{"report_id":"1005999c-9de3-422e-8352-f28e1469e5eb","version":6,"status":"done","tags":[],"date":"2025-10-03T19:46:01Z","url":{"schema":"https","addr":"remittixx.vercel.app/","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"remittixx.vercel.app/","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"title":"Remittix | Crypto-to-Fiat Network - PayFi"},"submit":{"url":{"schema":"https","addr":"remittixx.vercel.app/","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-07T19:46:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"remittixx.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-03T19:46:02.196977Z","last_seen":"2025-10-03T19:46:02.196978Z","alert_count":58,"request_count":58,"received_data":3690003,"sent_data":27033,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"remittixx.vercel.app/","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8fcfa430ab69709470c9d3e4e059041","sha1":"4669a92a61563734ecdddde16fa8946116c8d3e4","sha256":"d8139a3030b4774fcd9a01ce5eccaae0e7b0093be491bdb6b8d7614076db5cf5","sha512":"941ef825b5422d10485e4ef12bcc7c41ac31e38b516aa16ebab5f9b718f9c5304d8b4253b5f1fe664d8f017b80b2f2a3d9b2eb67f97be40b6353f57e95962c07","ssdeep":"","tlshash":"97d05e582074b57a288e292e4cce0cca7f229411e2084dcad9ecd4686ef1f6801e4989","size":251,"data":"","first_seen":"2025-10-03T19:46:06.672573Z","last_seen":"2025-11-29T09:05:29.742362Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ba065feb9e3cec38e7b51763ed80fab","sha1":"fdb094d8252cb16255e475fc1aabb41e78b3e72a","sha256":"4b5b817c54de8e143839d9734fe63b28abd251271132eb7f770c0dfb8b72d951","sha512":"bf6e548aed9184b698cb60a9f55f2902392696115c861eedf860071778742c33af3f244389232f6b751ac86b3287d9c29f1c06587be5a025f2595a4098a15520","ssdeep":"","tlshash":"5571bb3aeb00173bdc8fe9fdcfd5b8d42d62497262596920691ce103a16ce7487bed84","size":3631,"data":"","first_seen":"2024-09-03T15:07:38Z","last_seen":"2026-07-17T17:59:57.858167Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"remittixx.vercel.app/card.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /card.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"card.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"e21466270e665c7fe3e2e2cdc169ee80\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sl9nk-1759520739799-7de05aa7b508\r\ncontent-length: 740\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e21466270e665c7fe3e2e2cdc169ee80","sha1":"0189646a1b496f74b2c456dc3e4aabd1705184b6","sha256":"5385a1c9fecbcff019cdbce2b953ada1da55a06b0b5961d7be9081d98da90919","sha512":"5f613204751fcd53faf95567e70a97958f2f2df6e5c17f69ca8438709318cc5f44e6e07bbbf2a2fba7361000ad8240fda0989942a4ec29512e5045f4b2527711","ssdeep":"","tlshash":"a30165e26508d8d8ad31da22bdc6692071af5fdd225071466f146512473bc12b182bc2","first_seen":"2025-08-22T21:02:40.863613Z","last_seen":"2026-06-21T03:44:54.305526Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/bank-account.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bank-account.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bank-account.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"a75b89d8e9c17bf30426ea0dae48013a\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mjtnj-1759520739808-16a52e52125f\r\ncontent-length: 832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3761,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a75b89d8e9c17bf30426ea0dae48013a","sha1":"4e80ecaf0f49ce6f3417bd0e11f7482b20e163d3","sha256":"79c64ac697818f529fb20779ef3f81dde6acf9b646c98a9b0c87529b65382a49","sha512":"818af9c84eb96efc1a648686606e0b0ba154ab1b2ac229d05b6d0993c2b47be4ef1ba35d406a5766e737b568cc85599b377a81cf59ccf7ced7328971867eee9c","ssdeep":"","tlshash":"50719c69b259ac37e268c6dcea81c468102a42e3dbc152b68092ff2f51319d32d2f3d5","first_seen":"2025-08-22T21:02:40.764319Z","last_seen":"2025-11-29T09:05:29.71568Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/channels4_profile.jpg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:39.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /channels4_profile.jpg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_3.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"channels4_profile.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"6bcef2588ea0d68899ed37bdbd01ec5f\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m8rfg-1759520740006-a21777678ae6\r\ncontent-length: 4627\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"6bcef2588ea0d68899ed37bdbd01ec5f","sha1":"4dbfba9c12e0851338d72e1f56ab951e102c5537","sha256":"be181c30721b7d038d693e46a8e3f9eac4cd32bf972b4bed9efce3193edd26a4","sha512":"9bdc5519693bf9deaf5b1bae87b72485bdf487356d4b96e0b9ea238b3878264fce8d5678dc8b68ded9990c970b8fa60581cfbb069f7f760369d2c25f6c5dc741","ssdeep":"96:3HbSe1CTw2PAFXnUjuvvlsem+gbcstmy1KStlkmTUA4JKr8MVziH:X2g+q3UjuvvavLVlA7JKr8mzk","tlshash":"afa17d67a7148c21feeca53d443e7bae2c0d828d54a1e7db1807152b7cd2dd901be256","first_seen":"2025-10-03T19:46:06.593698Z","last_seen":"2025-11-29T09:05:29.733024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/bing.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bing.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492234\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bing.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"fd1dd837545beb488ead507cfabccb0d\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::52v6f-1759520739809-d0ee006e0118\r\ncontent-length: 1687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"fd1dd837545beb488ead507cfabccb0d","sha1":"1110236dab8ec4b375edca5d7cec8f40e69ac738","sha256":"dd78f86f614c83db4fa60df8cc38d5d409f9e8955001e5195a4bc7f1c45b3e35","sha512":"ff743a86ad7a1ffbe9632eb4969435ebc774c9d8463cea6b3003e1336d4f2d870d3b29f08db8807a83215458a24537efdc3f0955b9a288e1ed256e29deb3fcc0","ssdeep":"","tlshash":"70313ac4a1dcc8e0e33b1c09489420bfee6713240c2049b829b6a1aec2a5f93f4d0133","first_seen":"2025-08-22T21:02:40.800694Z","last_seen":"2026-06-21T03:44:54.31341Z","times_seen":17,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/ethereum.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /ethereum.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ethereum.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"ef6b5bb77e416735e18b367e2233842a\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7hjx7-1759520739808-4274085bf883\r\ncontent-length: 3635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 45, 8-bit/color RGBA, non-interlaced","md5":"ef6b5bb77e416735e18b367e2233842a","sha1":"502576748710432949d0a0357e6ee1dbe9b486ab","sha256":"beb777c368a08afd24b574a78059d97b6c6b75fd50beafd07071ab6f22ef97b7","sha512":"4c76411521124e33e9ca5a4b6771037f855963211bc5bc70f72e16ab4e2e8b9ab4f7eb470c1812c96bd3d54b1961b461159109f1141e6f8e96e94c8cc4dbbe02","ssdeep":"","tlshash":"24718ed85a752ade421bd40946130bc93c378026a6cb9e10caf25472f1d2ba21fbcb92","first_seen":"2025-08-22T21:02:40.716703Z","last_seen":"2026-06-21T03:44:54.293639Z","times_seen":17,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/d5a68aaf754b23dc.css","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /d5a68aaf754b23dc.css HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492234\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"d5a68aaf754b23dc.