{"report_id":"1d3c1777-4faa-4d19-a9f0-99e0668bb4db","version":6,"status":"done","tags":[],"date":"2025-09-24T22:58:58Z","url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"title":"Wallet for DeFi: Acquire, Earn, Stake, and Exchange different Crypto"},"submit":{"url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T22:58:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":8,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":44790,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:58:37.318600+0000\",\"flow_id\":1476366950057641,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44790,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3082,\"start\":\"2025-09-24T22:58:37.313001+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":44792,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:58:37.325270+0000\",\"flow_id\":776532093949703,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44792,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3083,\"start\":\"2025-09-24T22:58:37.317191+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":50024,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:58:37.336255+0000\",\"flow_id\":1834528567852152,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50024,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3092,\"start\":\"2025-09-24T22:58:37.326776+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":50038,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:58:37.352401+0000\",\"flow_id\":962222857460008,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50038,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":922,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:58:37.334120+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":36036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:58:37.474298+0000\",\"flow_id\":1654227988192956,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":36036,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:58:37.401084+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":36050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:58:37.477986+0000\",\"flow_id\":1611405016768456,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":36050,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:58:37.401352+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":44416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:58:37.768487+0000\",\"flow_id\":1610797278930834,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44416,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:58:37.698258+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":44428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:58:37.776442+0000\",\"flow_id\":74551901662106,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44428,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:58:37.699290+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws-widget.coinlib.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2023-05-09T15:12:25Z","last_seen":"2025-09-23T11:06:34.168688Z","alert_count":0,"request_count":1,"received_data":909,"sent_data":625,"comment":"","tags":null,"fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-09-21T22:32:54.705622Z","alert_count":0,"request_count":2,"received_data":512,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aerodrome-finance.vip","ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":318,"request_count":80,"received_data":12819836,"sent_data":39322,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"xCharts","description":"","website":"https://tenxer.github.io/xcharts/","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"D3","description":"D3.js is a JavaScript library for producing dynamic, interactive data visualisations in web browsers.","website":"https://d3js.org","common_platform_enumeration":"cpe:2.3:a:d3.js_project:d3.js:*:*:*:*:*:*:*:*","icon":"D3.png","categories":["JavaScript graphics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}]},{"fqdn":"bsc-dataseed3.bnbchain.org","ip":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":5059613,"first_seen":"2023-12-07T18:13:02Z","last_seen":"2025-09-22T11:37:21.681616Z","alert_count":0,"request_count":2,"received_data":5971,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cryptohopper.com","ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-09","domain_rank":0,"first_seen":"2021-05-14T04:16:20Z","last_seen":"2025-09-22T02:47:11.013757Z","alert_count":0,"request_count":8,"received_data":333278,"sent_data":3885,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2025-09-22T02:47:10.936826Z","alert_count":0,"request_count":10,"received_data":36014,"sent_data":4880,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-21T22:13:28.585612Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-09-22T02:47:44.056928Z","alert_count":0,"request_count":2,"received_data":7665,"sent_data":1041,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":6234,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget.coinlib.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2018-10-03T18:45:45Z","last_seen":"2025-09-21T22:46:58.722254Z","alert_count":0,"request_count":60,"received_data":1560892,"sent_data":32101,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":2,"received_data":798851,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":3,"received_data":325316,"sent_data":1331,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ws.coincap.io","ip":{"addr":"104.20.46.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-17","domain_rank":3054346,"first_seen":"2018-10-16T14:52:10Z","last_seen":"2025-09-24T19:11:06.440404Z","alert_count":0,"request_count":1,"received_data":242,"sent_data":646,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.cryptohopper.com","ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-09","domain_rank":1263380,"first_seen":"2017-12-20T12:36:53Z","last_seen":"2025-09-22T02:47:11.266401Z","alert_count":0,"request_count":2,"received_data":50910,"sent_data":1067,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":2,"received_data":36022,"sent_data":1149,"comment":"","tags":null,"fingerprints":null},{"fqdn":"binance.nodereal.io","ip":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-07-19","domain_rank":1804985,"first_seen":"2022-10-20T10:44:48Z","last_seen":"2025-09-24T00:03:51.74104Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":3,"received_data":961538,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jsoncdn.github.io","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2025-07-20T11:05:28.464762Z","last_seen":"2025-07-20T11:05:28.464762Z","alert_count":0,"request_count":1,"received_data":3314249,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":44790,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:58:37.318600+0000\",\"flow_id\":1476366950057641,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44790,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3082,\"start\":\"2025-09-24T22:58:37.313001+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":44792,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:58:37.325270+0000\",\"flow_id\":776532093949703,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44792,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3083,\"start\":\"2025-09-24T22:58:37.317191+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":50024,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:58:37.336255+0000\",\"flow_id\":1834528567852152,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50024,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3092,\"start\":\"2025-09-24T22:58:37.326776+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":50038,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:58:37.352401+0000\",\"flow_id\":962222857460008,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50038,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":922,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:58:37.334120+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":36036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:58:37.474298+0000\",\"flow_id\":1654227988192956,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":36036,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:58:37.401084+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":36050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:58:37.477986+0000\",\"flow_id\":1611405016768456,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":36050,\"dest_ip\":\"18.203.203.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:58:37.401352+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":44416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:58:37.768487+0000\",\"flow_id\":1610797278930834,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44416,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:58:37.698258+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:58:37Z","timestamp":1758754717,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.7","port":44428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:58:37.776442+0000\",\"flow_id\":74551901662106,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":44428,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:58:37.699290+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e125a9b3e8dae891a190beb17d146ac8","sha1":"94aa50f25a985ee9fdc3acfc7ad8b787ac0b4f9c","sha256":"198a7caffab903c41ce127498bc4a12a95c9d7b6a4ebb2f8d2d5e65957ba4ba9","sha512":"0fea1d481e334ee8cb756e216c2f04823e95216231e27bad968d9ab8caf625619c3c93d90ecf5c2019c77253db4d153c5eaf1c1c3fbeb310b89bfc0f92b096f8","ssdeep":"","tlshash":"50d08c88264b0ca292bb3b4b4bbfa102b0066213a0904d203d1e77449f20e27db44808","size":238,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-06-06T06:45:08.144712Z","times_seen":2720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/lib/jquery.marquee.min.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2619ff525e29847f931bdfe1c428e1f","sha1":"09a10afba7ecdcba3d61de1dedc432bd8e306c28","sha256":"23b9b39ea61308052256b9921bf1c0de6698bcf0c04e3e4f2978adc86168ff6e","sha512":"041af6ae7ca726ac92ffc0047acf223a3427d9b37b93b67545c2c16c6daf5e0b31505b6cd5218ae5763593d63b77ffc5b0aa30845aba457ac578fa9dd9bd3fdc","ssdeep":"96:zcJIyUtgLICYdVun4xRx7nCbM3IJT3WHUn6cAyUMBhyv6t+ntyo2t+QE:zcZUtbDO85IT6cNfhyvj","tlshash":"52c174c5b5b5308a566b129780db07c01a794439614f8c6fb9368170bd74f881be7f37","size":5912,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-08-17T17:32:16.906476Z","times_seen":3238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/fe4603fc-59db-4c67-9a2b-48ca92e1d2d0","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4096d42153255eaec7da50afee923fd5","sha1":"1170df414a52d666223a5ff9eba6feca7743ed81","sha256":"42419a2bd89b0c0559211ab43080fa5314cd3cbbc583f98ac2bc7c3c13cfd96f","sha512":"2ce0399965a3c169de55ae9ace5c74fd7a0c1bc426b77c9fba69701aed18592521195b2121777f9b6e0972ec6a2477cdddfd4cfa0c9645a86924a214f573e19e","ssdeep":"12288:sxBVvDDmgkpq5YZlCfmLE2zx8bvM3YNljNmx9xbBO5Ou0v2pty8+ep+w1QcHm5Hd:6fsZjze6175qau09SkpRRiAR+6zMs","tlshash":"8c26b706e4019ef268d907eb9d22f49880816b5edbcc734a766cacee73c8f57d5d2121","size":4839971,"data":"","first_seen":"2025-09-24T22:59:15.388889Z","last_seen":"2025-09-24T22:59:15.388889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e59n2h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be6171e7ba328045a3a0955b2d1b2976","sha1":"72625b4437d0b89939baf743c48d5475b6c15e63","sha256":"67968d3d558284017dd9ef7b95a842ce81f8b501d097733b2343c7f14d440d4d","sha512":"a367cdb220999244b1ccb1d0274b67b65bbc0dfb793cdb29da0acd88d0b667dbf80ef87e02f6dbc129d38da05dc94b5208a9dd7a1fe9c1b3b9d9222c33f012d7","ssdeep":"6144:wTpmM2/RNpveqkD1g1/9G1SvuVc/D3WBH:4mLRely/LI","tlshash":"2e741acd73c674265396a478903f018bb5bb6892f44cc899f186dce42e74a9a4237f7c","size":370731,"data":"","first_seen":"2025-09-24T22:59:15.359341Z","last_seen":"2025-09-24T22:59:15.359341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/js/jquery.dataTables.min.js","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"427d622c023712bad1b1876e2c3dd9e5","sha1":"76b9b334c9cab4dcbfbb5c4e420a6c14bccc063b","sha256":"1610c2af4625a49c6bebf5cf662a3d9f76dcc5b249b430e409866c6664df61bf","sha512":"4e06c1941f36255e6a652fd9cba39852807322725395ceebf0f5a801485e919837187c992ebc1849895d878fb2075fdf1057e9226e5112b50188f7c9e627cdd4","ssdeep":"1536:kmO4IIPSjhHyHgktdyxso75kX2q8EOJEW3JxalJCQhcItquXUjAXql250R4TT/94:vnvOHyHgqdQJAKJEW5xCJ3JqKl4","tlshash":"9983f7993a817959c7ab78e001af090be23e5d96f5498c70b0a4d9d53e70c9920bff7c","size":82069,"data":"","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-08-18T12:01:01.455669Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-19T06:29:08.768652Z","times_seen":31942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-19T21:45:21.040905Z","times_seen":746120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53bdf76356abd3bce249982ebf333b7","sha1":"a5e71f212787edcfefffb154914c19a55979dfc6","sha256":"5ac084ec8860fa9472b4af0e372c275294f54ce2b02a1289e86d9a0c99702e39","sha512":"81418bde10e734062cbcac01583aa8eb5d55699a9e416ab6ec031ced12f4526ebdac1e6d378ed3522b17f3dccee5f26ce17df308d77a207ff9e76fbd253a1384","ssdeep":"","tlshash":"30e07d59bc69868c895b162e957bc7a8a58100492d90982300d1dac97f21ece029b99c","size":327,"data":"","first_seen":"2024-11-22T12:45:12.805491Z","last_seen":"2026-08-10T04:59:42.838723Z","times_seen":2218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/our/i18next.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a80aff60a79f6c89a0a50c9eb96c645","sha1":"92d0601448dc60514d04505661cf602c3088ac9e","sha256":"95deeb4c5d331ffbf7c0afc0c53850f1a9065b00d7b91f69b3d13486ea1a6215","sha512":"28a4a0b0f9a26649e694dd28b1eb00dd9f1c269c0e5f1948d0286a63d6f1744ffe90b702cf15e55111174062d996ef0bebe2f9ea50665058ed239676e63eb879","ssdeep":"","tlshash":"67219a9920f7966450dba16a67cb3684786c805732649d003f0c4e021fb2dbba7e8fd9","size":1322,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-08-10T04:59:42.769167Z","times_seen":2892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/js/dataTables.responsive.min.js","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5da7db3125874a9d3dc880ce5b25edb9","sha1":"4d500f90e8bd03b4c27222312a5f4ee35972dfff","sha256":"fd175f559076376d088b4ac25ef4b8c71e5da50bdcc7a8df7cdf28a3782502e5","sha512":"25ce788cacc40e32db940f9cc098a3c117d14407d25cf234bb7f1e31fe65a968435ba66941ef5d16d90fa43e5ef519f396ba3bd5f56d5fcf70e11c7ea55c4532","ssdeep":"192:XM0X0VGNcx7vluWRt1aNygdion7N/liLAo/oafhvgduzC2Xxlu:hu7vl1aJdBZdlo/oafhvY","tlshash":"eb42e9a57891727a90b770e4533f2c1ae137ba1bb506c8a872a4c4e41f78d4c16bff19","size":12836,"data":"","first_seen":"2023-03-07T16:33:16Z","last_seen":"2026-08-18T12:01:01.440223Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-17T04:12:23.296547Z","times_seen":337651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-109558606-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"77ada46db957c9ba6c7f0a10c731511e","sha1":"695c57f89e1a2c43fb014eb0fc54214dd51c6e7a","sha256":"31d2d7d297dab023573318348a08efb0ec0c4369a5a2c6c07a9d17a01a722ff5","sha512":"78204ad153a41cc7b5683eabd006d7e2cd0c68b2dbe5de46bca1bb5a6dfa84389e5154d77e446f72e0b094db893e7be4aba98bb0d169607d59c4377b88ccef64","ssdeep":"3072:A/loYu/D62GmMgZOp90RP18eqkLPW8RthKUfgHiOXT/G1SvuV8fT3K3MKvPWpNQ+:epmMgZOppeqkD1gJG1SvuVcTujvPWpNT","tlshash":"7064f8cdb3d6742683936478503f018bb17b69d2e84cc898f186d9d42e74aaa4237f7d","size":310801,"data":"","first_seen":"2025-09-24T22:59:15.327424Z","last_seen":"2025-09-24T22:59:15.327424Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f23a3cc01b366ca9f04ef4de766d7b5e","sha1":"7c4e170e24d96e007b316ee6f35fdbe8a2c697c3","sha256":"ad563ad5c455691e2265b771b5a79b085496463ba0cc24629aa2e9436484daf1","sha512":"7bd963479285937e32e471ff0539f44a58fa10d68b1fff1d3f31087289c1267773b145f9cdac7e187d4e33bd19c0a246baa752000e06e7e5e14c9ea695703c78","ssdeep":"","tlshash":"6ae0c0db70521c72619f89b633b5e5247153260db8091c22fdfd88242f9899b481619c","size":421,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-08-10T04:59:42.831805Z","times_seen":2787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/slick/slick.min.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c316e657b52f99ac202aa4f3ed723e95","sha1":"af5d7dc3e3f7394a53d1b8973d2825df1b5d4bd0","sha256":"c92f3d19f96652d4d4c5a1f30c99a8d6ecf0fc11cc2c8b3f15d135256231682b","sha512":"f1aa352e960d9d1fb97e4a01735f3fc1ff4cb06b7242bb299855b30652f2a8a18cd52cb1a30f48efb9518815147467e95d2bd49609ea05b3c0a6f53274f26d39","ssdeep":"768:qb69A3Fu6B3JSL/AMbQQtHcqhhU14Ir9F9SRoYxeDg2RsPOOrpwTXRnjRuyy/HrY:zA3FWlPg409FgesPOOrpwT3yDZqY73k","tlshash":"aa93700d6e802c554b53977e7607f8e1e9af082e3884458fe1157da0a1eb72bf9f15b0","size":89842,"data":"","first_seen":"2025-09-24T22:59:15.346582Z","last_seen":"2025-09-24T22:59:15.346582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/js/custom/chart.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ce11bc588097323d73b4104e6de3d00","sha1":"9f619fa66b05d6538782623addb31f6a0a9c4fcd","sha256":"1dd4765e298d0f309dfa0962731f0da354c9dc4a530e431885ccedaa41856d9b","sha512":"17da500d02690d93199f4fcc6eca7c009ff0b06352d7644c2b45d53bbac1a1dffbc6f01cf14e63546a37697aa3ae732609eec1abbb3f336f1beadd6b0fb257b9","ssdeep":"","tlshash":"a311e776db1ee43e2b756e976213337fc804d812c60b899cdb158b148c86679c1e8e2e","size":1000,"data":"","first_seen":"2025-09-24T22:59:15.395407Z","last_seen":"2025-09-24T22:59:15.395407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/aos-master/src/aos.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcf616bfad1e9d268c285c1555781990","sha1":"a3deb7b27b33bda88b6434985fb19a74cbf9dcaf","sha256":"cc17d643f10709a95f4fe7fa8b6e1f432145fea4d64c5322d6ba042529e2c333","sha512":"44ae032d33cba1cebb4c0f581884ec7376844dfa1b846cabbb9a5f8b15ffbff2fc863456e97eea4cc2541342d79d32005857b00a4f2b4e6ecce005af85dab465","ssdeep":"768:E9NsjN2rYcCFkPLeO1zVF539WdUcO1+GCLufxQc54fTdIKM813tstUCV7YcGIu8P:qfxZcOh2sdP","tlshash":"02d2c8557bd0a895039b9fbbb32fb0e9f4ae0c6e7c848447d601fca13da1415e9e2931","size":28305,"data":"","first_seen":"2025-09-24T22:59:15.321551Z","last_seen":"2025-09-24T22:59:15.321551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/6f4becf4-e9bf-4566-8bfb-cf357073ba5a","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-18T19:16:43.149705Z","times_seen":4178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/sandbox%20eval%20code","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/742c7361-ad3f-40db-8ac8-23bd256b95ce","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-18T19:16:43.145039Z","times_seen":5093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d3e294a4b82f6c96c7a3cb70c2df76","sha1":"c9532547ed2c86c5a94d31b99b31280071c2db77","sha256":"0bf6dea8ea0958185d3c5dc20ecab8e8173470e2c3e5e109dd5c8c850798f928","sha512":"9bae3cfaa020944027e26e2e4397b44844a1964115ae751ab4ac714dabdc6862b7fbfcc28b049c413f6d1f6b7d15f2cfdff30d974eef1375b9ffc8c6d12e4565","ssdeep":"","tlshash":"3bc048c40433e2c420a767060bd715c43032990760b2880c3f5e00462fe0cce838ba68","size":171,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-06-06T06:45:08.147928Z","times_seen":2660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/js/script","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f27e46640284cc0dd820cf494ff4cd2","sha1":"8171e3b50cd951ca8ca8ed7c97dc45ab7c753623","sha256":"4b22e37ba3db62e892b8e08f41baf2f50ca310b7a65e691298433169e028c871","sha512":"023be519e51053fe609c0c42946f85c7b8aae22b73b985828b961e67d7ccee74c83b994a60ea42c63137dcb2b4f9aa0dd77605a4ae2fd97548650fc8dca1529a","ssdeep":"","tlshash":"831165e9b304722703faa164003f218eb5674c2eb444d4c52301d0973c78efc8a8bf58","size":1000,"data":"","first_seen":"2025-09-22T10:42:37.862796Z","last_seen":"2026-03-11T03:10:45.186101Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_our.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"000b4aa1fdecdd7f05fac90a172bff2e","sha1":"83fe2b4a92fd967d4ae10a66ab9c9f7cfb8db75c","sha256":"b80e46aa15043724f1c2c9cffb3a41fa4540d2ab531feef3f127ce3b03170e1b","sha512":"59ae80276f20cc7a35b7299ca4a2705b38e44f2c579a8170a6d7795d4dde531bf25506696825037a65481f97b2434b25b232ec13560953699eb422c2b667e2a7","ssdeep":"768:/z5PUWzyZNKSzTuoDTE2E8jHVemd1Hsng3Oh8gvwZfeUnatOuOPGdjH/AAu5P/:9OZNKSI2E/mdFYoBZRhPWjYAu1","tlshash":"6193922de8f72031603371b98b7f61047a69a0274a44ed057e1c57d02f86ab8b6f5fad","size":90641,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-08-10T04:59:42.748998Z","times_seen":2768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/js/scripts.bundle.