AC:21:E2:D7:61:A8:18"}}},"request":{"raw":"GET /pkg/form_wasm.js HTTP/1.1\r\nHost: seduce-fjhtcxulyk.edgeone.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seduce-fjhtcxulyk.edgeone.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 08:23:28 GMT\r\ncontent-encoding: gzip\r\netag: \"b27f1348f70865ce93ea4a869c67cb37\"\r\ncontent-type: application/javascript\r\ncache-control: public, must-revalidate, max-age=31536000\r\nage: 2088041\r\ncontent-length: 5771\r\naccept-ranges: bytes\r\nserver: edgeone-pages\r\ndate: Mon, 11 May 2026 12:26:52 GMT\r\neo-log-uuid: 12015760231478003518\r\neo-cache-status: Cache Hit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b27f1348f70865ce93ea4a869c67cb37","sha1":"1519245d28c4a481be67c1f12de2b49338ef7975","sha256":"d32d7faca4d88422812091af31fa4e85d64042b6fa74125e793200dc27ac10d1","sha512":"26f90d4724e8967497174a3c84390caf957eeb7ad59a8a959d2aba5005a56dc4b3feece7b9451304fb9ae23df5161abc280fca3d8985dce9369f7fa39f80b208","ssdeep":"768:/sQjonHIDMDOQzi8y1ryTpcw0wj5CcEzK5NqHy6UoZDicwiTa:/sQjonHIDMD3zi8y1ryTpcw4uoZDeF","tlshash":"f3c20f4839f720a58b97b0ba4b0fad5966365947274cee94b94cc7a05f3306cc1e7acc","first_seen":"2026-04-24T13:17:57.794441Z","last_seen":"2026-05-11T14:34:45.296614Z","times_seen":6,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-11","alert":"Hunting_JS_WebAssembly","trigger":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm_bg.wasm","fqdn":"seduce-fjhtcxulyk.edgeone.app","domain":"edgeone.app","tld":"app"},"ip":{"addr":"43.152.186.21","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seduce-fjhtcxulyk.edgeone.app/","date":"2026-05-11T12:26:52.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.app","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:84:C7:1E:F8:5A:EC:5F:B1:17:36:FB:01:CB:DB:C1:0E:C5:4D:09","sha256":"D2:65:EF:F3:E0:E5:38:B3:F8:DB:9F:90:CA:EB:E3:58:AA:0B:3D:23:0F:A0:A1:7C:7A:AC:21:E2:D7:61:A8:18"}}},"request":{"raw":"GET /pkg/form_wasm_bg.wasm HTTP/1.1\r\nHost: seduce-fjhtcxulyk.edgeone.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seduce-fjhtcxulyk.edgeone.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 08:23:28 GMT\r\ncontent-encoding: gzip\r\netag: \"c677b9c4e9938b4386eeff52d04c268e\"\r\ncontent-type: application/wasm\r\ncache-control: public, must-revalidate, max-age=31536000\r\nage: 2088036\r\ncontent-length: 42907\r\naccept-ranges: bytes\r\nserver: edgeone-pages\r\ndate: Mon, 11 May 2026 12:26:52 GMT\r\neo-log-uuid: 11844420501759411488\r\neo-cache-status: Cache Hit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":87375,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"c677b9c4e9938b4386eeff52d04c268e","sha1":"3d74b4f717b9a55bfef5af18a38a605e12a7db37","sha256":"c5b690f202a558714335fbb673e28b24557654db239c49d961ec5d6d2d8f0e56","sha512":"ba5f9e420a0d46a4ccc3e5eb2cf108427c14a6fda507e1616e3fff85e86c9026647683a0d656dc3f5a13bcf18faac2152bcc579099cf1da84df51740e5db3c46","ssdeep":"1536:zjwqUiy3Xgkmx934NoFmEle51H2uWmGDBhxgxLDC1pael/PeFe/FAvuCscDNjkFv:zjjUXngk1oF5lcy2BesGFAvuCvD5Xo","tlshash":"56832a0a371a1581f410593a001cc531e76fa1c077e9bb79dacd78e76efba8d3686a70","first_seen":"2026-04-24T13:17:57.795801Z","last_seen":"2026-05-11T14:34:45.297088Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-11","alert":"Detects file containing Telegram Bot API","trigger":"seduce-fjhtcxulyk.edgeone.app/pkg/form_wasm_bg.wasm","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"seduce-fjhtcxulyk.edgeone.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v67/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://seduce-fjhtcxulyk.edgeone.app/","date":"2026-05-11T12:26:52.