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"a98327e6971b3278ab6b10348d433412\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vmldl-1759520739799-7d9086cc1449\r\ncontent-length: 2875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13911,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13911), with no line terminators","md5":"66ceb69be796f8d92422a1e4593fdd0c","sha1":"d06d823b8a2a4a42013c34effb774244eafd413b","sha256":"4d646a791318beb91681687dd6b4af1c6b3f274aeece4543d936de1cc880b3cb","sha512":"9b7baa430da09e12c2fe2d5652f866a725ac4b955f155e0ef84c8fefcb865011a31e2b264ac99ee5458c6dec9bf546e7bb16ce398039ba1e875f33b24fe8fc50","ssdeep":"192:OJTXdKSme+jeHo0Rr3n6unv2GZHcZ5DfufNzz:OJDdKW+SImr3n72WoRWfNzz","tlshash":"3552fc985310281392134e3317e69bb6e578488147c3ce6a91c1ac98cbfbcbe136f779","first_seen":"2025-10-03T19:46:06.600425Z","last_seen":"2025-11-29T09:05:29.737321Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/cross-border.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /cross-border.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"cross-border.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"7291d9d82db77833dd479e2e241bc998\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sl9nk-1759520739808-6c67c0d1d101\r\ncontent-length: 426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7291d9d82db77833dd479e2e241bc998","sha1":"1cbfadeb5a4795530561b91bfdbd75d49cb1f1d7","sha256":"4ed418f21126284d47e7e6aa231ec607d43cf46d2ffbeda93b1001264c8df33a","sha512":"1682607253bb6289911ce21216233e7c746c70ae3045db3b2f845d301720235ac9d3dfb5cdbbcbedcd84c85169b4c1332631ec7ac12bf5c30398f83ebfe59749","ssdeep":"","tlshash":"27214b2ef26aac76e169d9ccdd81d03810a942d3d7c291714192ff1f6834ad32d2f1e9","first_seen":"2025-08-22T21:02:40.72467Z","last_seen":"2025-11-29T09:05:29.709663Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/index_1.html","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index_1.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"189cdb7305cc2d3d6aedb3a188c22633\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739848-bdfcbcaa62a2\r\ncontent-length: 4484\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33113,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (31543)","md5":"189cdb7305cc2d3d6aedb3a188c22633","sha1":"491a4e623f04765106f7f62fef1011a993f6e847","sha256":"2b8ef58341dad4d8f044af75e563f6dbc8486f00dba2726b22f4507145dccfaa","sha512":"5d9f95804fd87fc21fea90aa7f553f43592f9c7e1e8439affa290bd8e85f85216f5cc55623f344985d78f7fe4c9ce591e66e4fb642356ac5c08e658d445f7121","ssdeep":"768:PzM4B0ISHuDi+EJM4m7bMOKnQEmvMcFh8l5wo+p:o4OHuDtEK4TOKOE2","tlshash":"3fe2f1ab88601a1950338b1ccfe4aa55033ce593a8756fef3757251ecb4b789739a307","first_seen":"2025-10-03T19:46:06.604712Z","last_seen":"2025-11-29T09:05:29.724289Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/e70eb293e0864b8ebcd467e662211a778f5fd930.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:39.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /e70eb293e0864b8ebcd467e662211a778f5fd930.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/www-player.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"e70eb293e0864b8ebcd467e662211a778f5fd930.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"2217eb4acf106b973f76116f3a118983\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bxkrj-1759520740006-807bd2c952b2\r\ncontent-length: 532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":532,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2217eb4acf106b973f76116f3a118983","sha1":"e70eb293e0864b8ebcd467e662211a778f5fd930","sha256":"f102c7c16752988a1bb0b193298c59500fbfa058a8366373c50e2b460bd7e858","sha512":"6605d68bf6b8e8645c8bb2e9f9482687c5896c0b3044ab47b731f33f67b78d1e0e7a260c2e4f7e7bbe4ed3b97358351a5756f0840c67d1dc11dec76d7fc5fd96","ssdeep":"","tlshash":"37f024aa9fd5072cda99e6500614a0c1364560a0a4bdf39ced832a1145096fb90bbdb5","first_seen":"2023-11-13T04:07:30Z","last_seen":"2026-06-21T03:44:54.271703Z","times_seen":165,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/7b83c02aaf481b4b.css","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /7b83c02aaf481b4b.css HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492234\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"7b83c02aaf481b4b.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"19f95125d8a307800644d5fc5279b457\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m549n-1759520739798-baf55f423a02\r\ncontent-length: 11164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48971,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (39600)","md5":"2fd9647f2135054d9aa64934fa016d32","sha1":"78dc06a61910d0f7b70d5c01a61cee3ff4ff9509","sha256":"83d600ab3efe810cb2867e7e2aa507c994195750e0b8716ab88d17e031a87fa1","sha512":"99ed6ff7234eefc94335f5f537f4170419d79cc27523d6da586aba495d5a9bd288879675cd534c89c068bd64c12a0c3b35b35021a6eb19713b683e686688e4a2","ssdeep":"768:woHZGoeVsxEhBlHo0o+00fWqXmLqcZNwwIe:woHZGdVsxEhBlHo0o+00fWqXad","tlshash":"b823c8565a05243b3c2788f3d1e8af9cf01be1c2db6b56f9bacb240596c27d60b72345","first_seen":"2025-10-03T19:46:06.610099Z","last_seen":"2025-11-29T09:05:29.714165Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/tokenomic-small.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /tokenomic-small.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17241\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tokenomic-small.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"e5d144ef913c5bbbdcd66fb1f5e6f866\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh9z6-1759520739808-1866bbe80666\r\ncontent-length: 98104\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 414 x 302, 8-bit/color RGBA, non-interlaced","md5":"e5d144ef913c5bbbdcd66fb1f5e6f866","sha1":"888c80192d91f29a868216a87067515d8faf90be","sha256":"63ed421af756e5d67fed63d82cef34feaa1f2bcbba5ee850a6d50bfa1bb81176","sha512":"b350eabacb56e69e0b633ab4eaf9d5b41846f17b7ab63f9bf1ab1fc286ef922804b7b2345f24785b1bb7b7c535d819a75546787909c5764623e022e427adc940","ssdeep":"1536:Gt1DbTGyGmH9X+Dn7/fgPbvEQ8bEMSP49igp3Y7RepPX6l+4mTYp+ZbYSimjQS4a:Gt1Ti4uzLgoDEMSP4AgUCP9hTY9IcS4a","tlshash":"9fa312cab819bbfcc00ca4191d27661f673e2d5c82aacfec478f64052dac7968551f45","first_seen":"2025-08-22T21:02:40.804038Z","last_seen":"2025-11-29T09:05:29.707275Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/trust.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /trust.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"trust.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"9b19c4cbd24a2b4f69c89ac0ce821a6f\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjffn-1759520739811-885825fb35ad\r\ncontent-length: 1975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 31, 8-bit/color RGBA, non-interlaced","md5":"9b19c4cbd24a2b4f69c89ac0ce821a6f","sha1":"6a61db812ec99252e2a3172a387ecea72c2e1b97","sha256":"0ab071f9465906995eb27b8816a2d286bc3750450709ceca79bab7ae2178464b","sha512":"a8aab00c633914ddb5bd6587c522f5e989ebdc4f42163cd975e70ea65c3f3a5ed8eec63fc26af5fbac94d6a81aecc359e7d9e0b3a16762e5161151de8685a6a2","ssdeep":"","tlshash":"50412aef84864a7f682f027190a9e1bf602bf11a25da3c204915d562b144ee13bb6720","first_seen":"2025-08-22T21:02:40.719063Z","last_seen":"2026-06-21T03:44:54.22741Z","times_seen":17,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/bank-transfer.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bank-transfer.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bank-transfer.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"e9db351475e65a8f71b9956566bd5f21\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w5bz2-1759520739808-9968664fa253\r\ncontent-length: 1812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 67 x 47, 8-bit colormap, non-interlaced","md5":"e9db351475e65a8f71b9956566bd5f21","sha1":"bd8a6926be68a6671e8f1480d7377000254cc0fb","sha256":"19e09e90fffcbe0757b00e657b047be931d37b5357042b8b59a615728b8b1038","sha512":"e27c7752bbfca173fae635dcc1540605f6f296541edd26b6bd93890230fb4d21806abab0ac91b3192eb0d577b73bd8762e0f00763cfde98ffe4eb0c98d1ef55e","ssdeep":"","tlshash":"04312b13b99caa54ddb1435120155698c983dfe63fd5896033fc382f08381b9c008f1e","first_seen":"2025-08-22T21:02:40.72946Z","last_seen":"2025-11-29T09:05:29.734588Z","times_seen":14,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/adobe.