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8243820000b9b3c403f0e6cad442a8a5","sha1":"27fb6b54eb383c17de55850da47d3bf50ba838f8","sha256":"94b01f0d9af4a2f5cd7698c53f4b4fca40f1c90174f0e5c007bb931b148a2a65","sha512":"54ccc5fb97af6aa8cc29a80c5785c30480794ae1ca070a8580cfedf0f05ad3e6a61b6ed4795cf89bde9bbc8ab0b0d0e471c6be29472815b9fdc4be3ef2ff0941","ssdeep":"12288:6iCS3iIjZzvrAF5H870m/zWxN94eQyKAg:6iCS3iIjZz0F5H20m/zWxfKAg","tlshash":"c6a4c64073d0685a139b6f7ab31fb0e6f85e0daf3948484bd154bca565a922bfdf0831","size":487325,"data":"","first_seen":"2025-09-24T22:59:15.228628Z","last_seen":"2025-09-24T22:59:15.228628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3d038c59c615ff247fbd448d79ea563","sha1":"f398f540cd461a70378e6005022f9c9fc7438ef1","sha256":"18607c0f690ccf374bab5477dfa15f274b9c502f5d09cd3b1584a78e34dc47ce","sha512":"5c697501e8c47a164f7724db7ca592eb8a9951fbea43dfca30a762f70b1a6fcd5d505991824f784e3d60948e5a3a22569c326efb12ed81bfeebf63808f3e4d97","ssdeep":"","tlshash":"3ec048bd40030c8030e660106b872e802802a20712ec88003baecb20afe38db8542ba9","size":153,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-06-06T06:45:08.148722Z","times_seen":2613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/js/Chart.min.js","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4313f60cf9317891f11b4c746d9fb7b1","sha1":"569490dd4e8dfd2b33016899d2a5baf65ec51138","sha256":"6e2a308caf0369a9e41a57d1c73d9229c52399944b540990749045def75217af","sha512":"e7e56675d45d0035a92f0b7bac41d3c891eee6058a403c754bc052793735719594e3190cddcee3580b0bc67ca6010223a58661518ccfd4e25b73088129ddb3e7","ssdeep":"1536:bUYPoEhqUXujc9ejeM+xq1drdX5vECW1i9ySXzv2MmcXZBrCjhH4ASWcfS7vDsLP:zpDeJO2NlJ4j9Pe2kj","tlshash":"66f308c87281702943b362e8552f150ea2373954290b9a94f6b2d5d27cbc9ce71bbf3d","size":159626,"data":"","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-08-17T04:11:44.407684Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_lib.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a781036bff64b8fdb1f64d73a110c40","sha1":"5b9f645eea9d940f98aefe62a2ebb215a1b1b419","sha256":"d5a4117a99579fbd511260552f0d103d3c3c9e983889d853ab245d95dd9ca7e3","sha512":"991c5ff93e85e56777fab81a4f68c5b1a89da86e277b84d9d5f4c0fa032fa646cec282fded57a00f7636fcfa2eda10fd8c83faa89b98963b2d1996434687512c","ssdeep":"6144:9RzEOQ0+iea98Hr9STVvCgfkvGnxjR9aSrp7wwL0kYlP:cOz+iiSTVv7oGjw2eBlP","tlshash":"53741a8d72a2707182bb307a456f410fb13a946f6409c8a4f56cc5e82fb8d6c61b7f79","size":353286,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-08-10T04:59:42.625117Z","times_seen":2761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-19T20:44:17.086906Z","times_seen":238069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3f7aff681ce4fae79c00f735d51e4ca","sha1":"3200f8247b5cc210e4e954d205f6efe9ff29499b","sha256":"08a0becdcbe4ebeefa71e951db1695caeabc3769669a0b3b424334bbe6e9abbe","sha512":"d7fb952985ec1eb7895df1ff1805b35a6e697280ecc292bf981924e9ab41304db4618fc9679a058ffa3a8c13dda6cf9876598f246519b5b7afe01429a9f84ecb","ssdeep":"","tlshash":"98515f350f6ec173c4b314e457ca37002e2224e71e45bac27d5f87889f91a5a934beb5","size":3162,"data":"","first_seen":"2023-05-11T08:07:22Z","last_seen":"2026-04-28T06:20:17.343607Z","times_seen":2045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-18T19:16:43.115819Z","times_seen":8493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9421daa32818de1351b6c0b4594567a3","sha1":"abab15b62e4165624fd0790ba89d8af08efdc7e8","sha256":"c84108bdf3d878badc951a9d26221f337a23760ef991fbaeed48effef8ee7968","sha512":"3c03fa5a566f1f2bc5d8fd15505f3e49286495787cbcfb9529e9063eb0ecc44eef767a66ea521b2b04d842a811246244b024232c4af6907c861fb43f47fb906e","ssdeep":"","tlshash":"36b09286f9958aa030b26b92c50b321f14e029169800e5a9f00c9a254b0698908069fe","size":122,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-04-28T06:20:17.369951Z","times_seen":2407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/e96d6247-c0a9-464a-a5f9-17efbbe1b4ac","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-18T19:16:43.14143Z","times_seen":5115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K638SKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"616862dc951f2865802dcc2725a46bfa","sha1":"ced6df18fab9c78c42e1d087b62b1ef4681b2478","sha256":"489affc53e3bf054e61c2332c041ca897c59630210879929495309abc8327df7","sha512":"da019859692a99e6de3912e5e76bc1bf653f26b13a1ef0246d3dee47e5985319f3a19bb97f75d33d08d3a8779bbbd40a16574b5a9fdd0933932630f05f51723b","ssdeep":"3072:/WXQu/D62GmMgZgpl0RP18eqkLPW8RthKUfgHiUXB/G1SvuV8f2twm:hpmMgZgpBeqkD1ghG1SvuVcXm","tlshash":"174408cdb7d6b42243a36478503f014bb17b6992f84cc894f186d9d82e74aaa4277f7c","size":278123,"data":"","first_seen":"2025-09-24T22:59:15.332408Z","last_seen":"2025-09-24T22:59:15.332408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d6353c3bbb4ea8f38686d85a8d65d17","sha1":"bbd8df246a03d1f5dbaabb3ab49db54913fc4036","sha256":"6ed362d119e383cc0f508894231f9d5b1199be5066804c0c8f0571dc5eeba632","sha512":"a1a8820c3ef69481531e796b568a2c616a3de8caab48ea503e1d2db622cd287fe9dd0fef7eb9b1d9d592248786088ad2a1682416a3e705786f9bb5029a0f2a3c","ssdeep":"","tlshash":"6fa002b8b55150700f4a645c712483e87c30550b79066209a22d41eaa962e92d528d5a","size":73,"data":"","first_seen":"2025-09-24T22:59:15.407243Z","last_seen":"2025-09-24T22:59:15.407243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_our.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/js/bundles/bundle_our.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 18682\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"16211-5f8ae19e52980-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 17:18:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1Moq4NLz8gcZL3jVgLU4RwRgPo84jitVbMY9Zez%2FIcfzaT%2B%2B9gNYqO8Q%2Fv9FgxsqzIJ7OEzZwoR0lJMWjQUlGo5WSd9S3ohmRMNuAObO%2Bwz\"}]}\r\ncf-ray: 9845e2fc8ed5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":90641,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (403)","md5":"000b4aa1fdecdd7f05fac90a172bff2e","sha1":"83fe2b4a92fd967d4ae10a66ab9c9f7cfb8db75c","sha256":"b80e46aa15043724f1c2c9cffb3a41fa4540d2ab531feef3f127ce3b03170e1b","sha512":"59ae80276f20cc7a35b7299ca4a2705b38e44f2c579a8170a6d7795d4dde531bf25506696825037a65481f97b2434b25b232ec13560953699eb422c2b667e2a7","ssdeep":"768:/z5PUWzyZNKSzTuoDTE2E8jHVemd1Hsng3Oh8gvwZfeUnatOuOPGdjH/AAu5P/:9OZNKSI2E/mdFYoBZRhPWjYAu1","tlshash":"6193922de8f72031603371b98b7f61047a69a0274a44ed057e1c57d02f86ab8b6f5fad","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-08-10T04:59:42.748998Z","times_seen":2768,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/fil.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/fil.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2435\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"1e41e0d9dfd33f725b710bdeaa8e248b\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B04BDCED\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEzAkp17qOrLqESG8KnGIa1triAY7BByzOlTY0I%2FCPjIuNV5FbZ1p%2FfzG3aHkEEopp5PmD%2BDcCyKlkTB8vx9bbFKVFl4GRceZfUYKO8pf22y\"}]}\r\ncf-ray: 9845e2fc5e91b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"1e41e0d9dfd33f725b710bdeaa8e248b","sha1":"8481b3efb0f69a640f1193a4435ace8a6d47a0b9","sha256":"3e85a2de2bc6e4cb5f3f1289763fb642c6cb296b7addaf4c9d12f3274d5cc659","sha512":"a7258da1d70f2870f3b159595fc4d4a62f7d729fd337d67791dcfe2470992e61e01956f4f5f3675f761eb7c6e92b93d72ee235c2f3b72a9134f419d5c75ffdb5","ssdeep":"","tlshash":"d2410b94a38419f1530c383a4ed583d7218db6514e599ab2fd14b730f85de67335e70a","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.804542Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/secureproxy.php?e=ping_proxy","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aerodrome-finance.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-17T16:47:50.33609Z","times_seen":9046,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aerodrome-finance.vip/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 0a6a35ba0a6a9e310701b53576f1db35\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/knc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/knc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2465\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f01fcf2beba3211117d32c92a574b476\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B220140F\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5MLOZXGauIDPoNyY0fjaemMuQdJJtZnSmr4yvGXUbRwJJy6lWeJimXtohAyKECSqFsTjYRaJqm3c%2BG1TuTKWvqGpO2g060rZYUm%2BlI%2BG%2FVO\"}]}\r\ncf-ray: 9845e2fc8eccb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f01fcf2beba3211117d32c92a574b476","sha1":"2df48b330f6b7d178b2c059dab959ea00fcff9b5","sha256":"bce50609ff23dc297ae1617c5127cf23fdf713e6d44e903eb4f0a1a7ffd4c3d8","sha512":"71b4e3f812e7e4bc1f05123c8a25a37cb7635632f4ffd08acd4db8b62557de3d72a144cc343f91b618c72f4f2ee374992fe24c63df25e71501ae3d4a211b6702","ssdeep":"","tlshash":"7a5108420764e6b490e949f6d2ea11a8ef96ac3ea97a5f0612823671a6fe054144cd24","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.609243Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover= HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uo%2FcUiHEB7zGsRfIq3Oimmpmqi12FVvbB%2B8rpTEoQBh8qo3omuifVonc%2BeFV%2BA6PCI0JEqpbmExqzlYL22KnpRtdZ2NY2aopD88bxKz6kBc0\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: User-Agent,Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 73\r\nx-robots-tag: all\r\nx-xss-protection: 1\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=4,cfOrigin;dur=158\r\ncontent-encoding: br\r\nset-cookie: IDENTITY=1dfe1ea426b741317eae233d152e00016a4accf2\r\ncf-ray: 9845e2f9bbc3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":33734,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23790)","md5":"67ba21e6505087ccac4633ad9513a589","sha1":"9b6b00f3f622cbfeecbf7a036166b0d008d157fd","sha256":"374fd6c50558fa484313047d2af5de502c74de17f5d2b86fb70b66fa1e6c68d5","sha512":"dfbac975c1f87575ed1177ed3b20b4c8b01ff9f6fd5814ad9de0248ddd4639748922447956b7a7e6d507416729905f6dd22838ebbcb8ff307a8727a57fb11244","ssdeep":"384:Ari8HJ5DV/uEYmfOYqAzpmuPQN/KqOOU6Kh:2JDVp/fOFN/K376Kh","tlshash":"27e2f2958ba7ac39113652caf1a27f75b6a51146d1220863f3fc2f7f6bacc23150249f","first_seen":"2025-09-24T22:59:15.21892Z","last_seen":"2025-09-24T22:59:15.21892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":121,"dns":48,"connect":1,"send":0,"wait":167,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/theta.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/theta.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 3033\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"1c0e9fb825e0ddf33d9d6a312e8b036a\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AEC8B3F2\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UyF1CbUJsRKKw5Gk12uZ%2FVhXC0D5UFaTLgGlCXMbfPdr2GUnU1GADPz%2FpB83%2F%2B0kO14N49PTjER6t3hY8dFPl3yMSztBsKngSGeuFeSIYhZ\"}]}\r\ncf-ray: 9845e2fc2e59b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":3033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"1c0e9fb825e0ddf33d9d6a312e8b036a","sha1":"a8456f10e47dafda1bdeffc1c7b7f79d190fb0bd","sha256":"f22584eb83adb69a641fa4e3159c214a928e6c164d53fe057d62a4b0e7c3dc7c","sha512":"7d82402d1599e26a3dc1e4da94d0e428c4e43ff164dba0c72b1071a8784874773306ec21964132bbaf364a6cdb1b6a3f179822f747721cfe007de56956616ab0","ssdeep":"","tlshash":"58513ace154bb9eb34e3f234a602cf92c116f76511c54237a55ef03685bb0b998e6363","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.644585Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/slv.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/slv.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 32796\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b2d96e52cee38a27b569262527b0b020\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AFAD03AD\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsYi1d%2FC0H50mlih3EZnyI2Tq6mfRZBws6PhJGDYGgu5W0d%2BjJV%2BnY9l835MGGYlVuxy%2BgOn6y9sm%2FVNx9UZAS9KsX8JQIblmBArIqxldCEa\"}]}\r\ncf-ray: 9845e2fc4e74b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b2d96e52cee38a27b569262527b0b020","sha1":"fc96d5940bf068dcf316b1f2b4ca3cea33b68a87","sha256":"eaa7d471a3bbf0f75647eec3100f36ac3cd14f90076b148e79a2c6d344ab3b83","sha512":"df614ec73f16b7c77cb9ce7e1e0d7e8ac10bbe9d773eec0f46edc5f594a7ea07e5d7b3e7de407bbbee4fb2c5db8858a12bbd7b5a3e161d4630b5d322c4683e71","ssdeep":"384:vZ/PRS5lZfRRud33eFce/w/fx4B+iOuZv/C/DuMiZyg2GNoEjxcA0o4S8N0aQ9ms:B/JSNfnuBOFcuCxj8YuEmxcQWlQk67","tlshash":"07e2e113612db9907a5119b2653c8f5e36fbb2a92f016b523edc38b13b07f19f583182","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.623032Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/nexo.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/nexo.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2434\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"9269e850270013f52141610a69f29b52\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B0C40F94\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJm%2BXOV0qA7ozPrk3psquIivB9IlIwb5OwnKYGS6EeWvhz2RJLMKadbWpRUR2Rl99dUdw%2BjcbyURUX8rK%2BrRcgmzUUhyWb5SgQMYzB2Hh3dv\"}]}\r\ncf-ray: 9845e2fc7eb3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"9269e850270013f52141610a69f29b52","sha1":"3f21b1645a971abe8728622546922428ae97aedf","sha256":"c974c1a057b86acebbcd2420bdf47c6810cf4364336e1c52a1febf1b24b2dbc9","sha512":"caeb0a42a5afa22cfd613da87cedde8920f8516e34ec4f6eac32bc5c4733ba59026d948620e3b10e84e291cffde2b62c217580826b594d7404eb51a4ec147f3b","ssdeep":"","tlshash":"1e415f059d703ce945c46d5e058f974c6c6f680b7f88e6ad984ef47d46d21f8c352d11","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.704024Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/testimonial/testimonial-metronew.png","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/testimonial/testimonial-metronew.png HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2724\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 208 x 60, 8-bit/color RGBA, non-interlaced","md5":"e9e641d9c8e3252e64910d374c6b8774","sha1":"aa423934016ea95aed3052f8443dc27aab721e17","sha256":"fa973def295233f47aed6d82d706464713e0fc8508edfb054f4cd11a60900f55","sha512":"39abf00837a0d8ea4ebc0459e0c7778c86b20569e71a82f36e7ce14598f3e8c929ea87a353f8bacfa7c390f884261e63344161857969bd6f94444938aba451e2","ssdeep":"","tlshash":"c6512beab55c3c0ddc5e8030cf9befd0eaa95373ca8074203649b91dc245be6b1c0256","first_seen":"2024-09-19T20:57:03.425921Z","last_seen":"2026-06-03T10:05:48.766345Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2044,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:18:44 GMT\r\nexpires: Tue, 22 Sep 2026 23:18:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171593\r\nlast-modified: Mon, 08 Sep 2025 18:08:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-08-19T21:09:25.575211Z","times_seen":47783,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":14,"receive":5,"ssl":381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9845e3348bb123eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 113900\r\nexpires: Mon, 14 Sep 2026 22:58:36 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BQO5ARTbX%2B%2FKguh0heJ7uAICP8O40O4fnELePXjXifRBRcDz8jsDZ2G6TbR3M2JzhizxKELFAsu%2BPyeEegTzDVIcfrrAvdGYJPenygEZgrKepgfQfA5Al3ON9G15ir7OVGi8OhsW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-18T19:16:43.115819Z","times_seen":8493,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:91:90:0D:EE:3C:8C:8F:95:A6:0A:58:6A:D8:9E:F9:06:B3:FD:A5","sha256":"CD:EE:48:FB:10:6F:A2:00:C1:73:D1:C9:53:62:65:8E:93:C6:CF:DC:73:96:A6:33:D8:E9:26:3D:88:32:2B:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aerodrome-finance.vip/\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":148,"dns":1,"connect":34,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_lib.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/js/bundles/bundle_lib.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"56406-5f8ae19e52980-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 17:18:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 4\r\nx-kong-upstream-latency: 8\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bv%2FEuuPqMSJGV%2FnDaN5Wd%2FYo8BbppGpkQ1HPz3rYdxZuz7%2B79157Z2sUUiXNUbpC9PQpLgitxEowpUTQQqtuYBuzT5NHiFtxDST9Yl9CbeDE\"}]}\r\ncf-ray: 9845e2fc8ed1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":353286,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"9a781036bff64b8fdb1f64d73a110c40","sha1":"5b9f645eea9d940f98aefe62a2ebb215a1b1b419","sha256":"d5a4117a99579fbd511260552f0d103d3c3c9e983889d853ab245d95dd9ca7e3","sha512":"991c5ff93e85e56777fab81a4f68c5b1a89da86e277b84d9d5f4c0fa032fa646cec282fded57a00f7636fcfa2eda10fd8c83faa89b98963b2d1996434687512c","ssdeep":"6144:9RzEOQ0+iea98Hr9STVvCgfkvGnxjR9aSrp7wwL0kYlP:cOz+iiSTVv7oGjw2eBlP","tlshash":"53741a8d72a2707182bb307a456f410fb13a946f6409c8a4f56cc5e82fb8d6c61b7f79","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-08-10T04:59:42.625117Z","times_seen":2761,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/lib/jquery.marquee.min.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/js/lib/jquery.marquee.min.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2025\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"1718-5f70afa528940-gzip\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sG0Du6I7U8SjF6OEZZmlB3uzqKkBHXBuOzrCHXjcfVNpbZMQG8ZcUPc9%2FQOcSZ8bsuaEeqDOmCpTvCEIci%2BAVVYqyXWQgw8kFA027yd8LVuN\"}]}\r\ncf-ray: 9845e2fc8ed4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5912,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (516)","md5":"f2619ff525e29847f931bdfe1c428e1f","sha1":"09a10afba7ecdcba3d61de1dedc432bd8e306c28","sha256":"23b9b39ea61308052256b9921bf1c0de6698bcf0c04e3e4f2978adc86168ff6e","sha512":"041af6ae7ca726ac92ffc0047acf223a3427d9b37b93b67545c2c16c6daf5e0b31505b6cd5218ae5763593d63b77ffc5b0aa30845aba457ac578fa9dd9bd3fdc","ssdeep":"96:zcJIyUtgLICYdVun4xRx7nCbM3IJT3WHUn6cAyUMBhyv6t+ntyo2t+QE:zcZUtbDO85IT6cNfhyvj","tlshash":"52c174c5b5b5308a566b129780db07c01a794439614f8c6fb9368170bd74f881be7f37","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-08-17T17:32:16.906476Z","times_seen":3238,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/our/i18next.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/js/our/i18next.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 557\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"52a-5f8aa4d7204c0-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 12:46:51 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goPK2h%2Bsf%2F5ndpYzu660PFy8%2FNTBuyEf9c%2Fz1zTMkEV%2FPXamWPmK9iChKm%2BgyAmWG9JeyDNpGzkz%2FWs8V0829%2Fnt1BhoR3yV7FoThsruLHHI\"}]}\r\ncf-ray: 9845e2fb9dcab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"1a80aff60a79f6c89a0a50c9eb96c645","sha1":"92d0601448dc60514d04505661cf602c3088ac9e","sha256":"95deeb4c5d331ffbf7c0afc0c53850f1a9065b00d7b91f69b3d13486ea1a6215","sha512":"28a4a0b0f9a26649e694dd28b1eb00dd9f1c269c0e5f1948d0286a63d6f1744ffe90b702cf15e55111174062d996ef0bebe2f9ea50665058ed239676e63eb879","ssdeep":"","tlshash":"67219a9920f7966450dba16a67cb3684786c805732649d003f0c4e021fb2dbba7e8fd9","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-08-10T04:59:42.769167Z","times_seen":2892,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Graphik-Semibold.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Graphik-Semibold.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmaiArmlw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmaiArmlw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:27:43 GMT\r\nexpires: Tue, 22 Sep 2026 23:27:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171054\r\nlast-modified: Mon, 08 Sep 2025 18:07:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13740, version 1.0","md5":"0ed27c0cc21140f52d29c938c6738a5b","sha1":"e4fc295db7f45d31f6df3ccfec943efbfa477547","sha256":"fdd953c288159a1f149911720d8a19fad17dc80f1a0609948cfa1458c368899d","sha512":"19c298eede11ec174fba54ca4f1ded4514ee66a260ed3392de28a457e31653324ffc8abdb1637ba624c29de80c4712ee4441d8b4edacbe37474a4f5df7be8ef9","ssdeep":"384:WsTCRAb6hZLoPpXarDsJ9IEMxnymmSRg0z:BR6hB+9JuthVz","tlshash":"bd52d08922467bbfe3cf6ce5f6464c9f83d3121052e718f19ac184d4fbb6166c941d12","first_seen":"2025-01-14T01:42:40.251339Z","last_seen":"2026-08-02T13:12:05.604968Z","times_seen":3354,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":17,"receive":1,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/apexcharts/apexcharts.css","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /plugins/apexcharts/apexcharts.css HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2456\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13606,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"78257a5d7908b5a1486694124a4c845f","sha1":"7e7a5dd0e25edbd2181423618f327548f7847375","sha256":"0b6b7a9264df84f84bc1fa82b86b4717230985ef3da6c14d5a22e7b46c7eb283","sha512":"0fe1b239b3d1b07fc6e28303262065697bae941a45fa06ebe551354c606dd0740962547c4f0ce7fe8520aad0766a500e8f6277bbb718db60d534bd3ddf2dcf0b","ssdeep":"192:SaF/huTteTPU1XQjtvsdYzf/4y6DeUdFD2r2wwy28:rFJuTteTPsQjtEdEYBrdFD2r2wG8","tlshash":"26529b5ad6f134d3d10a8358f4d3bb1763aa5d848f8a9df89ea9d07c8ecb4c4423ad44","first_seen":"2025-09-24T22:59:15.226515Z","last_seen":"2025-09-24T22:59:15.226515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/usdc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/usdc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 4053\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e0d33bae023b5bb2ac5411c553c10f3a\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16A9E58721\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xx9804OkQ4vOMFyJB43jtVsxGf56O2PeqN76y6WkkoeC3CkWAg3wUQDGvzwmoYC3lLikQTLeFPNSthb6%2FiC8ADhuGVjxOe5YsMAS07PwbH51\"}]}\r\ncf-ray: 9845e2fbbdecb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"e0d33bae023b5bb2ac5411c553c10f3a","sha1":"fa0c6c99d3705614738ce8565db276ac81ae9198","sha256":"7dec405dab8530c99e331eefd927c8e8935a9b83af187a512fda4d34244bd240","sha512":"f520191c036809229356ddafaa32e83221bd938355ede756229d1c01cfeec41cfacf18bc3ad9cc2cd37dbd97316c4f0cd5cdc8d79e1ae5d6ca055de09f385e45","ssdeep":"","tlshash":"1e815c31e3686cd45385450cb9668bd90d5ac1d1e42ebb3c27af6c3ac5dd64c468f3c1","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.803821Z","times_seen":2576,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/doge.