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/googlesans/v67/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://seduce-fjhtcxulyk.edgeone.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:37:21 GMT\r\nexpires: Wed, 05 May 2027 18:37:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 17:14:52 GMT\r\ncontent-type: font/woff2\r\nage: 496171\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55236, version 1.0","md5":"c18fc0a75463dec3dcb57969fa6c9024","sha1":"200047bb27ba0c2002768ce4fca4a5fc3274215b","sha256":"d071523f3ff7e73cb803fc2f604365b6694fef67bae945b1c7cf541c2f6cf263","sha512":"6bd18f41722f0d687484d68f6d8c724d6d315d92654782f21e649b39bb6a88b3a69fcfbbedc401e025902580b28da724e0eb0a617d7e8a12b7ae12b85513d433","ssdeep":"768:KQMMPYoc5yvQUSnLUDwYxUUnaoeHxszW82F0wBWmEA5nCX7IPKJrkVZli0fREaa:DPYp5aQVLUcgao46Wh7BV67pIVZlif5","tlshash":"9043021806cbca8e58a80c0e16f54ece555c3f6bfa2dae58408f9384b4cd893dd6f360","first_seen":"2025-12-31T20:43:14.58798Z","last_seen":"2026-05-11T14:34:45.297586Z","times_seen":153,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":82,"dns":1,"connect":8,"send":0,"wait":9,"receive":12,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconscout.com/icon/free/png-128/free-metamask-logo-icon-svg-download-png-2261817.png?f=webp","fqdn":"cdn.iconscout.com","domain":"iconscout.com","tld":"com"},"ip":{"addr":"172.64.147.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seduce-fjhtcxulyk.edgeone.app/","date":"2026-05-11T12:26:52.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 02:10:40 GMT","end":"Sun, 26 Jul 2026 03:10:36 GMT"},"fingerprint":{"sha1":"B6:85:25:C6:AE:BE:4E:38:16:14:CB:D9:28:C8:6E:54:99:F7:74:F7","sha256":"CD:23:15:BA:D2:D9:4D:05:79:70:C4:6D:EC:AC:9C:E3:E2:99:30:A3:9F:89:40:26:E9:AB:86:F1:B5:08:09:28"}}},"request":{"raw":"GET /icon/free/png-128/free-metamask-logo-icon-svg-download-png-2261817.png?f=webp HTTP/1.1\r\nHost: cdn.iconscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seduce-fjhtcxulyk.edgeone.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 May 2026 12:26:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4788\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"2261817.webp\"\r\ncontent-security-policy: script-src 'none'\r\nserver: cloudflare\r\nx-request-id: e29D8Hf4rxqCrDK15SKzT\r\naccept-ranges: bytes\r\nage: 2130040\r\nlast-modified: Mon, 11 May 2026 12:26:52 GMT\r\nexpires: Tue, 11 May 2027 12:26:52 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=oOfuQr249InfMEEn1u7Azc1p6DmdVE.rrMQsvl4cobc-1778502412.4849472-1.0.1.1-Q_UKGBKOUkZ9LLR93lXVw84Xk_Ikm8zys4QFeHmNtgO.zcn.UxGPAVo13szN9RftdDRe2UmysD.C0TiinOEiTE0Nwo_71GR0uiOvopZWQ6kjz2dja.bRJAksG._Knefw; HttpOnly; Secure; Path=/; Domain=iconscout.com; Expires=Mon, 11 May 2026 12:56:52 GMT\r\ncf-ray: 9fa12cae0eacb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"073aed1ab2b3c741bdafc1b4c08ac605","sha1":"a7d235c1bf5cede2c55f85b51b3244f1629eddcf","sha256":"536a30d8c5f82eb519680f56cf72a82d4d4593f745c3006fc7b52f5d6aade8d1","sha512":"f68ef9b57d3121c1bd1132c53a95dcbf893943a698634e7e7d88f72692b3f95fd2f5699d5c0ea11da610ac4c7a19d46ed3252af726cf4ead4454e45bfca0fa05","ssdeep":"96:7v9XVQBLyfvZC/nEpEEY1KoxiID+nYXjcUKQOuQ4H48/+:heBOfvZ2EpeKGiID+wcUK18G","tlshash":"b3a17e42dd544c11c86246b709bf7b14b72478ca4873c1b97bb8b151f7721ae3d6b286","first_seen":"2025-03-29T22:02:09.704783Z","last_seen":"2026-05-11T14:34:45.295965Z","times_seen":32,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}