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /adobe.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17241\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"adobe.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"7e4b8176bbe8e02b18afe93307c39b3b\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tfncw-1759520739808-555ca04805b7\r\ncontent-length: 1060\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 82, 8-bit/color RGBA, non-interlaced","md5":"7e4b8176bbe8e02b18afe93307c39b3b","sha1":"c60370fd9cad3658a120523cf89ade71a9fb69c7","sha256":"074475ce49bd4e3edc7309723738dd2d2b238d7d092cdf41f6e553c41bff757e","sha512":"4851aaa82a88a47e948d9f63a198d5df0170650c956b009b0dc5331fffa63a9b1ce934fc370713c92b72517f9e2277958fb00e09d1f1ebba791aac31a3f05a12","ssdeep":"","tlshash":"ee11b58bb2f0f02216f49ee2a24171ae166b1cb38f5c12a8e804aa3c4274d599112f86","first_seen":"2025-08-22T21:02:40.769241Z","last_seen":"2026-06-21T03:44:54.225467Z","times_seen":17,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/competition.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /competition.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17239\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"competition.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"b9f2a79b7e4e571847a272cdb693631a\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v6fct-1759520739808-514e2f092d78\r\ncontent-length: 144605\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":144605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1276 x 592, 8-bit colormap, non-interlaced","md5":"b9f2a79b7e4e571847a272cdb693631a","sha1":"2572016973bcb9865f06d0ffb381b1cbda234922","sha256":"46ebfb38d61e3ba33f6557c6026dd11be35d257253e5572e95528c13722754cb","sha512":"ea4d3eaaf8161a1152a149cc820f6a01d8976227af23c3e09b2525fbbe4bc1346812005d30ce0fd18f1675b269192f9b64697d624ce2e20b2968b14e9e42c416","ssdeep":"3072:zD6Mscg8blOJJxzYxIiD9WcyT7not38IX+wWb4lQWK:v6MsGxI6Wc738IX+wHLK","tlshash":"5ee312fde73421bdb65b0d2aaf4239fac30721d5766c0262ed5f483d929589eb4c420e","first_seen":"2025-08-22T21:02:40.85907Z","last_seen":"2025-11-29T09:05:29.730588Z","times_seen":14,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/09e21e0c407686fada8f091959db2a2afe67b008.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:39.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /09e21e0c407686fada8f091959db2a2afe67b008.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/www-player.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17243\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"09e21e0c407686fada8f091959db2a2afe67b008.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"05f14103926cb26af3b6d0c952d1db5e\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mjtnj-1759520740006-297a759b8920\r\ncontent-length: 175\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 198, 8-bit/color RGBA, non-interlaced","md5":"05f14103926cb26af3b6d0c952d1db5e","sha1":"09e21e0c407686fada8f091959db2a2afe67b008","sha256":"67ea46bc3d15351067faccb3613bd833dd3f15137a4b4a09f2e873fd41d024d2","sha512":"11d6d413673394979efb6a1ac01a5a60b92381a371344807ed849647b4483c431ca85db93d38bd29b4f0eb637bd692209bc7a6b94419b39387afaf6634c5db47","ssdeep":"","tlshash":"97c0c0e5f7d02f1acc50473931cc53bbc9d1c0140b02030cc333ce35a020b081086141","first_seen":"2023-07-06T12:39:17Z","last_seen":"2026-07-19T10:45:24.339596Z","times_seen":192,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/metamask.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /metamask.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17240\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"metamask.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"3d7f8338ba6615ce8c1a2bfae007ed15\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sl9nk-1759520739808-933a30853e4b\r\ncontent-length: 72565\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":72565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 365, 8-bit/color RGBA, non-interlaced","md5":"3d7f8338ba6615ce8c1a2bfae007ed15","sha1":"a46a8704f0ee89b7e9abaff1815ae5d4d6701234","sha256":"9f0e62efe4fe6dcdf7136f8dcb976af40d37d3e9f4dc3ac79ec1a2c8d2200858","sha512":"23a52bba013a4af1dfa5ca00236ab1e0598b8c26703418c9355ece6e90772f2e64940a76240689108b5a1d2d301d16e4a4c9a02ae68ece4e06e9b44b20cbe2a8","ssdeep":"1536:kWr5KmK4R56jgAoc4uKy7mOib2gXsWd9fp1FaCxo2H/juL9r:ZRAUc/zaX/3zF9xfq","tlshash":"4863e09bce647abf218451a89b4334d0e2bc5617b0319f6f6f5aa9382c974c4fe75e00","first_seen":"2025-08-22T21:02:40.759201Z","last_seen":"2026-06-21T03:44:54.269582Z","times_seen":17,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/www-player.css","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:39.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /www-player.css HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_3.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"www-player.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"ada55d7e97360c2fce24ee8edcbb1f33\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh9z6-1759520739910-b54b81ca0738\r\ncontent-length: 58811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":381865,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a0cb623cc2a7bdb730f3e21851d5a1e8","sha1":"23b7a30e349e4954f8bd7a714b93b5e5189f0189","sha256":"830e23bd475459498ab8b84c9363c38b969ffd353342edbf17b6101730840cd9","sha512":"82548f724c51df93cbd93065f31a5f47bb52bffa87fb7e3e20e24341041afbe2ed67b10a7a04f869635ab5f091a5ae51bcae4d26649a02b72ceaa1375f96df09","ssdeep":"1536:hIgoaFUgMnTthFgVMMMg7UDBcdILvPptpm8pKMY+MOn4yBOx5juDEnXrDJc7MsB9:doaFU5FgqMMg7UDBcQQufNyc5Im","tlshash":"6384b932f590232cf22b8d9997d5964c7339d983e2e21affe11165ebcbc7285135720a","first_seen":"2025-05-19T20:55:11.85641Z","last_seen":"2025-11-29T09:05:29.72081Z","times_seen":10,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/maxresdefault.webp","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:39.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /maxresdefault.webp HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_3.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"maxresdefault.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"6c5d4b1f66ba082a06ff36990cf35bde\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w5bz2-1759520740006-b555731feac3\r\ncontent-length: 158262\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":158262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6c5d4b1f66ba082a06ff36990cf35bde","sha1":"75cf1d63886a94ee8632d4ff2807c9c8a947ac01","sha256":"ea6935a2e92498da8d7eb65d0d72dde883b8295c0b9e8cf80ca3bafb608bd56a","sha512":"1bb52918f12f5fbd5fa3db9045aaa05f8007e36e61902a3a7f57f417e296307a925bcf2f6da2bbcdd0c3baaa7c647b16989e700e5a29402bf520adf9a6eb2f2c","ssdeep":"3072:Kkqe/zxojBEs9FmwDg/dRbwqcMtSWtXYncclGEGUQThAnxDS9Dn9M:JqKVojBN9Fmw0/Lb/cdWwcclnQThAnxs","tlshash":"07f3125e282add038a978edf6e2d06069e0956543f8d27acde98b44dd0730ce739ecc1","first_seen":"2025-10-03T19:46:06.624473Z","last_seen":"2025-11-29T09:05:29.71696Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/logo.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492234\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"3b4a5ad6b81cbab3e5ddd4ac48577992\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mnmjk-1759520739798-da11df4ea81f\r\ncontent-length: 725\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b4a5ad6b81cbab3e5ddd4ac48577992","sha1":"6c40e6d7b3cf9f8f95e49b44e080dcb568e8d6a1","sha256":"aff59938052a6ad69f4dfc564fe3a26c665616c7e38ae6c3560f2662eb975b67","sha512":"a390911f3ae6bab3315e975276c5860271b8ae1ea4ee349fd32f1f475c939ddde329d0cb61f62668d458d049d61fdae7df1593c1784030133d432d0facc94999","ssdeep":"","tlshash":"cf2124d823a453a99544cbf0825738d238b344fa29c2806586d95db2e9524ae8c6ddc3","first_seen":"2025-08-22T21:02:40.721247Z","last_seen":"2026-06-21T03:44:54.215677Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/stripe.