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/doge.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 4965\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8abf15c7e759f7fa873d28468a8dfc0e\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AB6641A8\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0CbNs2%2BhmSFYh6Rtm4Kg%2BEsnQIHGY1fDymb9kGBmn0YZucHzBdBvhzjo9MGvCC7ZOvKbX0jWpzEJffKOO%2BqB4MdpheUbhZK%2FxM6KK49c0TF\"}]}\r\ncf-ray: 9845e2fbcdfdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 79 x 80, 8-bit colormap, non-interlaced","md5":"8abf15c7e759f7fa873d28468a8dfc0e","sha1":"f1c4a2308d09868ded989dc3ebaa0e84717ca2a0","sha256":"7c4b98126f08363a092fe2695a9edbbf91981b3bf48c6174d9d3f2b11fd20657","sha512":"ab046468232e9605646e3afbd0e83cddd3cecdd0374bf099cda175294046b150efa36aa5dc5b490e1884ec747dcdcc9f7bf30a3d8e3052c6762636ede307935d","ssdeep":"96:sITPGi8X+KE2oDE1aCV1MK5AWzJ/mUH4pkWT2Ld1gnPRbFo:v+iVKC5I1MBWztmUe1Tg1gxa","tlshash":"47a18d8cacf6fc35b06b051d1f0b648607e470763e99fe4589e60c9b43f9a879d062ad","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.734583Z","times_seen":2489,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/js/scripts.bundle.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /js/scripts.bundle.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 129472\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":487325,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8243820000b9b3c403f0e6cad442a8a5","sha1":"27fb6b54eb383c17de55850da47d3bf50ba838f8","sha256":"94b01f0d9af4a2f5cd7698c53f4b4fca40f1c90174f0e5c007bb931b148a2a65","sha512":"54ccc5fb97af6aa8cc29a80c5785c30480794ae1ca070a8580cfedf0f05ad3e6a61b6ed4795cf89bde9bbc8ab0b0d0e471c6be29472815b9fdc4be3ef2ff0941","ssdeep":"12288:6iCS3iIjZzvrAF5H870m/zWxN94eQyKAg:6iCS3iIjZz0F5H20m/zWxfKAg","tlshash":"c6a4c64073d0685a139b6f7ab31fb0e6f85e0daf3948484bd154bca565a922bfdf0831","first_seen":"2025-09-24T22:59:15.228628Z","last_seen":"2025-09-24T22:59:15.228628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3024,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/SofiaPro-SemiBold.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/SofiaPro-SemiBold.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/css/jquery.dataTables.min.css","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/css/jquery.dataTables.min.css HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\nlast-modified: Wed, 12 Aug 2020 10:33:32 GMT\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\netag: W/\"df7a29af7dcc03302e6128cc86e2e018\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 55541d3f726d85610ca3ec4fc80705f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: CPH50-C1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ja8ozu-xOOH_gTGiQvG61tjvijfA0igjsDo5_JmkzniivHtRAb9ofw==\r\ncache-control: max-age=14400\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9845e3347f2756c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13899,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13899), with no line terminators","md5":"df7a29af7dcc03302e6128cc86e2e018","sha1":"b19f14ea5192ad289097680dd396aae22958debb","sha256":"57a9373976025f88c2d16374ab48d886a110a20410cfc3007904a03b84caab62","sha512":"eb1a1c5ff8f502b98b7825c8e75999fe537a369229f26ceb9a082cbf12c3eacd6919996452e439b8a0da01afde92f0df175ca50a26b7e423741f73d05fb5a6a9","ssdeep":"384:wv+clL5DJNLoCiBBXaOtCJ2jvb2xLt6s28HbifOzh9:Wj","tlshash":"7c52de607393b109320aedf4540c55786a347110d96e8abdbca9e7db1f01ccbe2dacb2","first_seen":"2023-04-12T02:47:40Z","last_seen":"2026-08-17T14:23:58.02341Z","times_seen":204,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/lock.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/lock.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 650\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56bac78e51da9fd7d88b8868662b1491","sha1":"399136b357eba19db40e478882df3c1d26292e63","sha256":"be678a7fadf77d3944fa8a3d556141b47468650e1b6798870d8b9d0b06eebe43","sha512":"ac12950dde8dc1298629dcfbf417d3882743e457fddb337099a2f2edb2894d929cfbd0381541ce3075db78811b879c550a62fd42f8b03a7b5fe2aa0f1354c928","ssdeep":"","tlshash":"1231ef9132a48c9cb8170b34e75438a1133e64737200c65cdc7e24304126a5de9bfbdd","first_seen":"2024-04-14T05:44:30Z","last_seen":"2026-08-09T22:52:28.3878Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/autocompleter@9.2.1/autocomplete.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/autocompleter@9.2.1/autocomplete.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 9.2.1\r\nx-jsd-version-type: version\r\netag: W/\"1778-T/efyFDYUSEmqnfjRzQWaoXGxew\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\nage: 1332113\r\nx-served-by: cache-fra-etou8220073-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5512)","md5":"a86b4d0b78aa81ae3448dd179e63a6a1","sha1":"4ff79fc850d8512126aa77e34734166a85c6c5ec","sha256":"ad210c53d6d3b61146779594a306e0d0f48272ebf884284700613baa05919c74","sha512":"57be2c72415b2964b5d7b971f6445d62c7221d2a74be7e83245355f9990ddc29b3a54ef0e8cf885700796a0710f05ec5b49cb2a8b5cad580a87350250d091953","ssdeep":"96:mhrNV4lDBSEBnEMuZPo6paG9o2UKqB9PxtAdBzF9EvOViuhV33G:mvm45Mui6kB2UxjEdkSk","tlshash":"18c1757e3b0036731ac771e7959fb9421e782563e90e4c00a039ee943e3cee93667995","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-08-05T23:59:47.242744Z","times_seen":673,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":60,"dns":1,"connect":26,"send":0,"wait":14,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dash.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/dash.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 18136\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8d6a01e28c3410051de22bb296816af1\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B0F2ED58\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2Bb4X87d45%2BUcBEJyqjaqPdFZhBOPkzcnXxkcySGQodpFCg1c9xOYYWbZr4amcJdq92%2F0J1soE6%2BucbMjeVUqiKb3EUVA%2FUipQ8Fr9Vke68k\"}]}\r\ncf-ray: 9845e2fc7ec1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18136,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8d6a01e28c3410051de22bb296816af1","sha1":"0764d9b321860b8f76ddfd5d5255e994ec9891e9","sha256":"a55ae33ff02e8cbe15724e191a8769aa183127ca306c3837381f02dccdf4a9ba","sha512":"53075b5ecce625006cf8735feed0b1584695c60314eb4cd1b2facfd1cd1faaaeedadedbe89f07cf5b9638d0524ab7d58c3ea9e718c2fb197e562014ab64953f3","ssdeep":"384:4uvh35wBCnThhIrd5JR1m/T9VkoI3e7IJDHhLa:R9kCnTrIR5JKL9IhHc","tlshash":"8982cf063eb4672eca7c17b12e420562ce2fbe112a14132bf39f1956539d13720ad6da","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.663668Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/CircularStd-Medium.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/CircularStd-Medium.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bnb.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/bnb.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1754\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"fe0828b5339adeca506d81ee26fafde9\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AA9D7123\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=be6JhfTTRQhNXI1p5cBObauDOewVwlLxNelXsgtSm%2FXQyId4aGtIkjYOMCd3jEHwhUXED60m%2Bmjz2UOUdpqfoJPKmiSHZvBQHk2M%2FvUmS2a9\"}]}\r\ncf-ray: 9845e2fbbdebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"fe0828b5339adeca506d81ee26fafde9","sha1":"ae0828d5399934bf1470f7572b5376523dba033c","sha256":"f3186447151f414f1b557d16f0b251a9bb6276877b389e6c3e7aee9da9a3da6b","sha512":"e8812603920401f7df87d1d4fae1d3102d7afb51254a323944e43b815f52fcd81a048f9d845cf10410c792665cb64fbf558d307c18f682d5d985cb28f00f9b17","ssdeep":"","tlshash":"c7311a4ab816177ccc8e6a0c999b1c14eb3458e424a383cd9f34dddebbaea9c1ccc541","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.776873Z","times_seen":2578,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/proximanova-semibold-webfont.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/webfonts/proximanova-semibold-webfont.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-widget-style.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33124\r\naccept-ranges: bytes\r\netag: \"8164-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nserver: cloudflare\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nage: 4554\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TlQRIgR8icd15TGEmZuWNZEhDMTK3Fz8sk%2FRXOVD67fiYcr%2BfVoV7WQyFwKQEtuNy9lLCJOzvvPt22Htl2ygs2i3NBbRhrQ%2BmA8Mr1qcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9845e2ff0dc50b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 33124, version 3.917","md5":"fdda429a1a07541b0bb84ad21d01be10","sha1":"2db29ef19561eff816a5aaf28d069420511ca03d","sha256":"ae55c313220f063fdb3dc157a89a22e6a20a400cdd5b639a5aabfa4ae91e476a","sha512":"fbcad7a1cb265e90d7dd3a1685e6b28b28ca42ea7313c82769debf013c26d4f50f89700d6601450e1c065659a78fbdbf355aef573ae3b9b86a7b37698456afb5","ssdeep":"768:kN7vTV7/L5e897e3qf9h73sTv+nZDym77GWbJkr:kN7VTde3aw+hBegu","tlshash":"9de2f15ac3119ea2bb2947705f923c819536ea5486bd78cd3306cf74de74422bc79387","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-08-16T06:07:09.478955Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-feature-pattern-3.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-feature-pattern-3.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 261\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":457,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98e974fe85a2a5cc94605d61ccb8358c","sha1":"d1a3574700e932fdda386d769a074d05d450e960","sha256":"faf137a9caee5a9915b2c5658e16ddda3e0f8b7f55a458de2af6ea08ad3ef3d9","sha512":"c040d1271ded36aa81324ba00aa936f2a5ce35ce6179a1d23f8951b01b864865e1dc4df790c75739f0604dafa91523d5fab728b9b28e440fc863f083f44e32f1","ssdeep":"","tlshash":"97f0dcf4b82cdcacd705c848628ff8b560ab10d21a160bb6a8a118176ce55f32c9f1ec","first_seen":"2024-09-19T20:57:03.374868Z","last_seen":"2026-06-03T10:05:48.727991Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/js/jquery.dataTables.min.js","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/js/jquery.dataTables.min.js HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2020 10:33:35 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\netag: \"ae344f0636fc48a253f05eba54aeda6e\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 12e48cc8059cc8e5f884f847f2943d6a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: nzZBCrbyhb8Mpe5SAvcsHRcNOx3M_VNu3AJIgqmhkcuaPDLHcXTjYA==\r\ncache-control: max-age=14400\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9845e3347f2856c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (571), with CRLF line terminators","md5":"427d622c023712bad1b1876e2c3dd9e5","sha1":"76b9b334c9cab4dcbfbb5c4e420a6c14bccc063b","sha256":"1610c2af4625a49c6bebf5cf662a3d9f76dcc5b249b430e409866c6664df61bf","sha512":"4e06c1941f36255e6a652fd9cba39852807322725395ceebf0f5a801485e919837187c992ebc1849895d878fb2075fdf1057e9226e5112b50188f7c9e627cdd4","ssdeep":"1536:kmO4IIPSjhHyHgktdyxso75kX2q8EOJEW3JxalJCQhcItquXUjAXql250R4TT/94:vnvOHyHgqdQJAKJEW5xCJ3JqKl4","tlshash":"9983f7993a817959c7ab78e001af090be23e5d96f5498c70b0a4d9d53e70c9920bff7c","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-08-18T12:01:01.455669Z","times_seen":304,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/vet.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/vet.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2118\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c2048e55a7a97c140d0f126610298c52\"\r\nlast-modified: Mon, 24 Apr 2023 15:43:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16ADDB95EA\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ey7ye4V%2Bj%2BAYvbTKu82XVojBdc3GQho9Z5xi1vqqtKsjE2%2FmbagbhLmNEW23HL80DCU3Om0xomQFjV5fkDUbzB%2B3bqEA5fJln3GRfIuSgcJ\"}]}\r\ncf-ray: 9845e2fc2e54b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"c2048e55a7a97c140d0f126610298c52","sha1":"0b5df5b1166c69617ee3ef9a7df009c512957bad","sha256":"522f9f44e9bf63e030177217a59dc5d66f4d4a880ebe4a5f90fd0111b20e4a46","sha512":"b7142d41440e56ba36f0a3fab30fc95085ce38734a9b4460129d3679f93f0741346efdf758ce3350dd146c2eb23ea6ea2fb0f2b15df95bb643e359f684a6ed38","ssdeep":"","tlshash":"e34109a799d81a6abb460550022e5368fd257f23c070a9ea8abff00d147c81524466b1","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.828199Z","times_seen":2375,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws-widget.coinlib.io/socket.io/?refref=aerodrome-finance.vip\u0026EIO=4\u0026transport=websocket","fqdn":"ws-widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /socket.io/?refref=aerodrome-finance.vip\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: ws-widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://widget.coinlib.io\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mmGMdCEg9M4tgPSdo2L9Fw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 24 Sep 2025 22:58:28 GMT\r\nConnection: upgrade\r\nSec-Websocket-Accept: GUBDmrd8HZkSiimhc1qNjnpqZ/8=\r\nUpgrade: websocket\r\nVia: kong/3.2.2.5-enterprise-edition\r\nX-Kong-Proxy-Latency: 1\r\nX-Kong-Upstream-Latency: 2\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dpsjgbuTsrIOPaIUo2E%2ForphqaoQOlpmhD6DXkDtxalY8inV2z9lh42SsVNm8G1vc2zwVRhIDIvWlwrWOo1kvoyRvs3iZtPET8idlMhfI0VaiXtBKS%2BfNQ15tghsf3D4%2BffptGIfHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9845e300aaac5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=461\u0026min_rtt=436\u0026rtt_var=166\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2819\u0026recv_bytes=1228\u0026delivery_rate=5246376\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=8f6a035030a62fb4\u0026ts=77\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":41,"connect":41,"send":0,"wait":62,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-feature-pattern.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-feature-pattern.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 281\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdd1694ad1b3326c8ad55ef483d251b5","sha1":"a6df9212b3015cc12f1412daa5dc906155c48d79","sha256":"e25305c29d0bea8c54c5c97f66a18ed490ecf8ccfbb41684029af963782076f9","sha512":"b3b93b60fbccdf230fff7c15376d71084353ac9877a52b1de3171f7d68be509722231b6a1ca4361a1858d8db952f6df1348adbfca894e6df5cbd1f0ba67dfe64","ssdeep":"","tlshash":"c9f08bbd3959dc68e211ce64e38f796c202f94f2064246f6e3620c1b91784b638aa7d4","first_seen":"2024-09-19T20:57:03.365536Z","last_seen":"2026-06-03T10:05:48.842498Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/etc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/etc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2210\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e06a71bff8d6758f4ae7cd093fa0099c\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AE356324\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FZigztFfZNbc6mxRDqhn6T8ZVNBP7TIhKE4SzjyUIZ9AUWzu2Py%2BiqhH3JKvDmu4mJHgMe%2F1yb4nolhTdvfL%2FyrbB%2Bs1C314oOgmXK1ZlDL\"}]}\r\ncf-ray: 9845e2fc1e48b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"e06a71bff8d6758f4ae7cd093fa0099c","sha1":"70fe28380fdd0b3f2a16714ec7df40ab6152f4ab","sha256":"bd3b5c7a927dc5c1f76548bb34caa870cc195e27d3b781ae7afcf6802dd14a10","sha512":"ee88c3b1b67e00a3692ad89005a46a3716705440566757ee284280106071a8749c029f973464fbcb3aa664022907506ceb3f58013b6847544185817daa89fbfe","ssdeep":"","tlshash":"5b41d6824140fe14845c2858f3f7da0b4b1a56defe863f1ed9d60be00908d1673702b8","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.634066Z","times_seen":2393,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/cro.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/cro.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 24875\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"ffe46471360b465568e0f07b3bac39c0\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AAA9C644\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7kdk67nWu3AqW5%2FcjzW9q4L5ThtXEE06NFOPgCDOBPyI%2Fv6mOgkgBLyMLVLxivgIqt4xOMQzLcLZYHyXAxb2iyQcAzpDg1MhFvJaOPqn91s6\"}]}\r\ncf-ray: 9845e2fbde05b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24875,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3","md5":"ffe46471360b465568e0f07b3bac39c0","sha1":"9ddc88ddb9c494eccc1a9469a86813c7c4aea708","sha256":"48a7f7110c01f5c77791aadf07293f6fde3a8f7726f4868d10343542d5fab64c","sha512":"194bb9b5d80a7848ec93154209aaba8071cc1fbf4cb8071b6b8922364be7b6b41153c4493e35fa57c46511f8df76e0a21884dc27e61e6980b903a9b0011addd1","ssdeep":"384:4BaHvvbZWjeXrMSn+oDyeRauMF7TaoNFqcUs5SNOCjmgM2DliIqa:j9fDX1MncccXjmghiHa","tlshash":"2db2c0c69262b198f69c1576240147394e0d6fa3daa5e75dfacc0d303f178f6d88c2d2","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.744243Z","times_seen":2442,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ftm.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/ftm.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 12302\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"509847477d5e53d177db97e1dc3b9943\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AE4B5DE6\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRSp1cIk7%2B5uFzOB0WEJ6lXOUUIvMkumrtyHO6SLcYo0lCpOEJOjsrYjsisLIKgerV%2FcTStvzbeGeb9NhewfuJJzCh3GoWi748XXxmvHCQD6\"}]}\r\ncf-ray: 9845e2fc3e65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":12302,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"509847477d5e53d177db97e1dc3b9943","sha1":"d152864ffb597420152b3a47057b6816975846f8","sha256":"0e62f7e875ccbb07025cbb6bba8344ea0413c5e3c067365b0add4a25783136d5","sha512":"a5b44e9d0380b3453a2d73b58da34065db0dec76df870263fac44382a88125916ed37fb06054e2dcfc61b5ce4f4fd3eb82548c861acb4a9088460d2ab7ed46a4","ssdeep":"192:uQwGYHPdGtlhfalx1lUmxVqLx3ML0ksggsc608rNyNFNY4:uQw5GtbClCPL+40HA8uXd","tlshash":"a2428e4e7394596cc83d2f331ea80ba1bb343e106542aaaff35c514e4f6d0b598d45d0","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.787259Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.23.0\r\nx-jsd-version-type: version\r\netag: W/\"13297-ukFiRl4eWDQpaeqOO/ABDzT+nbA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\nage: 6679\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21050\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78487,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47565)","md5":"68a9af2dce9580c8491cfb79371d8619","sha1":"ba4162465e1e58342969ea8e3bf0010f34fe9db0","sha256":"fa43291ed35a569d15bf407d897eedca6126eeabfee804a7724d3fbae31e60d0","sha512":"27ee0db7ffa789e48d26340608f6fc8ca7f9ff0bf7d50890335d1b3a8b441d429cf6d0753e7d205d04ba5d73ed0e84211c76a8e69a139d20723089f369f52acc","ssdeep":"768:lzSRB5DI6wGsbJ/PWmM+ZEVxqFoRkme1LSrQogX5fRjYTYUhgC3X65Zx1+MmoeO7:lwk6mJ/PXZNYw3UyegJZZgypxIYbRn","tlshash":"0573f9916a04f03776ab41ae65d1e3047af99505fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2025-09-04T20:35:37.553334Z","last_seen":"2026-07-19T02:53:20.16378Z","times_seen":744,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":37,"dns":3,"connect":13,"send":0,"wait":27,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-feature-pattern-1.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-feature-pattern-1.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 280\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c083438afe0f913775bf2c6fd4a90df7","sha1":"786aefe9b345626e4fc968064682a5d4e39027df","sha256":"5af52a204d688aed3b297770fa35b1b06ebc1786c0a358a0365ca6cf3c1d541a","sha512":"1f2eb566764e8e78dd29263cb26d0a56c0fedd3e5cbe13b4ec0127b8a7b5cdaff3ce7a12c462128e0035f2620ed8b42565748f9f18e1210af7f123831efe62dc","ssdeep":"","tlshash":"d1f04c6c31ac8d25f6208964e7cb6e09342984a34d9107b5ab829d1ba16877b749f1d4","first_seen":"2024-09-19T20:57:03.370262Z","last_seen":"2026-06-03T10:05:48.777907Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/5/small/dogecoin.png?1696501409","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/5/small/dogecoin.png?1696501409 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 4857\r\nx-amz-id-2: oYJzcFDHEKvInlh8YghOcwKGOXbs5Mjl4GO+CNmjRWmm7ggpGNnlGpKvnDaOw4gGk4kF0g3EaIc=\r\nx-amz-request-id: 0NEZS2QKJZK4GNAR\r\nlast-modified: Wed, 29 May 2024 02:59:25 GMT\r\netag: \"3fe73d0936ccf1dc5467ec873cdaf72e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WNBnx8e0ymV6tGvOV_u69HmOrZqn32u\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3hU1MqceBvEerlDEp2GQYy%2F9YKzlB7fdIdlxeFY%2BRTOFt8t%2B3T9ApipvVc8KXh2JDC98UZz6TYjrOa7B1uv26IZqRCgQNNSi94WfVNCN6Kkbvkut4Lvepk%3D\"}]}\r\ncf-ray: 9845e335aec22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"3fe73d0936ccf1dc5467ec873cdaf72e","sha1":"11e79b580ee74ddd41ecb9a652a31623afafbbbb","sha256":"68654f81c92bf7dddcbf66f34aea126c90efe810a31cd59d8bdc5c88d9eec8c8","sha512":"df496833435b1040372906ff757ad08abc82f2f252e234cd8a3e7a93698adf916623baf308b6bb825d9f6d194a5629655300a851d7c3527b509971ba394bc7eb","ssdeep":"96:vqb+VFjgqzURHG6yGlMFK8mocWe4WPNYUDjSyO5++dwtKVuW:DZE3IFK8cZPNYr5LuW","tlshash":"26a16ddff91ae741cdbe06801f2717db2974c6a341aab6e1846912ea28e5d7e1c32710","first_seen":"2024-09-19T19:38:42.345867Z","last_seen":"2026-08-18T12:13:14.505193Z","times_seen":290,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo-facebook.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo-facebook.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 312\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":565,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99644566c24fdb1852a191f6c63d0b34","sha1":"6fd84d717aafdbef414bd45369376295e5b56525","sha256":"7fb0e6be263f004ee7ed2fe16e84b71785c7edf87de8b8ea4d765fd674c5f864","sha512":"69ffbf596a85a56d8f1d917bf7767c961ddd2d06e076883953fcdeff6f4596b504b5b39de228b4ef49801ad40410f5e25846debee88fa98668bbf272786f42ab","ssdeep":"","tlshash":"24f0eb9501ccc6084e82c7229b1b3932506374eda3bdc609f2843b2da80a162a805fa0","first_seen":"2024-09-19T20:57:03.440968Z","last_seen":"2026-08-09T22:51:06.125124Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/small/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1887\r\nx-amz-id-2: iC2zObjq0wczEg1BDevs0lWZ279MpB1AElib7faIUwojQEDWzCIadgBRRI+rUpSZR+JwU5Wewyg=\r\nx-amz-request-id: 0GHB1FMFBQYGQA5B\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DFYA3dyYowE3V7QZyNQq.2yD..TzK7c_\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 7097\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=97q4Q5w9xOkcKUeN6CJQRCrKDMBU0WfScWOUEUjwKHC6v3xD5dn8z%2Fr2%2B9AkAkhp%2BoY7ibKqckiJ06WLlpR4k7NYOJ1lW9P47DfszBjAyVYeMZvra7wIoWw%3D\"}]}\r\ncf-ray: 9845e335aebe2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"19758c6da516f95d9fad2a210c525ee7","sha1":"85a15edb10e5a58b2355faa8d54224e400faf5ec","sha256":"b1e625a6fa52c6d465bbcd0b311a4c7d54efc8c1c66da2d8f9d34a3cfb5d417b","sha512":"6074df196b5f6683e23183b4048815ec25b220f19ffeb11c4bd599ea1fe149508b220a5acd72c7717ca6f44247b4a4d1126d6499604a18cc8e412b4ca3a6bfc9","ssdeep":"","tlshash":"f4411b8dc4536b99cc2f1b751c3478bb95f8570518dd3e64da80da18c40fccb6214445","first_seen":"2024-09-11T20:05:16Z","last_seen":"2026-08-18T12:13:14.508303Z","times_seen":527,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":200,"dns":32,"connect":1,"send":0,"wait":12,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xlm.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/xlm.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 72878\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"ac107bc91b9301b1b9973a60fcb8e63d\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AE11113E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ItyUTlDIrudXBkEJZCWLef%2BO6Vcr64JTAo09KGBjaiAKimvf4J2avTVs4Z2Dr6ja75aQkCTNtAz%2FUnXgws%2FbsMmSgI7dOjKxdbOH9ffW8FU\"}]}\r\ncf-ray: 9845e2fc1e45b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2364 x 2001, 8-bit/color RGBA, non-interlaced","md5":"ac107bc91b9301b1b9973a60fcb8e63d","sha1":"e3cb1e33dd0180e8b33e2e5eb15ec9e8605c88cc","sha256":"89b764e3e7e16df6f0da0a3b96ab5f889890fe076fb4e749615555b30ce46e1f","sha512":"936ebeced78e710eaa3ba0ab99e11422a00378924090700776bc676c47df38ed0bd2b18883e2324526263655dd6618efa4de0480681499aaa81596db51645356","ssdeep":"1536:gYKWXz9amMZwFMr/GjoFj4Armtn+8n0bfUxQepYE:gYKM9amZarY8jE6bUEE","tlshash":"2663d05c942b7cc9c674a176617e8ca13c56c2f7b67183da60b24f634ba2bc04f67724","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.777638Z","times_seen":2396,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-feature-pattern-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-feature-pattern-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 243\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6e356fbcc7c5b8ff2f1513944184e4b","sha1":"f33a5f4222a00562a1670ab9ecaf6a73509d63f1","sha256":"f9304b491df1ff79fdb871f91c1ae2d8bf94e75aa1c57cdd566892a8e05d6a1f","sha512":"bed8b6e041069339982613ef1bb15bdc2ab77d40c10dda0feceda44762d2c3f957a1d94fdbb256f29ec8083d9f281a1682eb25ce5b35d242df6123f8378602ed","ssdeep":"","tlshash":"b2e0206561cc4e78b8388915e7bb60bd301d48f2125801a9d5965a16a4606b63c3e5dc","first_seen":"2024-09-19T20:57:03.373179Z","last_seen":"2026-06-03T10:05:48.838727Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/js/custom/chart.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /js/custom/chart.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4364\r\ndate: Wed, 24 Sep 2025 22:58:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43721), with no line terminators","md5":"b50822714324d9335e58068e18a7d356","sha1":"7983188a3a397a505b5dd831b0cd941006e07843","sha256":"26a434967720e181187d7de75288712b44afcb03dea13b50f7ab8f8192cac2e8","sha512":"e154157c33107e1d94a6463a946dbe57d141c6767982ed4cdc6b3e2bce207abe91201755de6369cdbb3c0a6b74b8d981642d2c75b38581d7c9178104407346b1","ssdeep":"384:Mv/HYW5TqFJy4mp3JBhk4FNAVNIuSOr90LjV+hEvSsvSvSOLpY5:Mv/HYW5TqFwJATaObEvSsvSvpLpK","tlshash":"3c13dfc7c549927b123926ff3e7f10dc9689c42aa307c425f791bf31e02652a9688d7a","first_seen":"2025-09-24T22:59:15.245403Z","last_seen":"2025-09-24T22:59:15.245403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4007,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/iot.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/iot.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 3250\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f378da86ad05333ce592e95915d59ce9\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B04EA12B\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EA2bD07uOsRQivCy9PXN5fuOF2vNQ%2BFP97kR3L1IUBaBlfwED3AwFk9CBBL2n4HDR%2Bc6NKoFzgQkeuFU%2BtLNYBEMuiCX9cftDeop%2Bm5QCU6f\"}]}\r\ncf-ray: 9845e2fc5e92b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit gray+alpha, non-interlaced","md5":"f378da86ad05333ce592e95915d59ce9","sha1":"9521e410074327f4af43b763e9e0d80699931e92","sha256":"98b70338daa355862d5b0c98839ac13a6526771a5288ae93c69df82fb5ba2188","sha512":"79d7b72200e2ba47cce65ad617649092c745db7e1086175c53dd760155220c67cc40ed3bde82ec0cc4ce9c4ca763ab7c618e8104d8159f0832ec98bcd58efcbc","ssdeep":"","tlshash":"81611cb255457d5fa48be2a6f5d25c9a2cf32c8cbe630152a16cb05c314eb34e9b1334","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.656417Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://widget.coinlib.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9845e2feac254e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-17T04:12:23.296547Z","times_seen":337651,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":251,"dns":0,"connect":1,"send":0,"wait":14,"receive":0,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/proximanova-regular-webfont.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/webfonts/proximanova-regular-webfont.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-widget-style.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32688\r\naccept-ranges: bytes\r\netag: \"7fb0-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nserver: cloudflare\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nage: 4554\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auKse9xPsLq1e%2FprEdvmhJjksGegZA7neEoVevtBDr5twZ7bMEdBOR5S9XOyu5Nyc2WHN1g1zNzRbyWiGlp%2Fk7nMJFLmdD4MnPvDb6RhHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9845e2ff0dc40b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32688, version 3.917","md5":"cf4a3df7970f0b16199e148034bb2c37","sha1":"f5501fb2d774e46756b23f034ebb5890c0dbf2a8","sha256":"ceb4ce0bba67a12e21af094eb24293d7ea8bffaffc237a1cd90394c7588eaec9","sha512":"e5e7c7b238f6927a5fab2b1b80210ab1e5be8d86a5bc93328084dd17edfcc5580c3d42a32e051679b28c100977a5d37304e81f0a5d8e7dd2b35f453fe5383497","ssdeep":"768:aql0Gwnrpz7x1Zj5sTzCbxiOJ9Yyv6uWSuCtjeruUm:aqlkz7xps4iiT6ZzYv","tlshash":"63e2f247c8820efc3f84423de6767153b5aa8351749be21799fba9740aeba2edc51900","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-08-16T06:07:09.448756Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo-linkedin.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo-linkedin.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 432\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":823,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc6e7974e2ee6f3e38f527a80000343f","sha1":"90b93d4cc84c0efc2f9a16237af2e72d92dcfdc8","sha256":"7b90c1475831f1502063b5d0332037ac38b08f908d76836d3b1daf47053670ec","sha512":"29bbb84f61ec88547ed0b8ffae89b93955ac656958985766371b463c2b7e2d77c0c89f0915072b12326ad2dda6991cf5251306a61b5e0a0a489a59e73aa0ccd6","ssdeep":"","tlshash":"ec01aff167ecf0c49f29cb01dd7a754a50ab60bd1d5d85c8a2c0a324aa4c66fdc0a845","first_seen":"2024-09-19T20:57:03.438234Z","last_seen":"2026-08-09T22:51:06.136705Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/atom.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/atom.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 5121\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"cd3c3266a90cc0a5fa32dfe870a68e51\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16ACCEAE8F\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNMD%2BTtupKpPONDKKy4VeoJwB6kbzrqv2U0UlIk8Jz16q0sSabiOp2MR57l%2F0T2DdrQ1iSamLXE%2Fgl5bDR3TWc0tg7eDbG4v5F%2BHe7s5uLd3\"}]}\r\ncf-ray: 9845e2fc0e3bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"cd3c3266a90cc0a5fa32dfe870a68e51","sha1":"f20bb4341658246d87b039460be7b07b5d169844","sha256":"5dcf565622e076a4b4c56765e1c7fbde13167c85be4a7a6a334fa82396f5de6d","sha512":"68d96d2673fd7e03eb2841fab0e0cf8b7b08c533eb9ef86fe47eacb070cbb7e6b68fd16b7d59fac12286d15c02f41a602578b4c8fc750adb1d9d20672e69d376","ssdeep":"96:hqSxnEWbJs3dA0P9Pfi4vlnbvHYAGIsoD8ONx8wiOzr:oS1EWbgK4Pq4vuhIs8bN+wiS","tlshash":"d1b18eab504fbda8141952e75fe939b4d189ec3c013187c815ebb7c29d7212cd08d316","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.621098Z","times_seen":2381,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/eos.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/eos.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2932\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"363915d59bbe7239e3ab25f24cacd461\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AF606A2E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy3s8PHpQmtSiX99%2FJ8W28esRkeZx5v2MOQimhUiNXPkjBmO2ONZhPbKzVQgoHbBy3Ok2w2tb4k6iYLIbl11HgcY4Oe%2FWzWfmxxCyjpMoo5J\"}]}\r\ncf-ray: 9845e2fc3e71b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":2932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"363915d59bbe7239e3ab25f24cacd461","sha1":"3fdf0ae4aedfd88e35b750ebe9d6ed05c649261a","sha256":"e1986934f1ba658a50c4cb2b626993e7e7ab12713b554908d2f7e1ae76def752","sha512":"c7bc930c21e58d26609a463b7793587b181bf185ed8513f4811ab4b997b332942d8453c9490c2fe344d02622abfa3df583a9cb6e1e6547b474cd521f8a8d58b9","ssdeep":"","tlshash":"d8513bb35ce03674eb0065220df3d03fcf41aeb68a37886fa705187faaca546562036c","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.77841Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/images/logo/logo-dark.svg","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /images/logo/logo-dark.svg HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\nlast-modified: Tue, 11 Aug 2020 21:02:47 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\netag: \"a3f100b856236aad115aada5724b56a8\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 73ded474d859582833823d7fbf7b7afa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Vqpf0HqSNUpK-JqxyF6cH81FCiv4eUsjzj_HmB05PEDXBA701MAy6w==\r\ncache-control: max-age=14400\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9845e3346f2656c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3f100b856236aad115aada5724b56a8","sha1":"4cd88d5f67a0fc9e295580667120d5da04d02b20","sha256":"35e2301f029a1c11d52a709b1e11c190ad7c971b6f295600808cc0ad5fc576c9","sha512":"acfb4840b89de8e775c67460c0a762f643bef8cb2263d2dd3765d067003c05cf71a43d2ee3f3499e19f225cf97f688bba28c9053c54104e8183b73c959f8e924","ssdeep":"","tlshash":"7531c1f76728785c8fd981a1e97972812419c0ff1f740132babca2b42f4b551e917844","first_seen":"2025-08-05T21:59:41.736954Z","last_seen":"2026-08-17T04:08:49.8384Z","times_seen":81,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo-ig.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo-ig.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 704\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1670,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27c2a16becc525f32e94ed1e83eb5808","sha1":"917948c3c5fce799e11f054ca34991156bc39d33","sha256":"2d771f0c97ba4f208d66242e6e434c98e5c67b029b045a268651927a9ea5cffd","sha512":"7651929eedfc3ec0e1c374ba47dd55f26ca541d79c8020ee055d2533bba5d043d79859b14b61f899c39287bc185d820526f9cbe1f29e9d13b402a79bc070d6d9","ssdeep":"","tlshash":"e731f0f650dc11f8a10aaff18d57a5767d4b3cba3760cfda02e438e4a5a50ada048dc8","first_seen":"2024-09-19T20:57:03.443039Z","last_seen":"2026-08-09T22:51:06.109528Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/arrow-circle-left.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/arrow-circle-left.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 394\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82edf37fdd58b341dbaea6ebc6d3b7c3","sha1":"6152878b5561aadb22e5156511a3059766abc4c8","sha256":"48f1b2e495a1b655f48ef1b91dd118107442297835137c2aa97df4e7bd690e29","sha512":"e976cdc0856377fa23b2f5bf3d6e2b9b43b31f360ec2f4229f6d5f85c52389b1c12f21cd551981e4ee126125e5b4d73b2cc4c3a5e4eaa4fdf56bf8fa278454db","ssdeep":"","tlshash":"9a01bdbb9c78c9a880086b3cc75a84b415332cf6b31351530aa12b24e9984aec0c09d3","first_seen":"2024-09-19T20:57:03.420575Z","last_seen":"2026-08-09T22:51:06.131189Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Inter-Regular.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Inter-Regular.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/menu.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/menu.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 175\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0e1960a684ed1580440eb47402e568d","sha1":"a83a30dba2e8f52c1e45d444a3940f9780b4a794","sha256":"496a905edf7d59c70f4ddb5cb907fd36c5973d3b59366b05ade1fda7ae5c8645","sha512":"dc79d970fc93fe4e0200068e3cc48f78dcbf3f61c15d6fcc4f2d9dd050efde4235d39d82fb84b225cc94d7cd8e13f792783fc3b58e5617776bc0cbf285421dd2","ssdeep":"","tlshash":"4bf0ec953354993c77374704f7553129607a351383dc724cdd212536620d5ed5e7fad8","first_seen":"2024-09-19T20:57:03.340076Z","last_seen":"2026-08-09T22:52:28.383224Z","times_seen":42,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xmr.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/xmr.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2025\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b1e731922e54fee58383e9386d40b570\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AD0ADF35\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23hUEIQPRJ40hWfY6a%2Bj8d5hcX4wHTQFLECLGz%2FTbbPWkW0zmiA7sGCHT6eX1G5BWZRHHNuIDFlcjs1bcoTh1ju%2FnMqgke%2FuW6bb%2F2zb%2B94g\"}]}\r\ncf-ray: 9845e2fc1e42b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 79, 8-bit/color RGBA, non-interlaced","md5":"b1e731922e54fee58383e9386d40b570","sha1":"fff19bf88f4d633e83f7e4f6d4301ac8a6a2dd93","sha256":"4481f79af008865dd6f9982ff1a674af3ee40cd1a4b495e8b481001b40bd0fe7","sha512":"f3b58f553a9556b2f13ff65a3951ee0abd74bac221d9b3286437b1ad8375f3226cb660ee6183289989590294f25b8100ff7791b2aa0b68cbac137cc64204500b","ssdeep":"","tlshash":"de412a5a0508c03a3f0139a9520704b1b6ea8d2d0bc346c5ecacb429bc4b5f1befd08b","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.639499Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9845e3338a0fb1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 116824\r\nexpires: Mon, 14 Sep 2026 22:58:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=riHoBzSd5m7GCW8xmyyvU62WZdQ2n7U8zQdojKagRhvv3Zx2Xzt2vDPZKakX0DiNoWo3Im08KdSL811CL8z2GTspOxF3Z8X9RVBHUWYH9tJvI%2FM2wZXGOWMKTzhKkyzeu3ZBN7DS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-19T06:29:08.768652Z","times_seen":31942,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/eth.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/eth.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2104\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"5c58f2b38eedb83ef8796fa2e64232aa\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16A970EFB1\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYobz7v5aiWg4kGxYs49r49LOBEvxVZCuHU91EmA2pgBZ1TC6na%2BBy9DjybHbHTvsGTT4j2VcJjxOhXVaO94bhzSXyUpW2kLpyJgCqwEEdr9\"}]}\r\ncf-ray: 9845e2fbaddfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit gray+alpha, non-interlaced","md5":"5c58f2b38eedb83ef8796fa2e64232aa","sha1":"689e9db3f08db55471144de8677986af42f84509","sha256":"e5adcfc72238a39ff5bed9b261e1c9389828d2dbd0e5ff0c49773894de068d0b","sha512":"6bde7edadeb0b1c7cdb5642bc28c42302b19597685a4e926e84d64a3ae766404040d35815161e60857dc3c82f8b262fd3d36b7ab19bb22c681e3f65df09c729f","ssdeep":"","tlshash":"92411a166c241dedbab0014b2d570878fa0f4ddaa02fe645f125bc728d613557025b6f","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.732411Z","times_seen":2578,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/825/small/bnb-icon2_2x.png?1696501970","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png?1696501970 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3237\r\nx-amz-id-2: iIMoGsrqH8MNJWP9m9W//xXoLlBt4bTRWZknW6N9UIpiS3tTR6xi/ifoOiudqjpZtGkNfgJKWn0=\r\nx-amz-request-id: FR7WZ6SFW9K8PWK2\r\nlast-modified: Wed, 29 May 2024 03:02:57 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TsP.LwF_4OUWYcdi0NPwQyxuX2JVuts1\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 417\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6L7Q5Aqyi%2BIY5L2QJfBiyldW%2FtT9YuTRhJnID54sD6Ry7vDe9EyGiLiC%2BraV4mQa5oQSEMof%2BDU4m4z3ASPRf5PMQWwPa%2FtHAV4f4eFVCiDkmSv2HLsgOw%3D\"}]}\r\ncf-ray: 9845e335cee82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"39e39ca433ebda412a810fd724075584","sha1":"f308c2834b3d52be64a32d3fa7a4ac3ff50eaede","sha256":"c63ff571db9b48ac57b368f7d021314ed68f3bf8864504d1c144f0a4a084304f","sha512":"8851389ba624fde1654b240c7f1b37246eb763bec5bd5ebc9b055039357d49be73128d417439b8f799c8ab3b166a067a14edd9d7b3916bec7d768b3693e79bb0","ssdeep":"","tlshash":"24615dce36395969c562c1f09d9f5258fce7e619f416180edf39151abca0f8ce057322","first_seen":"2024-09-19T19:38:42.359092Z","last_seen":"2026-08-18T12:13:14.491633Z","times_seen":321,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":214,"dns":30,"connect":1,"send":0,"wait":6,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/shield-done-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/shield-done-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 685\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3ec0a6a91529c5a58a522a50eabd21d","sha1":"eda943a3d14803acff4a62e8c25afa78ddbb4df5","sha256":"2ca53cc6abca6f6a60426ecef497dc59def849d4c4e04f125e77ddbda1910f14","sha512":"42534588df9223d588b29e628da2979ab6b2c551940b160365a6072e20b49f2bc393e15cb733a09676722b5c6647dbec547fd1b1482e937f4c2f0f9dd8689adb","ssdeep":"","tlshash":"43313df473685c2cb8574631db6a98e22f2e40b1b015815ccc2f3630901ad8af43b6dc","first_seen":"2024-04-14T05:44:29Z","last_seen":"2026-06-03T10:05:48.814796Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2053,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2053,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v2/landing-page-v2-mobile-apps-illustration.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v2/landing-page-v2-mobile-apps-illustration.