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /stripe.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"stripe.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"8f09680c9916ccf9f9e79425987fdb26\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739808-ab104caf0b50\r\ncontent-length: 1987\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 63, 8-bit/color RGBA, non-interlaced","md5":"8f09680c9916ccf9f9e79425987fdb26","sha1":"1def4fa692e5cc412fc7a069fa406c7e2282eed4","sha256":"df7056a90899af54898b8f7de5b58753776575bac971c9f567d003dbce616d0d","sha512":"4cb7ee14a0bcee3d25b9dcdab4004041c51b213d054941d65ef07771216a028e6c21022b13d9451ad1ef4e70914dfba63bdcae939fb4b05906020c44b1671834","ssdeep":"","tlshash":"83414cad6524d14f30be566d31ef4e2dce32f7e526099641443c7d442d602dca9a8a3c","first_seen":"2025-08-22T21:02:40.792523Z","last_seen":"2025-11-29T09:05:29.735602Z","times_seen":14,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/coinbase.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /coinbase.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"coinbase.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"a5d5569e1249657aeb523dbcc786a92d\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mjtnj-1759520739817-bcca98ab783f\r\ncontent-length: 2762\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 131 x 66, 8-bit/color RGBA, non-interlaced","md5":"a5d5569e1249657aeb523dbcc786a92d","sha1":"84e33affe2b5535d1f382924cc2dd2848d86448a","sha256":"898c07b3f33edf06c72cdd2e5d52c18ceecd5c2998efdedf78164decb50d6f97","sha512":"06e7502ce6c6f3b707251f7d46a97bb956244d7ce63e27f138db789e1dd4cb1cb7bb08cabca55ebca92182a92d3904b322468fde3e0a8f5bc7f08993ae763c1c","ssdeep":"","tlshash":"7f515cea1f59e092c9d1943b447a50c22b32345fe08791013631129d8b86f53f91dc7d","first_seen":"2025-08-22T21:02:40.811731Z","last_seen":"2025-11-29T09:05:29.726279Z","times_seen":14,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/gNMKW3F-SZuj7xmf-HYoEoey.woff2","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /gNMKW3F-SZuj7xmf-HYoEoey.woff2 HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 89\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"gNMKW3F-SZuj7xmf-HYoEoey.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"26acc3ef4fcdaf6f4efd5ef0e9508803\"\r\nlast-modified: Fri, 03 Oct 2025 19:44:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh9z6-1759520739876-93938b76ba88\r\ncontent-length: 32240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32240, version 1.0","md5":"26acc3ef4fcdaf6f4efd5ef0e9508803","sha1":"d501b6f779e28215c415886a9e7a8c79f8d476f0","sha256":"9378c388e4dabb3331a27c58be43923cd8bbaed5867a8af34a03789cf689d6c3","sha512":"ca3e56697a54490944d3d11857e093fbb731f435d6a8aed66add3139ba153c7091bf0232cab56d11c595f43e1c68a5fb0202b6c9b87672238dfb76682abb34e6","ssdeep":"768:v5/zJz1/OOEOxoAP91zD7sAJpczbCVkttw2o:vZzJz12lOWAPXYATc6uts","tlshash":"6ce2f246a5d3ecdfc30209bd1aa8251bf4a27a9dcd93e30e77d819c8d56247cb28a404","first_seen":"2024-08-19T21:48:00.824328Z","last_seen":"2026-06-25T15:29:44.950978Z","times_seen":23,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/noise.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /noise.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17241\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"noise.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"1e20d61fcdfd0fcb08867b645f21cb74\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m8rfg-1759520739808-51460791b02d\r\ncontent-length: 505307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":505307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 1367, 8-bit colormap, non-interlaced","md5":"1e20d61fcdfd0fcb08867b645f21cb74","sha1":"6304d027461eb43a2341243713308c09b5a3b3ab","sha256":"af255fee651879b79f08384a7df35afe16ad66863f857bd3f9faa60f98787367","sha512":"6fd20495e000658e2f1b9fabea85b1c5a01b8c8a1aff0e21e0aa4d35bf3a50a39afa956a2999e42515e734fcc47fb762d47e6674b03e2d578215542f961a8e9d","ssdeep":"12288:rN3bh5PQCij/HfFAhRfwgCM2byJFlCMS5aZfU8bZkntK:J3ITnaLwgR2el4QZfURtK","tlshash":"afb42371cad70e54fca101f6408a0616f7ea18d136a051ef2a89265710b26ef1fe7b7f","first_seen":"2025-09-16T18:01:21.031203Z","last_seen":"2025-11-29T09:05:29.738136Z","times_seen":9,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/09e21e0c407686fada8f091959db2a2afe67b008.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:39.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /09e21e0c407686fada8f091959db2a2afe67b008.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/www-player-1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17243\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"09e21e0c407686fada8f091959db2a2afe67b008.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"05f14103926cb26af3b6d0c952d1db5e\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mjtnj-1759520740009-2a627b7f51e8\r\ncontent-length: 175\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 198, 8-bit/color RGBA, non-interlaced","md5":"05f14103926cb26af3b6d0c952d1db5e","sha1":"09e21e0c407686fada8f091959db2a2afe67b008","sha256":"67ea46bc3d15351067faccb3613bd833dd3f15137a4b4a09f2e873fd41d024d2","sha512":"11d6d413673394979efb6a1ac01a5a60b92381a371344807ed849647b4483c431ca85db93d38bd29b4f0eb637bd692209bc7a6b94419b39387afaf6634c5db47","ssdeep":"","tlshash":"97c0c0e5f7d02f1acc50473931cc53bbc9d1c0140b02030cc333ce35a020b081086141","first_seen":"2023-07-06T12:39:17Z","last_seen":"2026-07-19T10:45:24.339596Z","times_seen":192,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/maxresdefault-1.webp","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:39.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /maxresdefault-1.webp HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_4.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"maxresdefault-1.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"0448478cde4d3c315c706bb09d49a044\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bxkrj-1759520740009-e9c682a655cd\r\ncontent-length: 168488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0448478cde4d3c315c706bb09d49a044","sha1":"adb968b13cd89382463df1522e480bc451085f4c","sha256":"298a6e8fb5d8a47a22ae47436af37e04c26727c3a3dabe8c323e14bdf63d1fe0","sha512":"f3092b792dea9f1b09e1a428acf5f928dd12fa5122a6071f6837ff70039c8c4c0783db60b77dd1f08f429ef3e31f69a8faca5228794e7446da5ced963ef975b0","ssdeep":"3072:UrFCHCXk6lPIdzWkXM08OdiLhNLC6j1ASWtGSNtL98jJKkdDgSEYa12/rpTRDmu:ICmk6Nk8gdiLW6OSW0SNt0J3aYa10X","tlshash":"35f312fbbeca30f65c3bab2b550471ab6c94738ac471dce915b48c7082b5a18b139643","first_seen":"2025-10-03T19:46:06.63265Z","last_seen":"2025-11-29T09:05:29.739511Z","times_seen":7,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:40.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_3.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17243\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"KFOlCnqEu92Fr1MmEU9fBBc4.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"285467176f7fe6bb6a9c6873b3dad2cc\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bxkrj-1759520740036-ed1fb102ba5a\r\ncontent-length: 15552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-07-24T20:00:21.8978Z","times_seen":341615,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T19:45:39.