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6327074\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8478549,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a52a6389b8b10388c06be7439abc62aa","sha1":"468d17414d711357f1652281eb8d80f8e29327f0","sha256":"090964c20272eaa6b599158c6197d4065a9091b297573d2bcb07765e5df9008a","sha512":"54f074a0ef83a84d5ff1d2892fd6e53b410469c7e388b1c885a87c54da6092d717401cdd0afbfde9cca586cb73e47b6a802f5a3c9aa2f55fb1df4690e83cd933","ssdeep":"24576:IHqNn9ebWHkjTUG3G97dVtW6Nu6wHEoWbW6R8PR:IHqN9LblW6RtNba","tlshash":"2a2512dc3bb14de9098c9be77b231a5c7923dab3ad898b54c29c6b4a20c191dde47443","first_seen":"2025-09-24T22:59:15.263399Z","last_seen":"2026-06-03T10:05:48.783883Z","times_seen":11,"resource_available":false,"data":null}},"time_used":5070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3246,"receive":1824,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1094/small/tron-logo.png?1696502193","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/1094/small/tron-logo.png?1696502193 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2279\r\nx-amz-id-2: htNPoONDuflX6SFcNyk0+6seEIymwyMwfZuUFFbOOhFyB59iN8SkLI5WKGfdlNoKccQa2MzeCts=\r\nx-amz-request-id: A1R9GFG5J428V1ZQ\r\nlast-modified: Wed, 29 May 2024 02:29:24 GMT\r\netag: \"ea60ede82147e3f806ac55350af285b8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2X8LxLSUEwZ6.IqWCgYu7HlfXa.JQWpD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3660\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvEPx1XL8%2BJdYGZZ2Lf9iZAjotpK7m4osYXdt2deYSDNj1qVcZY8N3TYaVetgbFjoDIWowCP2VAKxrGfoPMt795HsDiWs2c5hD5wUyuJcQffTwzJbV4qmVs%3D\"}]}\r\ncf-ray: 9845e335bec72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 50, 8-bit colormap, non-interlaced","md5":"ea60ede82147e3f806ac55350af285b8","sha1":"37645bedcddddbbf4c798d321753f09cb7cfaee2","sha256":"b6af3ba61a19665204528ae74150a45313600f8c130b24e0a5b17329800784e6","sha512":"668db58ab23c0cf29bb08a925d80455365b547bcb8407ebeabb0d252f4574ff2518a0494b5d7ad70355cabc3a911af40cbd4c479bc3a51741af144ef34efe6b6","ssdeep":"","tlshash":"b541d6e17c6651a4800119641c135a7ddce0f2922bc86eb5b633f9806d14f8a94daeb3","first_seen":"2024-11-06T16:01:50.631097Z","last_seen":"2026-04-06T06:12:45.918616Z","times_seen":290,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aerodrome-finance.vip/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKu2XUBzDRjsjw%2FNaFyZVwNhLqERI8OPX%2F59UJyh8AWawE9Qp7P91J5SGFlQzl8uRMl40mCkHGRCi4Me3YkPzVvrFqBGCzUfobaL9UJ%2BvgOKv8w%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9845e3396a8b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-18T19:16:43.131127Z","times_seen":5262,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/eyes-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/eyes-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 619\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05fd187d8021b47c9af318e6748baad1","sha1":"9519a7700c765680e8052d7811407cf2d0d1b6e0","sha256":"3bc6c23f994e01bdd289d5f8ad3e3d8e9fd66d6f1efdb139bcd6038bc17378d0","sha512":"42933598fd4b54568536ed16465c57d6b887607abdb5504e716f27d25fcde22f60583a7eca6cc5b2f44854854d36656a468283888f0c1b788aca21ef622ea58f","ssdeep":"","tlshash":"8a3110d233901c9cb95b0a31ebb575917b3e65bab104868c8c1e39309057997e93b1f9","first_seen":"2024-04-14T05:44:29Z","last_seen":"2026-06-03T10:05:48.718935Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2055,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo-eth.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo-eth.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1864\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8560b5796272d0d4b3ba5f635f964dd","sha1":"88b5cc7b6541fdd382379ef4a34004d62ff12e91","sha256":"94587897bedc1532a4451fba30ec62c351b6057eb3442ebb9c735fdfd5209f88","sha512":"78263c48f4708ca576a13f122c969ee443cb0f5a591eced40472eed0d35a08328ed1621f13550b77553048d01fee2fd295bf81609554e52e9d12e299b3e0deda","ssdeep":"96:fwfv+eQoi78SABHBZKS6jDlzGRpK5f+JrkvqjhYpkC8xyR5J9q:fy+eJoQpqvj1Ap2nvLuC8IR9q","tlshash":"e29174d6f3e693e8d104d3f08529b875376325fa6d32ce2c46f63d92e85941e850cd82","first_seen":"2024-09-19T20:57:03.405224Z","last_seen":"2026-08-09T22:52:28.422868Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1076,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/CircularStd-Medium.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/CircularStd-Medium.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/small/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/1/small/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2514\r\nx-amz-id-2: n80Do7F/ggwjgNYiPcBRCvWWhCes+Xj5XzG2JOQIDcZdaVOE3d3caAErjGmVkhXc79L7M4HmD6w=\r\nx-amz-request-id: FR7RVHGJ9P48BZJF\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"a8850cb1a50f04f848166f3a66f34b5b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: faIEgcgn_dbVO8zzWUh0AzJSg6B5kdIv\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2031\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPkzyn92%2B7zuzhOX5sovY844H%2BKVh58dedf7sveMcf7LnEU9THoaSKblf5Qg7kbeidwCSHu%2FzJ2wX9mzlr73%2BTFTMj5ObdB3eV31aksTzxxbfUiDQqcHl4g%3D\"}]}\r\ncf-ray: 9845e335beca2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a8850cb1a50f04f848166f3a66f34b5b","sha1":"abb87f27a7fdec4738714c7d22fc9ec1218e9e14","sha256":"6ab43dedc21519e1974d8a73f07f15f029ea7598d733201af3fc06fe9344256b","sha512":"96a0946e9d3757a2bdf7ac48c43a1ce920aa3c48110898a20ebcec67f1c1eebad65ff960097e626c7078c653e35851034ccde0b3f572859483086cc38f8a85da","ssdeep":"","tlshash":"c4514cdc3831403cd1bfaf6a341e1110c47a75c9a36d9c04b894fee41a7c994f86cd85","first_seen":"2024-07-19T21:45:37Z","last_seen":"2026-08-18T12:13:14.477154Z","times_seen":691,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":206,"dns":33,"connect":1,"send":0,"wait":15,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-hero-gradient.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-hero-gradient.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 512\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2caae695c8ec11b6d32dc411cf847da8","sha1":"940675f14ddf494b149b54e33255edba69579e22","sha256":"c84c24d77d2ab98922b7fe7c7ef006f3109f2b9e20e18e3c71aa0e52df0c27f7","sha512":"0ff0bee1ce017d8d9a0f043ecb560e4bbf71b2be81d4353d2329e94dd32088375a85d5082db75077f3f9e23d3f74a64b5622bd62c0c240742315a893263281b2","ssdeep":"","tlshash":"0c11216990e83519e45cc18cfbc648452069e09a8241498ed49d6f2e1219d82bc5f3e8","first_seen":"2024-09-19T20:57:03.356695Z","last_seen":"2026-06-03T10:05:48.721732Z","times_seen":10,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ltc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/ltc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 26929\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"61c5df66e88adb4561f3618d2ae8bb8e\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AAD07D6C\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXPh4AVonoHDKuI%2BmTJCSzhMthW%2F66YhfupnI2RdvEF%2F6rWIGTaGqkWcs6sKmgKKxN%2BCdJlHWbsvlxM3rVAvSyE1nTSwxQqe%2FZDsR0fRYQI7\"}]}\r\ncf-ray: 9845e2fbde08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"61c5df66e88adb4561f3618d2ae8bb8e","sha1":"7fe126725bef41bcd996a49569407d9a98faeb33","sha256":"c3e3ed970a9a8ef0357b51ce0efe061dccbfc75dc4b219614b682f2459a1a809","sha512":"10a7850d7ba5c279faaf6601557ccc02ef1385db3802c1c60c774139508444d90577b179d55e51ac7643c702062cd85c443a617c7b372c4825bd76275409fd50","ssdeep":"384:cn4UWxfWMxc6vpRbw0RkCbvAl4O66PE97dmgbQORNO6Evw+bGR9q0wAjsiiXmEW4:cnFEWf8X4hBPErmgbNNOFCjzj7hO/B","tlshash":"ccc2af3f76e5dde97c3c844865f2be89669404b0d7c2db00455f3b689843b8360e22bc","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.794537Z","times_seen":2443,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/trx.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/trx.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2676\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2517df9c7f726aa26194a0fac59c956f\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AD095851\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S03qvFMtxIs7gaNPdstF9MfswTtcaRP7DidcUt6Wx6VAKXxwP5IyFxU9uWXp3TXo%2B1daRKrsxBwatDuz7kfIK7Tc9%2F4kEEOpiy%2FTzJ2io0LH\"}]}\r\ncf-ray: 9845e2fc0e3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"2517df9c7f726aa26194a0fac59c956f","sha1":"3ef3e1651d128aeea0bab65c00da3ca657e5a223","sha256":"0c6753dab1e83e20861e3959d1c9c00cc63a192c8731ddc44fd4fe9acc78c7ce","sha512":"7c981998eb5ad2d8e1956209936f4dd0bfb183cfcab51f5831a4e02f408960b775a078223dc0dfbc3511c84ef5aa3da3dfba1593dccb0116b9a130b1e29757b1","ssdeep":"","tlshash":"d0512b97fe90e465d3026244d41b16a55854eb9c65ccf118349ddfcd6af48d60181c98","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.65131Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/waves.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/waves.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2678\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4db326850954c21f42089de1f67c8898\"\r\nlast-modified: Mon, 24 Apr 2023 15:43:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AD4C6FC2\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0C6tBoQ7M9%2BJClOI4W8YRRYJy50nGQaRs3wEoqjyrmwAZS2kvKZu%2FlN%2F6WOpGyePNRqwekmM8iYIDBO%2FD6K3UkJfkrnfuf4MP62SoAh1i63\"}]}\r\ncf-ray: 9845e2fc5e9db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 79 x 80, 8-bit colormap, non-interlaced","md5":"4db326850954c21f42089de1f67c8898","sha1":"610efa2bd5fcde9ca39e19f9193e7e53b47e3898","sha256":"0eb3c380e9d8934d38dcd5f3971730ca8c90698e5b843c2ffa24229fb31f406f","sha512":"ca479d264d275c252da84100c5361e9f4ad4c495e4b03fb39a92ba2452b3205d039059f08e0108ee82c766f3ef2467e0efe7fbca44a4f42aface90a8d886b435","ssdeep":"","tlshash":"f0511c403215a5e7e5c66e284da10671cdd61f1a58c926b2f8e6fa42b17d3d0910593e","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.619606Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bat.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/bat.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2777\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f574a0cf998b4da103bc0387415e6bd4\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:27 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AE7FEF51\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3odKWvoM0h35E%2BRvLzMl4Nx1rNBv9Lqea9Hmh%2FFJaNKRl%2BMzzggwlIFQOseBNXuhsvmHPEo1QPRmb1rNrzeNDlhAh728%2BMxVplHlgoHtyGt\"}]}\r\ncf-ray: 9845e2fc7ec4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f574a0cf998b4da103bc0387415e6bd4","sha1":"95e08279250df539fa5005f331a33ed84f97a425","sha256":"1e1c79472ac407f3abc54e8ff8815cf0798e906e3c20e99c5a221da5443ad9dc","sha512":"e617038c426efaa8bf8e88d9541934924f47e9a1e8be1cda1ad70c6be0b3cc923d072cf4d8a105ab9cd085ec4446e60f39731fc297f04358e36cc1862e78fd29","ssdeep":"","tlshash":"f7513bd74cf0acc3e46c555241bea37e98e1428b4d24654fa3733169010ab49f6a0d0f","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.765397Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Graphik-Medium.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Graphik-Medium.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/widgets/?id=%5B%7B%22id%22%3A1%2C%22options%22%3A%7B%22realtime%22%3A1%2C%22numcoins%22%3A10%2C%22table_style%22%3A%22dark%22%7D%7D%5D","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/widgets/?id=%5B%7B%22id%22%3A1%2C%22options%22%3A%7B%22realtime%22%3A1%2C%22numcoins%22%3A10%2C%22table_style%22%3A%22dark%22%7D%7D%5D HTTP/1.1\r\nHost: www.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 2713\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nset-cookie: widgets_csrf_cookie_name=4ef3757680d9f519ee9f35cad52ee3a9; Secure; Path=/; Domain=cryptohopper.com; Max-Age=7200; Expires=Thu, 25 Sep 2025 00:58:36 GMT\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self' *.cryptohopper.com *.hotjar.io *.hotjar.com; object-src 'self' *.cryptohopper.com partners.liquid.com widget.changelly.com *.intercom.io *.intercomcdn.com cdn.paddle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.tradingview.com *.cryptohopper.com *.intercom.io *.intercomcdn.com ajax.googleapis.com cdnjs.cloudflare.com static.cloudflareinsights.com *.shopifycdn.com *.myshopify.com sortablejs.github.io cdn.paddle.com www.googletagmanager.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net optimize.google.com partners.liquid.com widget.changelly.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com cdn.plyr.io cointelegraph.com s3.tradingview.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net cdn.segment.com fast.appcues.com www.googleanalytics.com www.googleoptimize.com assets.customer.io code.gist.build; connect-src 'self' www.tradingview.com *.shopifycdn.com *.intercom.io *.cryptohopper.com *.intercomcdn.com *.myshopify.com *.shopify.com *.cryptohopper.tech *.hotjar.com track-eu.customer.io *.api.gist.build *.cloud.gist.build ws: *.cryptohopper.com stats.g.doubleclick.net cdn.paddle.com api.appcues.net fast.appcues.com api.segment.io *.google-analytics.com *.analytics.google.com widget.changelly.com api.cointelegraph.com wchat.freshchat.com *.hotjar.com *.hotjar.io saveload.tradingview.com cdn.plyr.io cdn4.mxpnl.com; img-src 'self' blob: data: *.cryptohopper.com www.google.ie *.coingecko.com *.intercomassets.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com cdn.paddle.com cdn.jsdelivr.net img.youtube.com *.giphy.com res.cloudinary.com appleid.apple.com sync.taboola.com widget.changelly.com assets.coingecko.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com image2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io *.google-analytics.com *.analytics.google.com www.facebook.com maxcdn.bootstrapcdn.com www.googletagmanager.com optimize.google.com track-eu.customer.io data:; style-src 'self' 'unsafe-inline' *.cryptohopper.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com fast.appcues.com cdn.paddle.com unpkg.com cdnjs.cloudflare.com widget.changelly.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com www.youtube.com optimize.google.com fonts.googleapis.com code.gist.build; font-src 'self' *.cryptohopper.com *.hotjar.com *.shopifycdn.com *.intercom.io *.intercomcdn.com *.myshopify.com *.shopify.com cdn.paddle.com cdn-images.mailchimp.com widget.changelly.com s3.tradingview.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' static.cryptohopper.com *.intercom.io *.intercom-sheets.com intercom-sheets.com *.intercomcdn.com *.tradingview-widget.com buy.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com create-checkout.paddle.com widget.changelly.com plugin.partners.liquid.com *.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com *.sumsub.com renderer.gist.build code.gist.build data: *.cryptohopper.com coin360.com coins.gourl.io platform.twitter.com www.emjcd.com cj.dotomi.com www.facebook.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl optimize.google.com; media-src 'self' blob: *.cryptohopper.com res.cloudinary.com *.intercom.io *.intercomcdn.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com widget.changelly.com s3.tradingview.com cdn.plyr.io; child-src 'self' *.cryptohopper.com *.intercom.io *.intercomcdn.com cdn.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com widget.changelly.com plugin.partners.liquid.com www.youtube.com; form-action *;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: PwCTNGS1d5y_uvhhUOcD1BceO32DKhlMi-A2XMCEyUfMBq2P93U5vA==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9845e32f2eed56c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12757,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a0de2a62296961e1984d73d86a5298f7","sha1":"62477f06d0ce40e1cd605d215d0f9d1cc7851e15","sha256":"4c87528564173345854b0adf9188a227f4d63b69360eef08873d01bf78269067","sha512":"33119f046007842340ec9aaa13203ec0b655c62b72722282619ab76835f9f8ebba440d88fc328db7c569d021d7d0be25e9351c795df37a5e4011f4308e852631","ssdeep":"192:NYnCOrhZBu2FPMLxSyHJara8ZFie25eCLnXK+3Qy+iLu99g03gxA3aUslHor5:NmHVuDxbaDZZIXAy+iLud3NaZIr5","tlshash":"69420ff061dee037944784c038aa776cb951f52ced768482abee4afbc76ce742434985","first_seen":"2025-09-24T22:59:15.273672Z","last_seen":"2025-09-24T22:59:15.273672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Graphik-Medium.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Graphik-Medium.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-why-choose-us-pattern-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-why-choose-us-pattern-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 280\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c1aaf1adf710dec275a67cd0c782b80","sha1":"39dcdd33e39b0e2ccbda06c096248950a3dbe64d","sha256":"fe25319d774218a744f28ca087e744113e03ac4e15956fc99945811fc0dba9e3","sha512":"40eb54399ddbbb06ee50d38226f7406843c4e64c7f00a64fa396c1fdd0ac226a85b154aaa6bdd5818239b19ce7f329f5e6853934aee0c080976a4e7e21ffa163","ssdeep":"","tlshash":"54f0ebecf9584c2cc910c144e3aff44e701f28945a25417fa1101c17b0758eafc2b39d","first_seen":"2024-09-19T20:57:03.392173Z","last_seen":"2026-06-03T10:05:48.779337Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/cryptolly-illustration-1.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/cryptolly-illustration-1.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 164034\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":446255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62ffb24943dfba153698b35ead5b46ef","sha1":"8c11f266768f29b622968469eedf79b6e628680a","sha256":"47ab8914d424f7fe98219552f89276884f891a78f0000c9827003215a867bcd3","sha512":"8f3d4b7b9a0489aba7671e18dcff1a2723fd3a628049be2783e10db94c91f540fd1168a82067b5593942d1322e9f512e3b9c039966d43cf80f80d40798be7b09","ssdeep":"1536:7A7WrGxwAScJMpS70OQ5/7UhTurha0F27f29sx+t2+fVwomw3gpeMYLm5oKmO7l4:ywJ1jv19D","tlshash":"d694c6de3f7054d99dcc8bdbbf0210bc2863e8b7ae858a05c15c8b5d5491c2d996bac3","first_seen":"2024-04-14T05:44:29Z","last_seen":"2026-06-03T10:05:48.79169Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-hero-gradient.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-hero-gradient.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 490\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":934,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f34363b59cad035380ca12039c08385","sha1":"02818f5b77ded8908f1c5f3166cc5724b2a389bf","sha256":"3648926ace49a1e74587b3db34800988b65c077a13d1083c02c76bf9468ed80b","sha512":"3e6af88f413b9125fa563e1135ec04c5b8d4edd73c93f7ec759b9282974f2010a6772d595e189ede443f4c8e17d806e2e04a999b2198c140511bf50c031edf3c","ssdeep":"","tlshash":"7e1144e9d2bca41af454c11cfffa4c44206a91aa8150834ef06d7b3b4212dc1ac2f3f4","first_seen":"2024-09-19T20:57:03.351687Z","last_seen":"2026-06-03T10:05:48.807273Z","times_seen":10,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Graphik-Semibold.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Graphik-Semibold.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/SofiaPro-Bold.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/SofiaPro-Bold.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/arrow-circle-right.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/arrow-circle-right.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 395\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b36a086dfdf9ababa23a5694b27a441","sha1":"4a0f947c49ef4b918eb64aa1688853b50f181ccb","sha256":"914b35a78ed095cc5992c9529ced7a2a86cc7b6d83954f34b5a21611058741fe","sha512":"97da654eb0450e60a040e3e741cdc2d04bdbece7cbc97a23094dc57d4ea499efdd1800e6fea908fbc1a86e7b06526edda8e3067a9560256ec9a019e14cedc0b8","ssdeep":"","tlshash":"c601bde9d9a4c710d00dd728d72409f164b33c766b0aa00554717b259e5a82de5d0cd3","first_seen":"2024-09-19T20:57:03.422438Z","last_seen":"2026-08-09T22:51:06.136017Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo-btc.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo-btc.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 971\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1975,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4f0a57ee0e47d85a5b7e25a7e9379ad","sha1":"0afbc4a94d0feab7ba179562ec10db7cedf80161","sha256":"209e58890d51ed4092e7b5f7fa56e8186e2ec47a3e8d43b48263a7571944572a","sha512":"351b262da82d728fc4d4f83c428b763c27c8b268faffe8aa4b86b48f9acbc24127367033bb9ecb2956228bd97d6ae65e85301d93de7b911c65822be2a6c49924","ssdeep":"","tlshash":"5841537733e9b0fbf205e3ec455b1830337138ea2a29d10547e87e8b592010d04588e3","first_seen":"2024-09-19T20:57:03.401918Z","last_seen":"2026-08-09T22:52:28.386117Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1079,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/js/script","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/js/script HTTP/1.1\r\nHost: www.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self' *.cryptohopper.com *.hotjar.io *.hotjar.com; object-src 'self' *.cryptohopper.com partners.liquid.com widget.changelly.com *.intercom.io *.intercomcdn.com cdn.paddle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.tradingview.com *.cryptohopper.com *.intercom.io *.intercomcdn.com ajax.googleapis.com cdnjs.cloudflare.com static.cloudflareinsights.com *.shopifycdn.com *.myshopify.com sortablejs.github.io cdn.paddle.com www.googletagmanager.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net optimize.google.com partners.liquid.com widget.changelly.