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18447\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"de604ec4242b5b4fbf341c7ec99b17d2\"\r\nlast-modified: Fri, 03 Oct 2025 14:38:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vmldl-1759520739725-793ab8d5fb47\r\ncontent-length: 29105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140095,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21769)","md5":"de604ec4242b5b4fbf341c7ec99b17d2","sha1":"83404fa2f65b1854741a52c411d2a91ff4aa0fa9","sha256":"ff8cf2b077e8dbc35243af0127e935800aa1bf11e57b8b61ed7f523b01a09323","sha512":"7d77fb3a56b158e7a0b76649bbad156d1b24cf5d1ae9285eae609b607b9747dffafdd9ccaeb105a2155016b0259e261ab6c84ce879bab78a48650b51bef70c73","ssdeep":"1536:5ivH2txrvJ/y+WLnOtIBW3n2dv4wMPrEw8zXtiJa/UCrl4dIaR/eg9thozoBS:IOxUzBW32dv4wMPBJQUCZIxRTi","tlshash":"e6d3fa70a350657ab20747f8b6f1abae30b2205bd917d548b3fc02918fcecba4d76954","first_seen":"2025-10-03T19:46:06.63633Z","last_seen":"2025-11-14T16:53:04.413229Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":29,"dns":1,"connect":2,"send":0,"wait":11,"receive":11,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/index_3.html","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index_3.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"329ee3714e321df50bc7eb88e082e432\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8lvkc-1759520739848-441982b0b5ed\r\ncontent-length: 12808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":50887,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50871), with no line terminators","md5":"329ee3714e321df50bc7eb88e082e432","sha1":"29b7248d7b708a51d83f55b201ea938801f68f03","sha256":"ef3570fb18cc23084021561a7ef999a3a24ad5ceeefc0a806b26f5fcb8588e04","sha512":"e4d7a9a0f04d5da63c3fb787635f8e22e6c6e0a5214ef39b5393692a556b99f6b4296970f26dc0ae49e33696c3c2cc778f39fc60bfdc5b267c94888dd52ec8fa","ssdeep":"1536:IQ/JpfTzsMsqsRsXs2sIszs9sosmstsTsysEsPf/pxmmecIhj:n/JFJ5EwL/uOFFgsHbKHpxvC","tlshash":"0633b7f0c3500237c1870fc86469633e76a7858fea835c11abba73e45be7da8d9d6584","first_seen":"2025-10-03T19:46:06.639095Z","last_seen":"2025-11-29T09:05:29.712804Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/www-player-1.css","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:39.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /www-player-1.css HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_4.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"www-player-1.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"22facf954d636bb56219bb6ad7c7790f\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739911-489af19d0604\r\ncontent-length: 58722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":381515,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"2d8736956a29c753f9088c69632ad7d6","sha1":"de063439ad74e22151424e106a278352588ff1df","sha256":"7d40da09b89fdf9ad4f0c789b8581f3e9e42a75d19c1272af6c2cfe289cff26f","sha512":"0eb2148a442d96bbc535b766e47931b77efc6378c250c43983a2e890fde3d95b456d6f6a3e050b82f224569db2f16494c1446c8c40e4db90c6c0d3dfd8bf4718","ssdeep":"1536:hIgoaFUgMnTthFgVMMMg7UDBcpILvPptpm8pKMY+MOn4yBOx5juDEnXrDJc7MsB9:doaFU5FgqMMg7UDBcMQufNyc5Im","tlshash":"b984b932f590232cf22b8d9997d5964c7339d983e2e21affe11165ebcbc7285135720a","first_seen":"2025-10-03T19:46:06.641589Z","last_seen":"2025-11-29T09:05:29.73648Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/eth.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /eth.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17243\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"eth.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"e190bd619574f3cff85bf551e873daa9\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w5bz2-1759520739806-2da45d1ceada\r\ncontent-length: 978\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e190bd619574f3cff85bf551e873daa9","sha1":"bb7622631938ff4a62c5727e5e01e7fcb51aac48","sha256":"f27be8179b31c1d78e60c2c4a3618c2b96a45e1d6e8d355bcfbace20b336d294","sha512":"6620656dd3966259b7d8fc69aa699c152c6437d4f4dfff20d3a33ce2b2f105d20741734c714ccb79d32b092439764b835ef938dfd11f860b4747fed834bfa605","ssdeep":"","tlshash":"241194ed1bc1c43fc93d8359705943a074fa0cf68b58df05f946208385294f3a2e51b6","first_seen":"2025-08-22T21:02:40.856734Z","last_seen":"2026-06-21T03:44:54.33904Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/uniswap.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /uniswap.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17240\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"uniswap.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"3baee83d54410f4ca1ff16d82ee1a901\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b4z8x-1759520739809-8480d5534b9d\r\ncontent-length: 129962\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":129962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 639, 8-bit/color RGBA, non-interlaced","md5":"3baee83d54410f4ca1ff16d82ee1a901","sha1":"bc5f2945373412a3873dd3e76806fc64ad78a01e","sha256":"c833693b119ba414e1632737d7f41e6076a878d13a2bc9b981aac93c4ca173be","sha512":"9b2091571ed9e06d34bb03553a1fa894c192f81c21c93f78c98a7e514f77b29350013b42394e4abbbeaf5e965f06fd5a4a6bbade9bee1b7623939c770110016c","ssdeep":"3072:SNUkSqdaz7jYY9UNudCbOhzywA482178tMRmsLGILNTfS:SNUBqkD/UUdCbO4wpN178fsLGI57S","tlshash":"8fc3ce44ef9d467bb464a029b641608bd0453cbb3218dc2388e37b2fa76bf326d79d50","first_seen":"2025-09-16T18:01:21.100468Z","last_seen":"2025-11-29T09:05:29.727567Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/google.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /google.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17239\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"google.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"27f682fe6f0ff36aaa8d08925c46dc99\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d8q99-1759520739808-ecda4802345f\r\ncontent-length: 1854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 48, 8-bit/color RGBA, non-interlaced","md5":"27f682fe6f0ff36aaa8d08925c46dc99","sha1":"5df4b1559f480067ce5a0d741e642d498756360a","sha256":"bc169bd267c20c8475fd80026875e555664b9a57724a03029e25272fc8e05d20","sha512":"669b29dbfdef1d9d654499131db6457110ec4cae59aeb9e67971b92dc3e4c67d1a87a8a7d70bd8afac91be87d4ab1713c9836ffb8045ca78ba1a7d99ac1a9042","ssdeep":"","tlshash":"073119e21209efe3f26d243b574929e2d0464fee4734d8497ea67c0c30daa4b81643cd","first_seen":"2025-08-22T21:02:40.81471Z","last_seen":"2026-06-21T03:44:54.31234Z","times_seen":17,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/channels4_profile-1.jpg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:39.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /channels4_profile-1.jpg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_4.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"channels4_profile-1.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"627147877d15cfd63038f1aed292491e\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8lvkc-1759520740009-0268ca165d3b\r\ncontent-length: 4627\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"627147877d15cfd63038f1aed292491e","sha1":"1e733db575e9bbcf3bcb8dd1b6ed9aab5be2eadf","sha256":"8be6cbcfc7d003d44c609c3271c8712079ecacccaebebced124e67a8b82eba04","sha512":"ff2fb4d07c56b65a34dc8ba52bca7ae172c9f94972b5e3b6a3111de1c7c6eb2ad9b7c5afad6b618851930563bfa6f18181b709588d8dab11d4f145e148517dd3","ssdeep":"96:1I92SN3lL0dmFeRiytifxHjFH4Wm30bpECGjVXOD8MH2j14DDH:u9hNudpe3Hm3YGjV88My14fH","tlshash":"e4a17df91623e9a37298cf37134e43c80aa5eb34e15cc8598207b1102b56a7be1c7631","first_seen":"2025-10-03T19:46:06.646555Z","last_seen":"2025-11-29T09:05:29.71838Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/fivestar.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /fivestar.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17241\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fivestar.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"9008ab1b310ea3310ab88cf37a44f6bc\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8lvkc-1759520739829-f00c32a1dd1c\r\ncontent-length: 805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 31, 8-bit/color RGBA, non-interlaced","md5":"9008ab1b310ea3310ab88cf37a44f6bc","sha1":"a120e866675ccca068d26604b3b3c37c0cce261b","sha256":"ec0011f76da64b3af72527c4aa886bd4bbd23450d907545bbde205eee69c658f","sha512":"e055e2212976746de9abac14266c6e3b6e6f6cb52e45f4c75a09b48d9783ffbe142e5da49645e554f9c2bafc5057ce222014e8e56a285f34c774f42676366d61","ssdeep":"","tlshash":"0c0125c27892a838750e5eb3db4d4186c8bf5b4c125ad0481dec8579b32fd475e03ba3","first_seen":"2025-08-22T21:02:40.76671Z","last_seen":"2025-11-29T09:05:29.72243Z","times_seen":14,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/index_4.html","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index_4.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"ad427fc813d6078afc610531c4ad9ea9\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh9z6-1759520739848-8e045b80e63d\r\ncontent-length: 12778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":50781,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50765), with no line terminators","md5":"ad427fc813d6078afc610531c4ad9ea9","sha1":"a203c9c10e64680ce9ecf3aeca54d645952c4001","sha256":"b5314db5c638e54d9e65cd41aacc2bdcfd631b2e75a78eb887c530002e1e1fa1","sha512":"42de32b0850352338320b310b78de5bec76a86e6c4914bd8fe8638a4078d41ba3f0ff4da6e56be0a9e07953b726225e03d643e0bf415818e2056e12579df7448","ssdeep":"1536:KQ/J/fTzsMsqsRsXs2sIszs9sosmstsTsysEsPOl0cIhq:F/JvJ5EwL/uOFFgsHbKs","tlshash":"8833b7f0c3500236c1870fc86469633e76a7858fea435c11ab7973e45be7da8d9d6584","first_seen":"2025-10-03T19:46:06.649926Z","last_seen":"2025-11-29T09:05:29.712082Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:40.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_4.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17243\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"KFOlCnqEu92Fr1MmEU9fBBc4.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"285467176f7fe6bb6a9c6873b3dad2cc\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh9z6-1759520740039-b6e9dffdc688\r\ncontent-length: 15552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-07-24T20:00:21.8978Z","times_seen":341615,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/css2.css","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"css2.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"eaadec515fe89665a3471a73a8e9626a\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4plbq-1759520739798-ab1d777d8b05\r\ncontent-length: 587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-07-23T13:59:00.917986Z","times_seen":562,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/list.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /list.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/7b83c02aaf481b4b.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17239\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"list.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"3fbeb89a67017835c4ebd24937d0affe\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739885-2d40d018717f\r\ncontent-length: 412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fbeb89a67017835c4ebd24937d0affe","sha1":"10eec641b043ff98808c2ace91659e9221cf0da0","sha256":"1fabe6217604b42f3d374187df4a98d81b010a10284838ebc3c3de85f13cab6a","sha512":"87993bbac1832b4f38f02153fb8d4bb24ad11ce39a134f3f8ed721d164f42e256606b88041963a7056a449c9f24894426660f63652747246ef9fdbc0741bb2c5","ssdeep":"","tlshash":"ffe0e57b110dca814c0606e2592470a3d18734ec8282f8c0e78132249a94ccb9d43cb8","first_seen":"2025-08-22T21:02:40.824899Z","last_seen":"2025-11-29T09:05:29.708329Z","times_seen":12,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/tutorial.mp4","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /tutorial.mp4 HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17220\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tutorial.mp4\"\r\ncontent-range: bytes 0-12212881/12212882\r\ncontent-type: video/mp4\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"c92dcc0db6e198ebfd4876a400b312ec\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739900-975883010901\r\ncontent-length: 12212882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1063421,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"e26e7e6393643bf1207f6d9f6afde723","sha1":"ab414ab92489be84e5b5b6e382f087bce631dc9a","sha256":"d26d7bca7ab4dbef2b18d56b45f9b73ac6e1fa0576b45d85318d24ff571e8304","sha512":"bbb40d867c528a13c7a4b745a0d7c7a1dc7ca5872228d6d433d664b18ebd7795c4679584fe2285e1de19705494354402c597c57e3db19d01c5e0fca774308f1c","ssdeep":"24576:62ayZU4dMSw5w4tF/v3XR2blR8DTbuTL2K3XHPqtvaCM:DDdRwP7nURR8HqTtvcv0","tlshash":"882523f1f5c9682ad3de3a35c6399f13993a3d67e246183bd3287c0fe4186b23551688","first_seen":"2025-09-20T11:32:36.52702Z","last_seen":"2025-11-29T09:05:29.736081Z","times_seen":8,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/en.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /en.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"en.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"fcfef6780b36bef537381474df9d0be9\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6v8p-1759520739798-cefcf630e47f\r\ncontent-length: 535\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcfef6780b36bef537381474df9d0be9","sha1":"68b2ead4370e7ab7b70eb6d35a09c31e73c44fd3","sha256":"51a8613ac1b05eafb9486e6420336bd8b95dae7a9d11def6318776a61c701a08","sha512":"ec21f7b6951f00f0da0acfdb21bbbe037dcaa2a14f2a1de02c991f91af689b1039720801ebb90ca900379766d5726752ed7fd85a349db508d3f94edecc4ec0a0","ssdeep":"","tlshash":"acf0c9c8c32c7005c70a97105cbcf8e3d4c9a1ce588400eab4e09ae460aeba7dccadd1","first_seen":"2023-04-17T21:02:35Z","last_seen":"2026-07-25T02:56:37.052639Z","times_seen":2324,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/tokenomic.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /tokenomic.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tokenomic.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"f6d875925093aaeda21b05edf43af8b5\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bxkrj-1759520739808-c03a6ff2d395\r\ncontent-length: 37004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":37004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1178 x 891, 8-bit colormap, non-interlaced","md5":"f6d875925093aaeda21b05edf43af8b5","sha1":"c5da7bb2e67e643530db093750a0613c377fbfb9","sha256":"ccb71c8540a820bf9de20dc6eea9282236287233aebddb0b51fd3fedb990c9a5","sha512":"de8929ddb90686ecec5909c958e3898e5666237b7e243b873cda37563038ffda7d1258bcf4139c71307e85d5395ad45052b05cd6427f67bc4ace31d0be22e25a","ssdeep":"768:KyQJlNqzUPLVKfkZrPG81of6gkTyPE0wep/q:K3JyzUDVKs7QqkA","tlshash":"53f2f16d0a1b23e2f0942235464f6094c39ac81bd2d37cb3e87e56755f83413e763a54","first_seen":"2025-08-22T21:02:40.751146Z","last_seen":"2025-11-29T09:05:29.716475Z","times_seen":13,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/openai.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /openai.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"openai.