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com cdn.plyr.io cointelegraph.com s3.tradingview.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net cdn.segment.com fast.appcues.com www.googleanalytics.com www.googleoptimize.com assets.customer.io code.gist.build; connect-src 'self' www.tradingview.com *.shopifycdn.com *.intercom.io *.cryptohopper.com *.intercomcdn.com *.myshopify.com *.shopify.com *.cryptohopper.tech *.hotjar.com track-eu.customer.io *.api.gist.build *.cloud.gist.build ws: *.cryptohopper.com stats.g.doubleclick.net cdn.paddle.com api.appcues.net fast.appcues.com api.segment.io *.google-analytics.com *.analytics.google.com widget.changelly.com api.cointelegraph.com wchat.freshchat.com *.hotjar.com *.hotjar.io saveload.tradingview.com cdn.plyr.io cdn4.mxpnl.com; img-src 'self' blob: data: *.cryptohopper.com www.google.ie *.coingecko.com *.intercomassets.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com cdn.paddle.com cdn.jsdelivr.net img.youtube.com *.giphy.com res.cloudinary.com appleid.apple.com sync.taboola.com widget.changelly.com assets.coingecko.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com image2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io *.google-analytics.com *.analytics.google.com www.facebook.com maxcdn.bootstrapcdn.com www.googletagmanager.com optimize.google.com track-eu.customer.io data:; style-src 'self' 'unsafe-inline' *.cryptohopper.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com fast.appcues.com cdn.paddle.com unpkg.com cdnjs.cloudflare.com widget.changelly.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com www.youtube.com optimize.google.com fonts.googleapis.com code.gist.build; font-src 'self' *.cryptohopper.com *.hotjar.com *.shopifycdn.com *.intercom.io *.intercomcdn.com *.myshopify.com *.shopify.com cdn.paddle.com cdn-images.mailchimp.com widget.changelly.com s3.tradingview.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' static.cryptohopper.com *.intercom.io *.intercom-sheets.com intercom-sheets.com *.intercomcdn.com *.tradingview-widget.com buy.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com create-checkout.paddle.com widget.changelly.com plugin.partners.liquid.com *.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com *.sumsub.com renderer.gist.build code.gist.build data: *.cryptohopper.com coin360.com coins.gourl.io platform.twitter.com www.emjcd.com cj.dotomi.com www.facebook.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl optimize.google.com; media-src 'self' blob: *.cryptohopper.com res.cloudinary.com *.intercom.io *.intercomcdn.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com widget.changelly.com s3.tradingview.com cdn.plyr.io; child-src 'self' *.cryptohopper.com *.intercom.io *.intercomcdn.com cdn.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com widget.changelly.com plugin.partners.liquid.com www.youtube.com; form-action *;\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 7B5Zg6HhX30kkCw1eJBeLF7pwfwWpCicDg04-dfVoiY5r1EnrVB8EA==\r\ncf-cache-status: DYNAMIC\r\nset-cookie: widgets_csrf_cookie_name=1f0331bceaf15cc9d5ae996dcebfbf15; Secure; Path=/; Domain=cryptohopper.com; Max-Age=7200; Expires=Thu, 25 Sep 2025 00:58:27 GMT\nci_session=hmv825l76avca1s202gu6asm86n2f4ul; HttpOnly; Secure; Path=/; Domain=cryptohopper.com; Max-Age=7200; Expires=Thu, 25 Sep 2025 00:58:27 GMT\r\ncf-ray: 9845e2fa9fb77127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (574)","md5":"8499c3b86de4df25542c2f9f78d8a79c","sha1":"3942a2674cb09241e3598eb3d6403e3d2c2b09ff","sha256":"d67aaeb25ce9e34bdc18b2d3ba099086b1c3e5f3cda04edebcb14f826e5a78e4","sha512":"2a7103879757369f94970215e8e1d51255a567118cdefa1147396499dfe093175ddd63b579e790d1df3d4c2dd4ff4043ebeccd917124c6635654adf928d6daba","ssdeep":"768:DPFqnpKxIFoN7jGS9yp8TaA/ME0pwKfID8gXATtIpEmR7/7Scrni6NFDjdmyXRs0:RqnpKxIFoN7jGoaAUEyTOPncyXRsYxuK","tlshash":"54c20919f640b4bb027762aab43f5316326779e676020450a06dd9f17efcd882337f6a","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-08-18T12:13:14.433722Z","times_seen":695,"resource_available":true,"data":null}},"time_used":1015,"timings":{"blocked":217,"dns":32,"connect":1,"send":0,"wait":524,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/SofiaPro-Regular.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/SofiaPro-Regular.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/css/style.css","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:33.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/css/style.css HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ndate: Wed, 24 Sep 2025 22:58:34 GMT\r\nlast-modified: Thu, 13 Aug 2020 09:10:47 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\netag: \"c2be2f2d17f1ad2e99e26d7d1f03710e\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bc8f6092d0b53dac63dc9e16b012f23c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: wrlYaUxCOO4yonafeXPclkU1TlDo698GyxlNSCUZEGB3GypnbOrT_A==\r\ncache-control: max-age=14400\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9845e321de7256c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50709)","md5":"c2be2f2d17f1ad2e99e26d7d1f03710e","sha1":"ebc05b4d01edec633c9df96b4b0d41b15cfc612d","sha256":"06a92e9862a29259429538cdf7a2cb5675e8675d0edb9cfb26eba6e58e826245","sha512":"93e9541ba0917deb25e1e7d3cd61358670318cae49c82e6af2471e507f2214c25b855d2a6adbe024f031d09f0788f2356f4b826da5269bcfcd525d1ec8eee9ff","ssdeep":"384:El8298DchESZnQshDcIqPKUyZAjq+AjqaAjqCh2WVlhLN8Lt8/ty7UBj40ZkS5tT:YWDtYQODzxUy6h2WVl6Gj40AgR3eBx2","tlshash":"6d337621fa427219277ef4116df0f39a627c513191314b7afa9793128fcac9ec352b1a","first_seen":"2024-10-27T18:02:30.419505Z","last_seen":"2026-08-18T12:13:14.48057Z","times_seen":675,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":126,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/325/small/Tether.png?1696501661","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/325/small/Tether.png?1696501661 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160\r\nx-amz-id-2: ECJ4YMYrqtrzEeiKBqq+UMGF3GHGaSw0bg5sLIGgZzdQ8QKpH12g2d516yJuINDttqlBKoCaccA=\r\nx-amz-request-id: 8EPQWYTE0GWMVBBD\r\nlast-modified: Wed, 29 May 2024 02:52:40 GMT\r\netag: \"a660dd0441f12c1508a01e9d6fb031b6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 4i980wcjLJoyyC8wC2GZV9m9QQopYfgQ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3660\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbfS28JK84%2FAs73T54%2F%2FBqw2nfMxhak%2B1SjXhohrKcHWPh7KJFp%2B3GfRlsWxaFV9qZo%2BpAQ0Vv0TBmasLj%2BKh0CaEBC5GrB2oqnKsSB5jAy5pCwLLpOiM6s%3D\"}]}\r\ncf-ray: 9845e335def72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a660dd0441f12c1508a01e9d6fb031b6","sha1":"e8c9e706c53d93f428e1ccbc9b03215bbbb615d6","sha256":"7af4e2d2b12bd67001e64e389a835c9611145b42feeefd98ed4974d1aefb6f16","sha512":"692311b4a08e63ac8a8200774974777cb2f34d9c08a1e62f3fa7f6bb7bbdafe88b0abd81ac6087d68317968ea397e04e0a5bbae62d34f0b1b685598888bb07a0","ssdeep":"","tlshash":"2b411ac98a00f0a4f1d04abbd27845d181339f7696f62cace4d4f00dac0a2bb5a9d797","first_seen":"2024-09-19T19:38:42.356599Z","last_seen":"2026-08-18T12:13:14.500424Z","times_seen":341,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":221,"dns":30,"connect":2,"send":0,"wait":5,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-hero-pattern--3.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-hero-pattern--3.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 279\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02b936066d6b64f254194ca8f0a030c1","sha1":"d190743fa19309aa3b4c6f494a92c77a3ceb9858","sha256":"9c27f65570d5531ecd2f04aa229b14b50a4938ed4cf9b997ab446cc4a97bc018","sha512":"e89d6271e1bd7fc9e82df2f3c2815aa7417a0e4114ccd37d7d4f0f118f8b8303d445875d499776f34074bad1ae59fab24cd4308cfa5944c4afbb8196fd8b43c9","ssdeep":"","tlshash":"0ff046aae188dc58e1218884e28fb51c201b06a6464242f9ab506c5fb9b50aab41ebd8","first_seen":"2024-09-19T20:57:03.355366Z","last_seen":"2026-06-03T10:05:48.76416Z","times_seen":10,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-mobile-platform-gradient.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-mobile-platform-gradient.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 486\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":932,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cccd45744f642d558cfe120abeb66d58","sha1":"221159bd4e15b3920a370405e8d19b5d94729b3a","sha256":"0f6598fa7348f42cda99e65c20f5f9281178324b40c279ca0eb0fe89e321f33a","sha512":"bd437f7aa9c3610e2d3b7412afdfa715946aa92511336479e4def9062300d0fa04dd16f6be4eeb4ecbc813837c02955f076b077bbfa57742faa51279dc24ac8f","ssdeep":"","tlshash":"c21110f5d1a8a929f5988118fbd98446206b80a3c581425a906e6f2b5117ec36c2f7a4","first_seen":"2024-09-19T20:57:03.424256Z","last_seen":"2026-06-03T10:05:48.787913Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-hero-pattern-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-hero-pattern-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 265\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":578,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4559bb6daeeba0f70cbb9515a478895","sha1":"e6b1d84cf352c993bf5bb56ae02f7555c112de9b","sha256":"36ffe6de1e61f2e5d6484d84ec30bef16f023af99a6e63ebc6147a81e0c53c7b","sha512":"0897ed9948d2db6dc92d2843776cbbc500bfa7c61fb4a5af266bc04660a969b522837d3dd83ff5b37c827f205bd1b66aedbe1b256fed40bd2447ed71d25a0385","ssdeep":"","tlshash":"e7f0fcf9773848177368d564aaeae98720820cb11f6100b4e1514dbdb5356a724b73d6","first_seen":"2024-09-19T20:57:03.358486Z","last_seen":"2026-06-03T10:05:48.834121Z","times_seen":10,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dai.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/dai.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2623\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"04ba510a3f5f8302387457d68d21c07d\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AAE877CE\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UP6oOb0t2gOBQKgVH2YTj7yhQSO%2FQrZCPxXKNaYDWIgEQkmigAiQt6Yk4Ja6MebZ5zxxWG8N2eftcwFixgu7xH6mn%2B3lWfAE0828FDFXRew\"}]}\r\ncf-ray: 9845e2fbde0cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"04ba510a3f5f8302387457d68d21c07d","sha1":"cb43924c188b023497d8c155374384c0011cce65","sha256":"f3b83a4598aa6663ab7f8d6a7a8a5c0f0bdf32210fb4d079c8ab307f73f18dc1","sha512":"fa2cfadfe9a8124b35c784e240082d8bb48ebe95cebaf74e3891a72e6dce38606668ca994ddbd161bbd260c7ce40333df533954cf017d6302825f1610e5e0541","ssdeep":"","tlshash":"9a517fbd93baa61058e6917a5522fd90c153ff8439b01985d0f9813ed4ff3457c6a30a","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.811713Z","times_seen":2443,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/testimonial/testimonial-fores.png","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/testimonial/testimonial-fores.png HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1234\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 60, 8-bit/color RGBA, non-interlaced","md5":"242b3eb89a72f45241fd692818d595a6","sha1":"22535fd17a8ff634fd2bf023321562cdebd64ed1","sha256":"ff80408f32cfe328a6168822d7d226b80a0ce1bf2346ff2e5d9a09a9d6661fda","sha512":"f3191c5f9567d537b01eefdd881faa14d4fa449816e72c54f7528694c4120774ac3ea56435b9d1c161dcb48d75d3a8b5147e985f56d9b82a4fa54119f5e59ed9","ssdeep":"","tlshash":"0021eaf633cb25cd0e0bdbf84437554162ed84c283183d4df82315b540ad811dcad18a","first_seen":"2024-09-19T20:57:03.427975Z","last_seen":"2026-06-03T10:05:48.786924Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2043,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/css/merged-bootstrap-styles.css?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/css/merged-bootstrap-styles.css?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 55063\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"578a1-5f89b763ecdc0-gzip\"\r\nlast-modified: Wed, 05 Apr 2023 19:04:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 6\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YFHcD3LKDOp6u5DRddNFqTkv0oiiI4bTPN4QBF6qRcvOhCPy5r9Yx4WHv88uuoSRzLdOfFGZbgrdS9Am7xoYFXjXqkJnz9FC0wJijE42OFG\"}]}\r\ncf-ray: 9845e2fb9dcfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":358561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42541)","md5":"f38db591d76a07a82e01ee5f804db9bf","sha1":"c0dd7be6025f7cb06cff8baea863e914f13739f9","sha256":"7e3fdaa5cb73e63a0aaeeaeee379d8a8d6edd40d99b62200f44c3d5a2d3c6c92","sha512":"42331891065c341814b1ba9145fc6a6d13c59ef842e542f274eddc54d2c2e8c0cf39597fbb5a526451f3ececed91585f49bcc7d35a5340b1519b1cb95d634823","ssdeep":"6144:w1vH3GjInc3SYiRENM6HN26gKkP01awENM6HN26t:4vH3LP3","tlshash":"977474a7f15021aca263c51e66c0bbbd156fe255d6120ffaf4273b684bc52c609a3f1c","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-08-08T08:56:10.926674Z","times_seen":2755,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aerodrome-finance.vip/\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845e337aaa1b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":70,"dns":1,"connect":1,"send":0,"wait":135,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T22:58:26.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 26 Jan 2025 12:48:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8752\r\ndate: Wed, 24 Sep 2025 22:58:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"xCharts","description":"","website":"https://tenxer.github.io/xcharts/","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"D3","description":"D3.js is a JavaScript library for producing dynamic, interactive data visualisations in web browsers.","website":"https://d3js.org","common_platform_enumeration":"cpe:2.3:a:d3.js_project:d3.js:*:*:*:*:*:*:*:*","icon":"D3.png","categories":["JavaScript graphics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}],"data":{"size":68799,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1532)","md5":"2c0592964b11b672593824738f88a607","sha1":"2380522574efc65c5d9fdb7fa5005a5c3a86b776","sha256":"d38659f97524aaee360dd7e648754f6d426889c307182763fe59e878a5e36907","sha512":"6e4546b0bbc3ca05469241e27d7e7a55ae2c19314c5448fab689709dad15784259095fd9c81ab8804183cff33bad2158585562e64cd3a1f9ab92bdd016db80d3","ssdeep":"384:xSbGh6nmdrL6j/2uCiwTc2K8IR+XGRQRIR8XGR6iLngDDUgSERlNLJ7UE13mQxvi:QmZLuCibWfDDxSERlNLJ7UX6ZiX","tlshash":"8863fe7970f210bb454ba0d5ed16ab1a7ec4aa07cc059981fafd4be41fd3da2da33109","first_seen":"2025-09-24T22:59:15.290092Z","last_seen":"2025-09-24T22:59:15.290092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":279,"dns":128,"connect":15,"send":0,"wait":78,"receive":19,"ssl":135},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/js/dataTables.responsive.min.js","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/js/dataTables.responsive.min.js HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2020 10:33:35 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:58:36 GMT\r\netag: \"5da7db3125874a9d3dc880ce5b25edb9\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b32ffddc13b451a576f4c8d44a17a762.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: uLJSgOzOH45e6NEQd3c4d6A_JS6UhaKlyu_kQICzAMEPD9UXVSR2_w==\r\ncache-control: max-age=14400\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9845e3347f2956c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (778), with CRLF line terminators","md5":"5da7db3125874a9d3dc880ce5b25edb9","sha1":"4d500f90e8bd03b4c27222312a5f4ee35972dfff","sha256":"fd175f559076376d088b4ac25ef4b8c71e5da50bdcc7a8df7cdf28a3782502e5","sha512":"25ce788cacc40e32db940f9cc098a3c117d14407d25cf234bb7f1e31fe65a968435ba66941ef5d16d90fa43e5ef519f396ba3bd5f56d5fcf70e11c7ea55c4532","ssdeep":"192:XM0X0VGNcx7vluWRt1aNygdion7N/liLAo/oafhvgduzC2Xxlu:hu7vl1aJdBZdlo/oafhvY","tlshash":"eb42e9a57891727a90b770e4533f2c1ae137ba1bb506c8a872a4c4e41f78d4c16bff19","first_seen":"2023-03-07T16:33:16Z","last_seen":"2026-08-18T12:01:01.440223Z","times_seen":248,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.6.0\r\nx-jsd-version-type: version\r\netag: W/\"3a393-ow5VcB3yNddBHZ9Yv78eUVMKtdU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\nage: 1836\r\nx-served-by: cache-fra-etou8220102-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 54223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238483,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67ce418e4d67b79b2e9d44050119f0d6","sha1":"a30e55701df235d7411d9f58bfbf1e51530ab5d5","sha256":"726fc8775a8aa08138293a5955dd14f9c2cb8b566f1c577f5d39c986bceab3a9","sha512":"827ddbae75068bcb5c45b95a5a33e8ef5f1f09cc8d5e580e17eb5370959970e8c0280d7edf8ed5e180390397c44ae8ff5861db566fa855bff17a52558a178956","ssdeep":"3072:6cBV39NAtLr/rq8orpLppLQ8CsPYx7F59U:6m9NAtvLYQVsQx7FLU","tlshash":"b7343bc63685a0a583da71a8043f990ff176e827404cd484e924f8f59cfce9956abf7c","first_seen":"2025-09-15T18:44:44.033997Z","last_seen":"2026-08-18T19:16:43.119639Z","times_seen":2075,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":35,"dns":1,"connect":13,"send":0,"wait":16,"receive":15,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/usd.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/usd.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 631\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff444a5172526a6533adcfa461bc988c","sha1":"29ae107a09116ce918ab99297790ae1cb9cfee7c","sha256":"c0ea9a25540d358d60bd69bdc37af233bd4444716aadb1804d94c373b1f67384","sha512":"ac9b2df6b5d4e44275ef047464c176f0dfea1fbbf1100962d1882e6aee52327b443ed4b19989ae8592f3645c5910672e97ff4fc751663f5dba0800e5fc721f75","ssdeep":"","tlshash":"652102f7bbe873d44b03c31be69f3168317e34b927154c49a144aa9d68515ba1a4c8c4","first_seen":"2024-09-19T20:57:03.399199Z","last_seen":"2026-08-09T22:52:28.421919Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bchsv.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/bchsv.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 7774\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"543f8d55202d1d0e054b04b12676da17\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B17D92A3\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DH7cjAyht35toNfEANOmvpxe5v8OBFWvRwJ8N8HlvLPt%2F40gEJZINx87deADKxEdwtyXlOff3yqb0BWQoNPjRRC76z9eIiaplOA372nYOJ7\"}]}\r\ncf-ray: 9845e2fc7eafb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7774,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"543f8d55202d1d0e054b04b12676da17","sha1":"311a262ed26cceff0fec5e30321262a2d3204c04","sha256":"fd819d2abb51b4cd7ba3e418c9ee51a722ef67c3bb7b6cc894ea185953f427be","sha512":"3f08b1efc9b96e8afb278b95b4376db8f6ef114636aad2ac69f912773986d10b6391d26f3a49c3ea6df5c4fffe394ddcbed8124b03a80693e12a158bc70edd67","ssdeep":"192:gNzngtHMPiEjGbXLnIXBuh4aHB5GI0dHe19cW5:izng98iEjG/4aHqdHe19cq","tlshash":"3bf1af8b7fad7bae352a7950e3a34d79504650e41e676acf058d0e3f482ef309d41ac2","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.796085Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/small/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/44/small/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1492\r\nx-amz-id-2: GOs6ks7fnCmZcgHQx1NTzW5CKAiImwwgObhvZVVvd7YQ5cxEAjBFOCBjcXfgnWs+KgHcKOcSAbvz/G8IPl3L/A==\r\nx-amz-request-id: 477BGVJYN76GNWE8\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"1ed36d280916ecfaa451eafeb7dc83e0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8UgagQYkV2t3o2PUNNubby2kMqMsKaaX\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nfyOFKTyAl7hHNHj3MN7gcsEpGwhRUmXlJ%2BHajZOfSm2OqOZofXrg%2Bw4lKb3RC%2BEsojgNbmagZNO28OPK5QP9d1%2BOH6%2Bfd92qdE3MhxM0d%2BFag6Ikx0Vuk%3D\"}]}\r\ncf-ray: 9845e33708182efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1ed36d280916ecfaa451eafeb7dc83e0","sha1":"53e2ce224225fa28cecddea0f93a3fa1ce7779d0","sha256":"61a24e4420a9f37d5a0cba8d992198c555986ea046dd81f34d237d37c9353e08","sha512":"29596c765e3f5f5341caad39059df3b7df1d6e2eee73da2a5252505ceeb9673bc89e37079faa3ea895c1e8a8a8764ecaa5ddd46f8832a157c4723c099bd149de","ssdeep":"","tlshash":"2131c7fea3510691d7273a8c023b8511ee372ea341127c49f61bc42a306ffcc3a63545","first_seen":"2024-09-19T19:38:42.339425Z","last_seen":"2026-08-18T12:13:14.469451Z","times_seen":444,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":411,"dns":31,"connect":1,"send":0,"wait":514,"receive":0,"ssl":363},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bch.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/bch.