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"6a3954a1c6560129f5fb17a79a0deb0a\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sgcx8-1759520739808-3d4a4e297c13\r\ncontent-length: 1876\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 202 x 126, 8-bit/color RGBA, non-interlaced","md5":"6a3954a1c6560129f5fb17a79a0deb0a","sha1":"e21585515641630f6db113ec9afee72ddafc1822","sha256":"f2780851e4606b57da43f2a0120cdb682832730a8e87b7758e4e849e1b3eb6b7","sha512":"1e86cedd20dfcca799c991286efab98e74fce064f126ced663ca456f1802b89e0bdc208d9fa08544808197538a8e7c3b51e161d5fd18b9cea86142bd052c4a27","ssdeep":"","tlshash":"4031e9b5442fb461d60843b57690f9af862aa1cd0c99701a20371b2ad7dcec91add985","first_seen":"2025-08-22T21:02:40.813236Z","last_seen":"2026-06-21T03:44:54.243085Z","times_seen":17,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/e70eb293e0864b8ebcd467e662211a778f5fd930.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:39.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /e70eb293e0864b8ebcd467e662211a778f5fd930.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/www-player-1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"e70eb293e0864b8ebcd467e662211a778f5fd930.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"2217eb4acf106b973f76116f3a118983\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w5bz2-1759520740009-2ae3e5b45c77\r\ncontent-length: 532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2217eb4acf106b973f76116f3a118983","sha1":"e70eb293e0864b8ebcd467e662211a778f5fd930","sha256":"f102c7c16752988a1bb0b193298c59500fbfa058a8366373c50e2b460bd7e858","sha512":"6605d68bf6b8e8645c8bb2e9f9482687c5896c0b3044ab47b731f33f67b78d1e0e7a260c2e4f7e7bbe4ed3b97358351a5756f0840c67d1dc11dec76d7fc5fd96","ssdeep":"","tlshash":"37f024aa9fd5072cda99e6500614a0c1364560a0a4bdf39ced832a1145096fb90bbdb5","first_seen":"2023-11-13T04:07:30Z","last_seen":"2026-06-21T03:44:54.271703Z","times_seen":165,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/usdt-eth.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /usdt-eth.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17243\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"usdt-eth.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"6151dcc150d53bb78ca22a4cca6059b6\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh9z6-1759520739799-88afcc07e652\r\ncontent-length: 1075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"6151dcc150d53bb78ca22a4cca6059b6","sha1":"b1d5b49f535b4a052fb46c7e541c64224a22d07c","sha256":"52871fb89d36cf4af5c03d860b8bfa98c8129c3d53aa100fd9b2476be7d287d3","sha512":"99f1436a825ae01c5f7ba3a27bda064d1ae9f8bae9821e017eaf3f4435005b6d75654627ac971f94c058ade994270dfe2a78973f87d597c05a1371b37ad4a945","ssdeep":"","tlshash":"8e1175fe606c1c6dd8dcc131d6b38f2af9893c68990621ed86473e3973b17555b62420","first_seen":"2025-08-22T21:02:40.790373Z","last_seen":"2026-06-21T03:44:54.300461Z","times_seen":16,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/header.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /header.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"header.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"090189dc0d21b1d465006c7808e0d9a2\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mjtnj-1759520739799-e7bb24c9d107\r\ncontent-length: 577\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1003,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"090189dc0d21b1d465006c7808e0d9a2","sha1":"d3e635e2c56df2229fa22fa7bc1ceb90bb8d377b","sha256":"46554097b5addf86b550ac284c1c5b2f288fb79394de24ea4e0e46f3b79ac152","sha512":"c69cc24c1096d9b3e074ad0c25a47b7d40d0bffe247c2b331a7664f6587184eda886082ed2d622d39fb43ed45936fca1cbc153884f760ddadf2e64c64bcda1f1","ssdeep":"","tlshash":"f711af36a1a9fc1ad555c25cfec4c46520218083d5c183b5d46dbf1e122bac3b91e7d5","first_seen":"2025-08-22T21:02:40.779857Z","last_seen":"2025-11-29T09:05:29.729059Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/button-left.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /button-left.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"button-left.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"62ed54301e16bd3deb69caff287c537e\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m549n-1759520739808-464222848361\r\ncontent-length: 752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":752,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62ed54301e16bd3deb69caff287c537e","sha1":"fd5e8148bea4a9842a7aa274b4e300a29be5c61f","sha256":"61220aea422ac7c51d9bd9dd6d521fc2b047bb0c70c3eefcf538eda7ed5dd83e","sha512":"453da5eb847a91ff06a6fdaecfc2ddf0fe0d2f724d854ac37a1064b137b7eb059e87bec13acac7f514d79172c56bd0513fb302b4c661675f8520ec1064c7f3df","ssdeep":"","tlshash":"c401d465a20cb819ca5084ac584fb14b70cbc2c44fa64be951861fdefe159d3321f5e0","first_seen":"2025-08-22T21:02:40.782216Z","last_seen":"2025-11-29T09:05:29.730057Z","times_seen":14,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/index_2.html","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index_2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"2f490bfa9d675c4ddab4a5a5afc6346c\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739848-9ca6d224969b\r\ncontent-length: 973\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2774,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1715)","md5":"2f490bfa9d675c4ddab4a5a5afc6346c","sha1":"d312c537bc234d4dab533ba3405a79de716fb155","sha256":"2ddceda9e680e1f1e1632fd2fbf85f245ba83ba8c00fd32ce8c695d33d82471c","sha512":"4704086ed35e500780560cf5f27c5e3c0721e765773f782312c26579b4399fd5978cc6f64d00e31e8f39c719eb956b1b3dd43c660b8038c6d8328f507d2a556d","ssdeep":"","tlshash":"c3516373a514282d513b9321fc1bb08c963f670ed9491cbebace23d989decb94033565","first_seen":"2025-10-03T19:46:06.662517Z","last_seen":"2025-11-29T09:05:29.738968Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/roadmap-level.svg","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /roadmap-level.svg HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/7b83c02aaf481b4b.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17239\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"roadmap-level.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"4ffa0ea97bfa6c69dc0c27c33988994e\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739878-7454b3b1c782\r\ncontent-length: 982\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ffa0ea97bfa6c69dc0c27c33988994e","sha1":"97ac55310a3c5aff15494b9bf571f716484b83fd","sha256":"d6b99b1ead069099dde59e84c36a03bc90dc50675c36f77ba5e6df2891c1f7da","sha512":"9e3358544f8a839f30bb66b54ac10ce8beedcf8b9b738c4b6330b626b65fe2c668d350721d3b5189d2c2f2d448b0d22eae86926c13c2cb5cd305f3586dad2144","ssdeep":"","tlshash":"e44164797398f4dea802836cfff848211b2d51f6f6408116cc0e2e264112ceae52f6d5","first_seen":"2025-08-22T21:02:40.737242Z","last_seen":"2025-11-29T09:05:29.723298Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/eth-eth.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /eth-eth.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"eth-eth.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"903fe3836f476dab921aafeb14a26bda\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh27d-1759520739798-a729b2acbc22\r\ncontent-length: 1037\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"903fe3836f476dab921aafeb14a26bda","sha1":"5996f7d5c0be4a2f74165744ba7b3eeaa98bd557","sha256":"659f52891ae008b41deed34128d1f6d3c5a555e25ece67a6239f2f99cd79d314","sha512":"5f0cc765082a988b93cb507edbfdf41cc3da3e1f29b1c79fbf924e0fa6f2fc6260acaf570430033ff2083c445fd6ed3d1a2f386d77cbba7fe68e92c8eae798cb","ssdeep":"","tlshash":"2d1108f8cbe31815d089710c43119f1a79cbac05af22a1aeed50703969f2f7d46803a2","first_seen":"2025-08-22T21:02:40.77818Z","last_seen":"2026-06-21T03:44:54.342814Z","times_seen":16,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/ge.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /ge.