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 3041\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0a99c164ed7553823d963510d9c4c2b2\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AD9E706E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYk3O%2FDl8Zug1dsxrCLhKHfqe5XtZ8LMk%2Bb5QBx%2BXWmB2znqZjEZGBnaRSyUzGqsVDdlOJ4KqqGTpo3YnIGsKYM70TD%2BrcCGR5bVLw1gyP8%2B\"}]}\r\ncf-ray: 9845e2fc0e38b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"0a99c164ed7553823d963510d9c4c2b2","sha1":"e1eea4be191f04941882fa801334f038c2331ed7","sha256":"f262f257ac05d84bf675c9e46b402f805b423923248e8b29afb15f238104c388","sha512":"660680142ee0b0263eb24782ee6c408cd91e31fb0c97b52bc4091f8490dae3102fa4616b5503c8babcaca279201393b23619ee426ac524c6bea188e0397446b7","ssdeep":"","tlshash":"d6515c414fe0c73da451cf67d52e0055fdee120b49c4af9aa5a5c807217b0bc9ec0a33","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.643824Z","times_seen":2382,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/testimonial/testimonial-newweks.png","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/testimonial/testimonial-newweks.png HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2934\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 189 x 56, 8-bit/color RGBA, non-interlaced","md5":"bb70dd9560ea035507c06e50cd44c285","sha1":"42f33ac49eb57dd9759a3d6082345056dd232da1","sha256":"5203a14f551d69707ce217acfb5056151a133f6f842b1df930c3639a50a70065","sha512":"b87d01207deeffc464a722594e4e6b146bb6e6c40287cb81088ea47ecae81f048145d975648c3e94d1c1b3a86bce629fe1da27fde0ce3c4b133f1c062d08adeb","ssdeep":"","tlshash":"e4512bab9574cb25f15a09b3a497966064bd160f0736310c7051fc624988c9e6f3f8e7","first_seen":"2024-09-19T20:57:03.419281Z","last_seen":"2026-06-03T10:05:48.728554Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2038,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xem.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/xem.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1896\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f50314d62ddab04623e41b8c05fabb41\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B20FD462\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOQsQM9Vjvk0s83w0Wx1%2BIiNcUv9n88govU8QcdW7r6KEBA5ZvVofHcAbNVOLXuylooZaCTTd2aDFHD2KLhUF%2BVFhs617qqr%2BfG9WqZxYToH\"}]}\r\ncf-ray: 9845e2fc8ecdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f50314d62ddab04623e41b8c05fabb41","sha1":"aaee0c0c2e947e863da578849f8e62ea1c04b0c2","sha256":"2a4fc5b1951a0841abf245af2a759e5393a252e8f7f943975fee9b67785279a0","sha512":"6bbc02ed18adb43e8cf00a4ba8f83de8ff618331c363375b54e022e28c5a14f354a27fd4bfc2b622913a6d4da5d8f9b7599047d8dc25c94dcab00f4082fb084c","ssdeep":"","tlshash":"9b413bc92e0cb8d76ee8fb712125f5217ab2df2fa5955d9c010bf4bab0455820505d05","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.818039Z","times_seen":2394,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:35.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css?family=Roboto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://static.cryptohopper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:58:35 GMT\r\ndate: Wed, 24 Sep 2025 22:58:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7f568d4a7f96c6c3aeeec413a721afa0","sha1":"bbd830cc641779bfea6a82ca5474762c2f9909a0","sha256":"623e85537b5dcb38396517e60c7286be6ce8ff7454e87b30af4f754a92fd2d05","sha512":"b0ce21c1052f668f985f42ce70f66f26fd0239a45ae448cc200f41bbb1f449ea6d399c7bd630458e685d4bcb635f7a5a6643780e276f9a5cbe0930e9465df234","ssdeep":"96:1OEMNllOEMNsFZKOEMNWOEMNVTOEMNVy+aZjzBrgOEMNIubqGIFuV4yOEMN+ROEG:cNlsNuNHNVWNVq5NfbqGIwV4DN/NzyNY","tlshash":"d1b1fd910417444097835ce227ce7e34fe1f92006184d0b9ebfd9b6beddbda652a836e","first_seen":"2025-09-09T08:19:16.336505Z","last_seen":"2025-11-18T22:34:28.266584Z","times_seen":5086,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":92,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/css/styles.bundle.css","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /css/styles.bundle.css HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 52554\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":616903,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"95c863f8fb35d72c127fa7433ab915cb","sha1":"c6b308119b81a18695df85f4741aa6be1341f1f3","sha256":"71189803962088f9acd90bae972a9e3d35031a42addb889489e03d014fde2752","sha512":"c7278976ed25e1d7a3c87b1ef5cdaf1d9e94506c21ad867a5326e0f1a4b90e3c4a9e3a2e334a80398e302da9dc8fc715bab7378966ad43f2f6c59b4da5f20605","ssdeep":"1536:w5Gq95fw50q95faOggzy9zUoLd/7GKgH6MAK5C1/H5SD58lK1XZg4NDyZJhNXN52:w5545z+gzyqoLdUZSKuKtIjNbPZ0RQGP","tlshash":"04d46364eaf1243c756a559e644a7bf9772c9042c70fcdb679d32228cf863c258e1acc","first_seen":"2025-09-24T22:59:15.301189Z","last_seen":"2025-09-24T22:59:15.301189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/usdt.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/usdt.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2283\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8da80033d430490612241acfd1f0740d\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AA5A3344\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRKEaIrcmobjVkxv5xb0r5Acf%2B6xlCQ5fnDM%2BsAd0l3Wj%2FOTzLjxS803jJrdeymM4Ij3UorBD4HcKP7F3wDM4fTgX0Dm%2BnMT4uP2vwTi6GIp\"}]}\r\ncf-ray: 9845e2fbbde1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"8da80033d430490612241acfd1f0740d","sha1":"86c8137ab870009c3ec9712c390f7c46a788cd8e","sha256":"3ffbe57e3a6decca54563dd344228e8150e2d31e52fbddf220b5799a87b88aa6","sha512":"d0edbdfb8eaaabbc70cad3dff307933ffd37f38f0940fe8e80a9c14e4e05565ab10f3568b7773a9f977ea44ef23cb5db3fe20c427a914785896fad273ae650eb","ssdeep":"","tlshash":"dd41f9f466cdf50bc80490dc55e7b8949bfc1b0e2c01e1848e5fb409683a0a8d3cf674","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.642187Z","times_seen":2599,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/algo.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/algo.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 5104\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d737571240e08413e9ef6d92ffdd9916\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AE97EF69\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmkEWHpDqmgn%2BpT1HBU%2BFh98KECqN1hIpVtinFv0hUIpWNtuV8Xgs94fp7iC8WClYzPB0RqUaeDoZURgjiEAAnL8nV1LbGIZYPGptE4YfVgv\"}]}\r\ncf-ray: 9845e2fc2e50b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":5104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"d737571240e08413e9ef6d92ffdd9916","sha1":"9ae866fcd05f06cde67b0bf28b7d4763b704e88a","sha256":"2aa85f4f80ee00632181f6fca04749b8b6cd10a00f65eb3a40e28148a2255b15","sha512":"9a78e167526468c8126ebb12dfd640edb94b2e637e834c5b19c8b88c4aea40d889d80e1de2d2a0b90466934522d52e7caa148767c83ab791119d77af5971976d","ssdeep":"96:TB6sIhfxaYmLDxGeacKEHD5W+f5U5CYWv1fUYDLXp:TAs6fxaYmLpaHEjy5anDjp","tlshash":"41b18ea5fbdcc7f4dd702a68b2e210814c61702e8f52c3ae8e4044e960459283fbcab9","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.688415Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/apexcharts/apexcharts.min.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /plugins/apexcharts/apexcharts.min.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 237452\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1035403,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5d3aca530593a58ed333684bab968d63","sha1":"18c24919ccbb22cb6be77c7b21af97f9ea36ad11","sha256":"9f0ba110d1072d9a1f00efd9cd1e73b6950dfb9cd9efae028f6574cea181e9a2","sha512":"fb44d44956e896a1db23e49cefd17a57ab71bd816427b389a49369588e75471dfda6893d2c1a23bfd3fc4bbb4dbf57677bf84b505d9200b7bdadbd6d9760adb7","ssdeep":"12288:O072UQJ7A4GurokC4EmN/jdNQhpCABMnciiO+IHFnl5pgIZIHjgvQ6ofcif//AVG:O6urXEGjopCABMnkT9","tlshash":"5b259340a3c06c49139b5f7e772fb0d7e95a08af6c48495bf214fc70a4a921bfae9531","first_seen":"2025-09-24T22:59:15.305355Z","last_seen":"2025-09-24T22:59:15.305355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3025,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Graphik-Regular.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Graphik-Regular.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/link.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/link.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 3448\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f91b3362730af1f73eca346a14fe3714\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AAF788C3\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzeb%2BwBo28rQ3bYksq1CedVgCEbP28xwdi8Qrm7%2FsQzZ6bvSMRdtJ87dkpjXiDLtRkWZjWE9d7QYWb4kjs%2BV7IeGxvpUdpJtUAnRYQEoq8kh\"}]}\r\ncf-ray: 9845e2fbde11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f91b3362730af1f73eca346a14fe3714","sha1":"35120110067c8c51e175c582d8ba7e559d4f1c40","sha256":"2adedf844eba443d690b7e350af68800e3ab99eb80bea82b00a1fde204670357","sha512":"c805d130032d3215aa96c326d877aa3928ef4b610aa95df4574bb2c0fb77ff16f3a726b04c0631f3161ff3cb6839500e56bfeaabbd7f06d8f518ea8926cc4de7","ssdeep":"","tlshash":"f8616db77034513ce0306731b9af34365f939a702ddac6164976b45c14a6387c0ab94f","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.615453Z","times_seen":2440,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/community-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/community-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 869\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e45e335c16ffb12dd2dd10e33dc561d","sha1":"f9b3fc1b8b714132196598712c3da775de6d0424","sha256":"58fdbcb8a5a31764a2ba9a54d79f78bd3465060756b72508494df28214bca4f1","sha512":"519898ff771c6acffbcb01ca130f0bad9a507f33cbf1666fb93454818b170cca00169b19a7ad2d1ea8ba0609893ce33e9c4042e5e0ce8c9a5617bda5c9ded9d7","ssdeep":"","tlshash":"21510c8133688ebcb86652b8d79975b4523902b322008518cf3e2e319067c6fd47bae9","first_seen":"2024-09-19T20:57:03.417273Z","last_seen":"2026-06-03T10:05:48.799272Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/atom2.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/atom2.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 4739\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"33662df79008a19c386b166304b791f5\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AE758A46\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7Jtkow%2F5KqJ55oMTRwGxsVvMqlC5jcIN2akKDMBhfpTWQaRAGEcboJqv%2BAP7y245prgeEB43Sj253HydbGkY1BYJGMmlCgSWWIcEUC9uQOT\"}]}\r\ncf-ray: 9845e2fc1e4eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":4739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"33662df79008a19c386b166304b791f5","sha1":"88ae1d0db783522cbd76a781702c0673564bd60b","sha256":"1aba6311f701d7c49b88bb49ea53459f2ab3a6868c29c5e95353e14016ad43a5","sha512":"ce3ab81afc302c13e9c2238d831c486a94fe8de265b81a190a5d8c03a44a2f19f63253c48f41c698691644e265a7f57f259843f833fbe3330b5400f544d1ef35","ssdeep":"96:hk8ISdnQRxt0rRAIIgejoUNAKWxr/yqhfNaRYu57Hk2VE/:NzQHIVejoTx/yqFUYuiJ","tlshash":"2ea18ebf05ed01726eb8055cc6bc0851c48a01261eea8617bc06e1c5a2fd91fa2fcfd7","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.711141Z","times_seen":2380,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:33.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 723\r\ndate: Wed, 24 Sep 2025 22:58:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5a55e0dd1668959aa4239fb1b2d0db6","sha1":"f34d808eeab29592ea427e3226baafb87d9bdbfa","sha256":"2fa104c61b5e8a5920938798b52b526b2237bd95fafc91183dc72695a3df7b0b","sha512":"b655a0d5983066c6b58017cc67832a4e6daff88eda783c4259074ac71ab114862332983006d1d6e0f090fc4f307291d3191795fa365c4080a3d32faa3c413070","ssdeep":"","tlshash":"712178dbe3dcdce5e50bc3e85e04d812302565f74d92c24083d1ae86e9100ad191fdc2","first_seen":"2025-09-24T22:59:15.310164Z","last_seen":"2026-03-31T14:54:29.078693Z","times_seen":6,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/buy-sell-illustration.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/buy-sell-illustration.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6232\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74b2659d6b1a6187a1d73086bdc57d69","sha1":"fd68537251d2e2c604f74c1ab8d470f0089c1d39","sha256":"71e76723cbc1a0eb9973c21d827b9b062a61be3c4fd4ec553e72e5323b29c6d2","sha512":"f75a6ce8a0823018bfe3509279e71b56063487df95fc4f758aebd0492c99ea14b6fc912d024db59bcdc4ca2359e7e3efe1efc065b9c5d4b47c09bd269e4bd027","ssdeep":"384:Y4WupcvLd53paKiHd0SDWDWMz2V1KFvQ+zm:bcvDi90MWDWMwKFvs","tlshash":"df6283fd2bf595daddc9c3d7bf114069281b81b38bc48a20c35c6f19389ac999817bc2","first_seen":"2024-09-19T20:57:03.410442Z","last_seen":"2026-06-03T10:05:48.73768Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2071,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-hero-pattern-1.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-hero-pattern-1.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 279\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43feabdf43285a51de1ca6cb8972be23","sha1":"87e32137ae3d178ed8f7c57e0f6c3e1e03e91a34","sha256":"6fd326fa7cfed03af6bab67c4bc9a43460ef775844305b873cd823a0f48ff3a5","sha512":"10334f88cecf981ae53deae1074f006c48e9e8837b0f8dfc784482d9e5d31f081dec83e04fe849bd45952534c304d91e5255d4551b543106465086d809a2ab10","ssdeep":"","tlshash":"c2f04c767039fa28c520c506d69fb07a101b208546655ae6a7611b0aed115e67827389","first_seen":"2024-09-19T20:57:03.357412Z","last_seen":"2026-06-03T10:05:48.813175Z","times_seen":10,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/phone.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/phone.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 770\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ff37b8ea7ea9799385b7000817d932d","sha1":"6a88d5042f31ae295fbf543a2e9bab61ecac8f3a","sha256":"e02b62f918561a3c53926ed085b3f1f0189d4e271331194bb8b15a7108578106","sha512":"ace6a1572fc933d218db3082a50b13dfc1c71beaa1ff162fb789f3a66e1852b2922b4e44cff55f6d5dc0e372ab35b23417700123cac86ecbf0ccfe62260b25cc","ssdeep":"","tlshash":"564103e0259c999c58581350e9997819832f78fe73018e54ed9d252390cacfec763ee9","first_seen":"2024-04-14T05:44:30Z","last_seen":"2026-08-09T22:52:28.385567Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/zil.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/zil.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4ca6449ecc17fae3d40de6f0548a344f\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B12C54E6\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUSsDazcM%2BhrmVFiUIyWyUfdcPZqQZw3sBKR%2BSwG0bh6jh6X5kRmucY15ZGHwJlCvWhKdZ0rUn5j8l70WqnHqG2K3XfqL1CIHeH0l5BcA1Nn\"}]}\r\ncf-ray: 9845e2fc7ec9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"4ca6449ecc17fae3d40de6f0548a344f","sha1":"ebe7009274ed22c41dede26c1f788500df4b4ed7","sha256":"e6116216199944975ef0d971401ed6fb5f29919ea196da1e2e8fc8e4ceae98db","sha512":"3f657c4b48d4f20d20e05054c887c9dbc42e87a2632f3bef75cf894b0de128e3e8b06455453a58473e5fe4748affe0be7a46d01b4e2e699971ad28c7e5347b0e","ssdeep":"","tlshash":"b2413bffca8124ec2f9d4436ddd7d022486afa053241ec852ee3a43367212392f2325c","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.635316Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/cdn-cgi/rum?","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1104\r\nOrigin: https://widget.coinlib.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://widget.coinlib.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWUJQPuJcQJLxq1Z%2BD7vjXhJ8yYFgG%2Bzi6vd1gxiDIxMxAGsNwIr1LCo5jkpTjmnhEE1d%2BzLh4vwjY8cgps0QzO9WPoeaekk3GICobPajA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9845e3013e630b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/slick/slick.css","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /plugins/slick/slick.css HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 451\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1763,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c72937fd7804f8be9d64b4db724d21c6","sha1":"a83cb9403f3a21d627c3509e2379e1d14a5bcd78","sha256":"76fadfb0c0ecd4fb7633acb79d54e5528863fe1c3ddc3617dcae4026b087cd42","sha512":"a084521f8691e9001c090519753209463bb957fd7d358733da30fe8780017926ca1ea57141479749dd2296ebc5b57d066b3bab3145ec68334513c86299b8e881","ssdeep":"","tlshash":"1a31161806538587863786a56fd3965afcebf0630d211194bbc047068fbe6f86dc1ebb","first_seen":"2024-09-19T20:57:03.345845Z","last_seen":"2025-11-02T11:08:41.156044Z","times_seen":6,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/js/custom/custom-select.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /js/custom/custom-select.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1504\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5871), with no line terminators","md5":"b73ad8a8b82e474269cbbbd57fac21d8","sha1":"af3f9216115d7c48ffcf01536f0927f0935766ef","sha256":"2ce30044d2b5fa3e3d0924a60ddf5c5f748b84137f9ea667c76a694d8637557c","sha512":"5c484ae0e052c7952f405438a00e182b2306b6dcaa179c83bf254cbdb968debd4631d47d68a7123f068afa70137b80967caab2883094abba79b05688a67e1d1b","ssdeep":"96:Avn+eebJsaX3hycUHwMF86Vd2bq+0H2o6CUo5lLB8Vo4D7aHVjZ0X1C:Avn+1Iwy3+0H2olB81aR6X1C","tlshash":"bbc1dd347f90211b038a1a5bbe6e34d2d02f294e60c1844db4157d59f6dabbbd2fa731","first_seen":"2025-09-24T22:59:15.315095Z","last_seen":"2025-09-24T22:59:15.315095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3023,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/cryptolly-illustration-2.png","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/cryptolly-illustration-2.png HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 570557\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":570557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1302 x 880, 8-bit/color RGBA, non-interlaced","md5":"25ec4ec44828c13d4bdc1e0a889fc6dd","sha1":"9bbb52b5ecc430e2491c7470f9a64737750b71de","sha256":"2fdb3c6419cded510318c703871579269e93892d59f38c3f04ee084e75ac0a92","sha512":"213f0d315e09be6100cd8286086ac7de47b01130060f347e8afd4f7a37d370fbf94ea8a2b31559bfc73163918f4b2ea3d617a647fc5e3e3d1db0ec3b28e033ff","ssdeep":"12288:0mRXh/wuSmpHKpap9iL7Eb6FtfEBkYvAaDwKdex9RJ1StnqiINymw:JhwuSmpEabiLWotfEBLvEBx9RJQqnNrw","tlshash":"91c423a6620a98098140ebf4f4754d99101585ad94434fa24c7fe1787bbafcbfcf72d8","first_seen":"2024-04-14T05:44:29Z","last_seen":"2026-06-03T10:05:48.80176Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3036,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dgd.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/dgd.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 4258\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"98c7391cdfdd6a7452c2a2e0f72721f5\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B1BEA567\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3YtJdIhRNw%2FAbHD5MsQI8oimj10d%2FGDxkSBjejwpApzB4q5nVrdztItvH5sWtNMp5%2Bwn0qSRdTf%2Bp76dT%2FECTqShG6lICQn1MNA8d9Uec5Q\"}]}\r\ncf-ray: 9845e2fc7ebbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"98c7391cdfdd6a7452c2a2e0f72721f5","sha1":"e02a93124268bcda1d313f0139eab81cd3eeba51","sha256":"8eda03fc45bea423215a7b5edac58910282430add783b64859760df5b970fbbc","sha512":"88011bd47d24314fdc958f27570072266d11d8e0acf1ad91ac05921a91169db756a9ee41ed66fc119ed5ada510c647484052da9833147d90574c19fcd50336ff","ssdeep":"96:hwbuRrMbpOhv1mZz2AiiRzYSiLit6AvclkCpIsXCHyVCp:OyRrLhNm7iYwu6AvYH4Dp","tlshash":"ca915d4d592abfbfcbf6238f44264d97a1e07c59468c901d4ec0a1e9b526035a385622","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.747287Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aerodrome-finance.vip/\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vscur1TGj6wrhb043RVUKcKYpVRwTjTYUFuxaPmEGMDc5%2BamWMn1Mw4%2FFTDWwDmpcnr0Qn%2Fz3ZM7LK9CxZODL0SurQ23D84MV0OcywlUqayXgwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9845e33819723181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":129,"dns":2,"connect":4,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/aos-master/src/aos.css","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /plugins/aos-master/src/aos.css HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1585\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"828cb3529e39bb854420ee86122f5464","sha1":"8b692a1e891d0e88543cf6e2f20a363103a22df4","sha256":"ddea6ee04e98f500dfec3ae8a98c5ecfeb1c257d050d2ec2675a3dc27a597efe","sha512":"bd582c10bd5a7d993be820f489e71dfea3e084866b1dc35e7431d31d9c1ea3a173220dc57c27e4d09bdce14079fcda6474684c772e4bd4c5a283887da9d61164","ssdeep":"768:B5XhlD6vRxqtVX6X5ZahlLa3JvpSVVX6vRZShlTRhjdilbt85FhCdn5opV9i17tw:B5XhlD6vRxqtVX6X5ZahlLa3JhSVVX64","tlshash":"25d22855740d9000ff131b2b12af1a4ca83476aae9310c54fe2e25d61ed1de5bab3fb9","first_seen":"2023-08-09T20:02:43Z","last_seen":"2026-07-22T05:55:11.810574Z","times_seen":53,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/aos-master/src/aos.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /plugins/aos-master/src/aos.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8388\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28305,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28305), with no line terminators","md5":"bcf616bfad1e9d268c285c1555781990","sha1":"a3deb7b27b33bda88b6434985fb19a74cbf9dcaf","sha256":"cc17d643f10709a95f4fe7fa8b6e1f432145fea4d64c5322d6ba042529e2c333","sha512":"44ae032d33cba1cebb4c0f581884ec7376844dfa1b846cabbb9a5f8b15ffbff2fc863456e97eea4cc2541342d79d32005857b00a4f2b4e6ecce005af85dab465","ssdeep":"768:E9NsjN2rYcCFkPLeO1zVF539WdUcO1+GCLufxQc54fTdIKM813tstUCV7YcGIu8P:qfxZcOh2sdP","tlshash":"02d2c8557bd0a895039b9fbbb32fb0e9f4ae0c6e7c848447d601fca13da1415e9e2931","first_seen":"2025-09-24T22:59:15.321551Z","last_seen":"2025-09-24T22:59:15.321551Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3023,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/SofiaPro-Bold.