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ge.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"a4582f66e5c9dc186c6b41c7edfbf8d8\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vmldl-1759520739808-43d57c8cbed8\r\ncontent-length: 776\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 53, 8-bit/color RGBA, non-interlaced","md5":"a4582f66e5c9dc186c6b41c7edfbf8d8","sha1":"9aeb28bbea79b16cdd32bae091b8f7976f01cf3e","sha256":"a82632f59355c170b343d6995ddfe825e7e958f43fc8a8fd33fde9dec4196175","sha512":"6fbad604ed6e906f8c97698a2c587454e6d297682ffc070f44e7da74a365787ca1ba3be9b33e260b94a9c5e5cff9680120d1fa1a1f6d8fdcec694393f0beca5b","ssdeep":"","tlshash":"6c0170cea901888227169faa0b33a33091be38877a2d74907d22201b164e958cf5da70","first_seen":"2025-08-22T21:02:40.731462Z","last_seen":"2026-06-21T03:44:54.31954Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/wise.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /wise.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"wise.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"f8ce600444544fd27d1d9438efcf7ebe\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739823-36fcf29a26cb\r\ncontent-length: 3152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 57, 8-bit/color RGBA, non-interlaced","md5":"f8ce600444544fd27d1d9438efcf7ebe","sha1":"82c30960be89a2e3f72ecc090f20f7053c16e566","sha256":"967c451647e44e06caf0fbda580196985dd2751488ac8813a1d9448fb0a4d861","sha512":"d0a069e3ea81208f86a18e21b84b828fe6f82ad00ccb2ea57a5104fabef7be301a59bd165ab3e6015cf0a0dd5042ddf1fb2f932cc195e844ac762fd62a322e1b","ssdeep":"","tlshash":"e1515cf94ff94c1e8903c5f3704f352baf61828e2bb5b520d156688b483ae6f058bb14","first_seen":"2025-08-22T21:02:40.827146Z","last_seen":"2025-11-29T09:05:29.706755Z","times_seen":14,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/github.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /github.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17241\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"github.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"4200feaf35e650fa191fe076607179ed\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vbts5-1759520739808-2d8c6d150463\r\ncontent-length: 1660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 155 x 155, 8-bit/color RGBA, non-interlaced","md5":"4200feaf35e650fa191fe076607179ed","sha1":"69fffb0bcfee2386bd3da0c069b0b9ecd3c53cbc","sha256":"1d75a95f63316a6e78d27343fbb342ad50525494154710aa3997fe23c1e59aa0","sha512":"653e3bc90b0863f301ff702f081676d5388ca1b93c4ec50e535019f570691ecdcda3fc18e76c0e36e9f0c31a45608199fbdf2f027ebbad2ea0f1d5cdb32cfc82","ssdeep":"","tlshash":"b1310af553fc2be8d9384cf1427b2508291f0735390b40450f46e81a466fcba16d13c1","first_seen":"2025-08-22T21:02:40.795811Z","last_seen":"2026-06-21T03:44:54.308236Z","times_seen":17,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/favicon.ico","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492232\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"7962f4ee94fa1243bd9b2396f4391e6c\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8lvkc-1759520740004-87522ddfbff2\r\ncontent-length: 722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":722,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 56x56 with PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"7962f4ee94fa1243bd9b2396f4391e6c","sha1":"3947ea06b47f6f4e09fb1de8101a49db7a8154ca","sha256":"fdefecc312e5e5636340c717c640b0436c73eae85f25cfd2cf75f93d51e5ea04","sha512":"b7cd6ea707c17d5f1055b20bbf36b47dbedb211040866d456594116e6424cfa59b7dfbe268550de9ef7940a00ff865910e1c31079e7dadb2c5b212be4904a8a7","ssdeep":"","tlshash":"b80199b3e29b4708cc4b31c3d5a64433f25c838d31f6e60c4019e6695c461c7d2c0e03","first_seen":"2025-08-22T21:02:40.746517Z","last_seen":"2026-07-19T19:27:01.206421Z","times_seen":20,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://remittixx.vercel.app/index_3.html","date":"2025-10-03T19:45:40.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_3.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"KFOmCnqEu92Fr1Mu4mxK.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"5d4aeb4e5f5ef754e307d7ffaef688bd\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w5bz2-1759520740036-2e45703cdbac\r\ncontent-length: 15344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T20:00:21.885603Z","times_seen":544141,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/us.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /us.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"us.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"ef59e59b8c3c04fd96266d616d44cb1b\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6v8p-1759520739808-30ab92e3083e\r\ncontent-length: 2462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 55, 8-bit/color RGBA, non-interlaced","md5":"ef59e59b8c3c04fd96266d616d44cb1b","sha1":"2fab6cc6e60623995721878f97b083ac92df49f3","sha256":"a34ce979ddce00e12dd12657d7df72fd3cf950da364d7e143e094f8cbbd3cbfb","sha512":"0eb09a3c539e199331f824ac3f1e356276db103df60cf82f0c6c13886da2f7af8f4e8aec09ab285b0198dffcdbc65baeaa82b92635875e678c8e03f643c579a8","ssdeep":"","tlshash":"f5515f954a1a073fe91b3405b039ce4e363f7c4f33d0514244fe96357525624617358d","first_seen":"2025-08-22T21:02:40.691821Z","last_seen":"2026-06-21T03:44:54.275605Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/featurecard.png","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://remittixx.vercel.app/","date":"2025-10-03T19:45:39.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /featurecard.png HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/7b83c02aaf481b4b.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 492233\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"featurecard.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Oct 2025 19:45:39 GMT\r\netag: \"dd143d790ad4d471813b9efd16f1335c\"\r\nlast-modified: Sun, 28 Sep 2025 03:01:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520739875-b09f65f66909\r\ncontent-length: 20287\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 311, 8-bit/color RGBA, non-interlaced","md5":"dd143d790ad4d471813b9efd16f1335c","sha1":"60699fb41fbd2a0201fca791bf14b0379dfc9c86","sha256":"f28a261697523030111e8e2f552b90242b0b33cd6fd7a4af5db0b23140050989","sha512":"e5db68ddd8e4804a1f0f5e866a2416578c5637865cb9ed11a2636ea8cbb6cb6325c947bb4827eed5cc0544079cc0e6274f8a3dcd19b6221df0c4396e6b9f5b42","ssdeep":"384:8eLsi3hNepe5ofA7Oe1dZeGW4AH4L8nSs+xw7fmLybmq5dGEatMukUyoDzr8KKD0:TNgeCEEGz8Ss+xwrm+mqnQtMumV0","tlshash":"c292d08d1212cf784d00742a3fe14d87924ba59dc39687affa9ff019b48459e828a9c1","first_seen":"2025-10-03T19:46:06.671157Z","last_seen":"2025-11-29T09:05:29.703815Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"remittixx.vercel.app/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"remittixx.vercel.app","domain":"remittixx.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://remittixx.vercel.app/index_4.html","date":"2025-10-03T19:45:40.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: remittixx.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://remittixx.vercel.app/index_4.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"KFOmCnqEu92Fr1Mu4mxK.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 03 Oct 2025 19:45:40 GMT\r\netag: \"5d4aeb4e5f5ef754e307d7ffaef688bd\"\r\nlast-modified: Fri, 03 Oct 2025 14:58:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fsjfk-1759520740029-7e1702d16d4b\r\ncontent-length: 15344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T20:00:21.885603Z","times_seen":544141,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"remittixx.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}