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/SofiaPro-Bold.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/cryptolly-illustration-2--mobile.png","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/cryptolly-illustration-2--mobile.png HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 133890\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":133890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 654 x 371, 8-bit/color RGBA, non-interlaced","md5":"6fe6d63134427099648a667ed611c905","sha1":"a9d1ffb11595ac99ce15d49ce58ea09a6ddd45b7","sha256":"f22e15280b7002e87648b76f53c2b10cd47258472703385d1d2f1d4bd51d6560","sha512":"bc4d35d6790c3af0e1c931f9d3d7c3c27f5c7a46e1ba75fc25a9b4cd954c5c32235da88bd3f1e1cb2b68bdcc66e9c220a12e802811cfe8cbf42f4e5fb5213379","ssdeep":"3072:jK4vYaD6J+f4msaHV9jEQyHOSmcEMUPQSpa5I1N+H4uCOvpX2:uIYakmV9jEQ61mcEdQYzN+H4Im","tlshash":"58d312c311df2a7d7354eb2bcc5f585af3a5ea0122872e58c0115ad380373722abe676","first_seen":"2024-09-19T20:57:03.445389Z","last_seen":"2026-06-03T10:05:48.738667Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3034,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-feature-gradient.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-feature-gradient.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 511\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":972,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc4c0b4e185976125076260379b58bdd","sha1":"2c9f2cd1fb7fb7086bd993e1e4de1575672782c5","sha256":"d62d21c4b9bfaf7e3f5764aa276edc4c74c96b01e15d7ae04d8037bd8ec631b6","sha512":"c9ec0c356c7fc538c3c6b1ca80b31a4060ace8cad03e493c26c8e0e78badfec93ee11f5f7997e6affd13b68f6b54ffa49285937e95de8ee7d39f0f5fd04b168b","ssdeep":"","tlshash":"2311546c91b93128e46cc1acfbd64c04207d81dac28186eee05e7b2f1215cc1bc6f3e4","first_seen":"2024-09-19T20:57:03.366761Z","last_seen":"2026-06-03T10:05:48.776945Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Inter-Regular.woff","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Inter-Regular.woff HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/qnt.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/qnt.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 5541\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0311b7fcbbdc5e67a095ebdf7ac10e38\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B0BD8EBD\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=341s8hx75NYWjRgLBMoT2o81d5BtJkY%2Fa0wtxxCVFVEFQ1zc8rxJ%2Fu3fSl064jgjTo9svqOXMlZdRyQjwOYTVYJixW7Xn%2BBzbF9%2BjdsS2k6Q\"}]}\r\ncf-ray: 9845e2fc7eb0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"0311b7fcbbdc5e67a095ebdf7ac10e38","sha1":"2ed5c80ac8aa7e0e727fc2892fbe79c44ff1ed7d","sha256":"e6243696613758c8bad8f2ad777203d8340ef37f77007e65669dc36cfc451bff","sha512":"b8bca7523fcd244b029e95806a751ecb70e056f2ec29c01f0d099ffe94cbd0fe3f69a1f6039f3d84e58a6f57944b6a6e65319b6f30baeb4fcf2d074d6152c73b","ssdeep":"96:hMuzvLA6GyiX+3dVx4QmgVaZKiGxP68AefYmS/z/LsJOgTqS5L4myDA1M0JRc:uusyddAjgVYGcefm/XsJ7gmykM0Jm","tlshash":"22b18d82afce4f65d4ec88c90de62d523e03d36474e2ac71547ff229982be990030a5d","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.59978Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:38.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:91:90:0D:EE:3C:8C:8F:95:A6:0A:58:6A:D8:9E:F9:06:B3:FD:A5","sha256":"CD:EE:48:FB:10:6F:A2:00:C1:73:D1:C9:53:62:65:8E:93:C6:CF:DC:73:96:A6:33:D8:E9:26:3D:88:32:2B:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aerodrome-finance.vip/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 75d6d3df3905ac0102d25ed4dc17bdfe\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-18T19:16:43.131127Z","times_seen":5262,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-hero-pattern--1.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-hero-pattern--1.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 262\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f23ec9054f8c4a801d9fee317500fdfe","sha1":"bf0cb9945978628512fe5bcbb2201a4a88b2ccc2","sha256":"c24cacb750f24d3e881b4cf2c814d1bb0a432fd7dad7c45fdea55d129c20eef3","sha512":"a61fb553340367d0a7334bf46dbe41c1d22c2db3a8afdd5afcb091444e4ff8f861dcf818ff7771517e612c7aa1e2b20ac08d94e0a4f36679dd208b66f45f3aa8","ssdeep":"","tlshash":"34f0c0fd315edd1cc600c884d2af66bd1087119a246947b6d8902f9931183773c3a370","first_seen":"2024-09-19T20:57:03.353253Z","last_seen":"2026-06-03T10:05:48.713721Z","times_seen":10,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-109558606-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=UA-109558606-2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nexpires: Wed, 24 Sep 2025 22:58:28 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 24 Sep 2025 22:10:44 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108533\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":310801,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"77ada46db957c9ba6c7f0a10c731511e","sha1":"695c57f89e1a2c43fb014eb0fc54214dd51c6e7a","sha256":"31d2d7d297dab023573318348a08efb0ec0c4369a5a2c6c07a9d17a01a722ff5","sha512":"78204ad153a41cc7b5683eabd006d7e2cd0c68b2dbe5de46bca1bb5a6dfa84389e5154d77e446f72e0b094db893e7be4aba98bb0d169607d59c4377b88ccef64","ssdeep":"3072:A/loYu/D62GmMgZOp90RP18eqkLPW8RthKUfgHiOXT/G1SvuV8fT3K3MKvPWpNQ+:epmMgZOppeqkD1gJG1SvuVcTujvPWpNT","tlshash":"7064f8cdb3d6742683936478503f018bb17b69d2e84cc898f186d9d42e74aaa4237f7d","first_seen":"2025-09-24T22:59:15.327424Z","last_seen":"2025-09-24T22:59:15.327424Z","times_seen":1,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":177,"dns":0,"connect":9,"send":0,"wait":107,"receive":13,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/logo-bnb.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/logo-bnb.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 468\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77b57905e246f93a9dd5038c5c1b551d","sha1":"e61d82228bc7dd53bbb1a13603fe5258bba65221","sha256":"10c31ad05c26886f588779d886987304a00ac184de740ff61c8906eee18e7678","sha512":"9a0586ec5f1e8c9d4d5a698d0e92edc9500cdf7a459e5f7b6456b42720a4299f084b7abc266ab39b19a39e5fab272baa5eaa645d3d80d06e4d8c520b8c2f62c9","ssdeep":"","tlshash":"b511cbd563cea0d48b042b30272ff02db0723aeb7f49e84192c821576c092afbc1e591","first_seen":"2024-09-19T20:57:03.408244Z","last_seen":"2026-08-09T22:52:28.423989Z","times_seen":36,"resource_available":false,"data":null}},"time_used":2070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2070,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/SofiaPro-Regular.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/SofiaPro-Regular.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/Graphik-Regular.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/Graphik-Regular.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-feature-gradient.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-feature-gradient.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 474\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":929,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9e5ac602cdb55459cd241aa3f339607","sha1":"050e616d388194aaf6f7c50a47dec18ba12ce4b4","sha256":"00536e61ed10d7b444f44f1872ad96d474af09445cd375835021ecf05b2fc292","sha512":"b4161742505415ff8e6917bb21f40587e030bd559bd67f6e9d8ef9103670a76d4abe4c8e9874c1ebe01a72fe06fcb0a668a5d583d4345407887bd3c01fda8e8f","ssdeep":"","tlshash":"a41144b5d1a8b518f5488218ffd98887205a80c78665829e905dbf374117ec57c2fbb4","first_seen":"2024-09-19T20:57:03.364602Z","last_seen":"2026-06-03T10:05:48.832548Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/13442/small/steth_logo.png?1696513206","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/13442/small/steth_logo.png?1696513206 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2399\r\nx-amz-id-2: w2AH/AqNs8EtvKkkhRk+oCJAw4DW+s9sO3C6/LhwEdcp+ZCDztSOzc2O3r2chfL/15OxFQ5tt3o=\r\nx-amz-request-id: 0NENV54488HX6DWG\r\nlast-modified: Wed, 29 May 2024 02:32:21 GMT\r\netag: \"540e7728a0b6d54d05412b981cde9f1c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: byzlxdDpHbYnwu1.Q_jVGBJ0UiWtSPmF\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwi9w5G29oRmy9k6MOQpYaYapLKtNkuB95CAe0EK57VWZ0%2Ffz%2BPYIRzsKFqtdrhgc6fs1k%2FNf6leF2ITWmwprZfRHkoxw%2BDfKAUV6jfbIMCqdZLjeuU9FF8%3D\"}]}\r\ncf-ray: 9845e335aec32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"540e7728a0b6d54d05412b981cde9f1c","sha1":"62e657b7591d9a409a8273089f50de9f27c52003","sha256":"cbfe677ee78f8e9fb1297e76599b517009cbb41faf640e4d194a263c5a1256f0","sha512":"fea5eacc3ba95683555c0864fdf042c6a43793c7b34ceeab028f136ef4fbe99270d2be7bcfcd1d4577f0b6ed34daba8d58ab887b4d57d2cba98ff160bad14334","ssdeep":"","tlshash":"5b415dc0e40092b98d570dcc4285295a1eb5f8fb03e6cfc1a4143e4e0a995a034c2f7c","first_seen":"2024-09-19T19:38:42.343643Z","last_seen":"2026-08-18T12:13:14.443457Z","times_seen":427,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/enj.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/enj.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 4164\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e103e220da9145816e6f8dce7bf37bb8\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B1109A0C\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=absrtLlDFpXZIFfWSCnqnOUqFmxPWBBVNW2FG406kupJUALTsdWUuey3mLRGB%2B889CRH%2FOuYCYCRgSI0KxGRBFwaBNyZFBLeYbyIAAvzE60n\"}]}\r\ncf-ray: 9845e2fc7ec0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":4164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"e103e220da9145816e6f8dce7bf37bb8","sha1":"dc479087af2a5d55e64b57cbe6177cc9c00b3dee","sha256":"88ea8af58cd5066f7cafc00fb64a84596b6afd42734d41d60fc978cb183d1d6d","sha512":"cefa62ed0cd560dbe277c858461d76002d71ac244e7a1bb63baeb13e3e5aeadd88c0d9941134a6ea168c35cd2d61662a048087c644cbff89f5857fe7da272485","ssdeep":"96:hZesI2vUGDQ5AT2fAHC1UIWMVOV996mNgxYo0wsULWMSr:usjUz5ATVi1UIWM8VL6mNgxYo53mr","tlshash":"e7816d1ed0570e31dade8f1b9556cf11bd8b4c8b1c39e916df50e42a636484b1be8934","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.761176Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K638SKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtm.js?id=GTM-K638SKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nexpires: Wed, 24 Sep 2025 22:58:28 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 24 Sep 2025 22:10:44 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 97666\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278123,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2843)","md5":"616862dc951f2865802dcc2725a46bfa","sha1":"ced6df18fab9c78c42e1d087b62b1ef4681b2478","sha256":"489affc53e3bf054e61c2332c041ca897c59630210879929495309abc8327df7","sha512":"da019859692a99e6de3912e5e76bc1bf653f26b13a1ef0246d3dee47e5985319f3a19bb97f75d33d08d3a8779bbbd40a16574b5a9fdd0933932630f05f51723b","ssdeep":"3072:/WXQu/D62GmMgZgpl0RP18eqkLPW8RthKUfgHiUXB/G1SvuV8f2twm:hpmMgZgpBeqkD1ghG1SvuVcXm","tlshash":"174408cdb7d6b42243a36478503f014bb17b6992f84cc894f186d9d82e74aaa4277f7c","first_seen":"2025-09-24T22:59:15.332408Z","last_seen":"2025-09-24T22:59:15.332408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/fonts/massive-crypto.woff?v","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/fonts/massive-crypto.woff?v HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://static.cryptohopper.com/\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/font-woff\r\ncontent-length: 2572\r\nlast-modified: Wed, 12 Aug 2020 10:33:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\netag: \"3bcd011f5d52c70360814408e5117ca9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 917c6054ae6e10a98fc566c655129e8a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: RUjKgzqBm0tJI6cXoz7AZH5p439-TmXvpl_2FIKkq9S2H-uSzNj6mg==\r\naccess-control-expose-headers: *\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: max-age=14400\r\ncf-ray: 9845e3371f3956c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2572,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 2572, version 1.0","md5":"3bcd011f5d52c70360814408e5117ca9","sha1":"ac1afed0a12a978a8ce7d00e070ce7d8ad9d553f","sha256":"e9e9cefc6b956ab037809a318e9560fc82432bb7e59e63d6c9559aef95b62187","sha512":"ee0312dd0bc6596dd977347dd23172fbb070aa2332ea2910f5498dac94304269b8746b694da95661712bdb25f6860c4a1dbfdf1f5576cb25c60e9856b73767dc","ssdeep":"","tlshash":"60514c86ac96d765e5ab257a7af6090a3c2d3034756763ef0b4c46313e0222412cc2b1","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-08-18T12:13:14.426736Z","times_seen":495,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/js/pages/landing-page-v3.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /js/pages/landing-page-v3.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 643\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1631,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1631), with no line terminators","md5":"20f4550a70a4f2e44f13fcc3f8ae049d","sha1":"01191e8a5f31bee43bcefac30b15a2273e3dbc2a","sha256":"039504ec4aa2347a684b07d42209c182194534c0d73ed391093ba997e0a02893","sha512":"1a33d242863d88308ff733231952e96b6654652b72667c26b4cc87bb0688a9403660256de902e5d701a8b329bfe31adad1b1c5cc7e013981a1f0693cac79915e","ssdeep":"","tlshash":"9d31f10dedd060c5d3cb83319b1a53c6f5aeec1d55910413b6a3bb80f604b28d9abab4","first_seen":"2025-09-24T22:59:15.335333Z","last_seen":"2025-09-24T22:59:15.335333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xtz.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/xtz.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2358\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"07cc10b45abbc1813fdda4f1ff5ea8ef\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AF5DC065\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxBai%2BvNnjsfYVW4fjhJP%2B1p7qdcTcuHv6Hjux0Ozw8S47Rc52897Uq3FLZZSno%2FYP6M4IS0RK3kzokrFCHD64FeOvgOD%2Bs21egr5zWkIKEO\"}]}\r\ncf-ray: 9845e2fc3e6bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":2358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"07cc10b45abbc1813fdda4f1ff5ea8ef","sha1":"a58d7cc10263a0aad0b239747b75c331cdd77d73","sha256":"d13fcc3d207e2f211d14ff9c0685829131d3e1d15f0553ee1950c28132aa20ea","sha512":"5db8c5f024d9151a24310ddfbbcc9b2193712333e04fd36079bee4312d31e5bc0d98beeedb5b4a5679511c46b2e3ae84e160c4ee9901eb623e6772fef36eb14f","ssdeep":"","tlshash":"63413d5393338e0b6d406892073cb59694653782433b5e53f78438379ef219c2b49517","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.795347Z","times_seen":2381,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/mkr.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/mkr.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2120\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"580c624b4882eaf071098172789312f5\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B0B948B2\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXUfzcG5OM4ATnjp70x6DFMiN%2FYZuWnh93EksZgMmIDcPiRMwn4kYV7J7PruLOTYOV1fgzO9uW2du9O5k7EtqQvAio9zY4GEBYBYv4p%2B4M%2Bc\"}]}\r\ncf-ray: 9845e2fc5ea1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"580c624b4882eaf071098172789312f5","sha1":"bebc82220513a835d5116cff20b92359f8addab2","sha256":"4d2f727839969d4973ad8817868562c66e576d6dff36db2f8961a2e32f5c9669","sha512":"2e19f729996e22bf3135ccf9689f094be222f515347c32a34b1b931e588ec364ed292928fca7d8c6015d9f3d212ddab80711ca556e832c14e775afc772874579","ssdeep":"","tlshash":"a141c86d8532b544bf5e123ec61fbca159c9f2aa7e12f403606090dba78cd37b04d81e","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.70977Z","times_seen":2375,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/neo.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/neo.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2449\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4b743096c5dbe00cc4bfa7453e6e770d\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AD8D0F45\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmZ%2F1jM3Hy3n4hdPFOxhsnxstBS%2F%2FZpFCDkfZShFulOCbfi%2FlFB4HBTlZex9j5RLsnPR6BS9YnB6heeN90nvKthngqoWPGCwDgXDv3GK8J0i\"}]}\r\ncf-ray: 9845e2fc6ea7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"4b743096c5dbe00cc4bfa7453e6e770d","sha1":"49868306c0c2a430b6ae80f4ee1dd87548dfea14","sha256":"6b520d33a4eddde8d2630120470eaa5ee6351c2b142d8ddc49e007655c51b317","sha512":"5472b8595df34f7f951bf62621c594431eefce2605866ad5c8c13178ba9a4b4828ed606e213353b958ef92d07d9ec1dd5db750a53b9430286ab55fefbe6b8caf","ssdeep":"","tlshash":"ae511af8ef11d439b8224e75688268706a2d73f4df36db8b5645d833c4fc1a9d404456","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.728351Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/icon-portofolio-manager.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/icon-portofolio-manager.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 970\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b414c187493a7844c4b36cbba5a90629","sha1":"e65f1161deef32398b954780c790cf1dbf8f7fa4","sha256":"24af4408127509a4e7c18c1a368ca44c2e9f607d20898956b86b64473555809f","sha512":"b6067c7b4f23f309909d87611d01c06a7b51f18f754b4f1d44567a044daa445c2b2237db23deaf590e66c69cff36a1361b4ba09b32417068f7987b82df0f0b39","ssdeep":"","tlshash":"7e4174a233c8ececb45a4b74d361a065b33e21f3b604c91d4ded253191266afd83bad1","first_seen":"2024-04-14T05:44:30Z","last_seen":"2026-08-09T22:52:28.377013Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/plugins/slick/slick.min.js","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /plugins/slick/slick.min.js HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18623\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89842,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c316e657b52f99ac202aa4f3ed723e95","sha1":"af5d7dc3e3f7394a53d1b8973d2825df1b5d4bd0","sha256":"c92f3d19f96652d4d4c5a1f30c99a8d6ecf0fc11cc2c8b3f15d135256231682b","sha512":"f1aa352e960d9d1fb97e4a01735f3fc1ff4cb06b7242bb299855b30652f2a8a18cd52cb1a30f48efb9518815147467e95d2bd49609ea05b3c0a6f53274f26d39","ssdeep":"768:qb69A3Fu6B3JSL/AMbQQtHcqhhU14Ir9F9SRoYxeDg2RsPOOrpwTXRnjRuyy/HrY:zA3FWlPg409FgesPOOrpwT3yDZqY73k","tlshash":"aa93700d6e802c554b53977e7607f8e1e9af082e3884458fe1157da0a1eb72bf9f15b0","first_seen":"2025-09-24T22:59:15.346582Z","last_seen":"2025-09-24T22:59:15.346582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3024,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/css/merged-widget-style.css?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/css/merged-widget-style.css?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 14809\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"13a14-5f89b5974cf00-gzip\"\r\nlast-modified: Wed, 05 Apr 2023 18:56:28 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sy44p0cf5z4xdjIcNdI3VsIB6g6i1ma%2FZLC0wW7mUZ%2FgqWKbTHIEVTnS8CHaNsgV1ANtDGexJUdCjWaN3fGtLZQQ00fcDPJ6RmzEcrtM3Yak\"}]}\r\ncf-ray: 9845e2fb9dd2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80404,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65356)","md5":"28bd4be37fdf2213a32eaadad9f0dd18","sha1":"291514eeba5a75459e474d4873a29ebb3d18de8a","sha256":"46fd83a7ec1d27a1e09a5fa35a5eb29a729b77e1e606c6693c1ac45e69dc5c24","sha512":"7143f467aaa16489810117557970e0f1a4c1315e790c036600f158a6c26a01655dc815867d63a1cfedd795bf93fa8fcdb8ce18c4349b5e10a83247b5ca7aed07","ssdeep":"1536:wPiYVZxYXeRCV37exCwC1yJOT6Pc8E3rKUtix:CiXht7XS","tlshash":"70739552e540211ff0178559f584bee9366dd593f60a0bbffe7932b08e465ab2a33b00","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-08-08T08:56:10.861438Z","times_seen":2760,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/arrow-line-right.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/arrow-line-right.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 179\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc93e2ad25905a7108be5ef2cf87e3af","sha1":"86a4d9f2f8b28542ff80555a1c08366b524825cc","sha256":"0324d9e955be66b9dbeae2afd068787b46e99b7b74528435c10f13ca2426d8a5","sha512":"4788e4f63645eee2ff45a04e51d3ce5d8a753f43e1e3c089e1ba4052d8fbda9b36b4fef79d27e17566c68b1db8a40a611c7f2fe8bdc1b448ee4328ddf67c8b0a","ssdeep":"","tlshash":"7ee0df9a1388acbcb7228b10f72b3234546722531aac2154cb312a3676045afa93f9d8","first_seen":"2024-09-19T20:57:03.362873Z","last_seen":"2026-06-03T10:05:48.735601Z","times_seen":11,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-why-choose-us-pattern-1.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-why-choose-us-pattern-1.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 285\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5c8f2f952d503cbf00339782c212463","sha1":"25ec78c1a9be81594ec0cfa80614391a5f322b1c","sha256":"15b4afb8e01c4bd8fdb2aa4b01253cb9c81a0a8c682fe163e9a6f11579f99c72","sha512":"f1d05f3ac3e966ece34d9e16631d99b3f9da7f77c22235e0bb061758ee155f3757934755f08dc32e8ac192656792de9f32ab896b5792f0554915267ce2b99f8f","ssdeep":"","tlshash":"6ff0ac6a208c8c3af50584d4c68f701e219ed4d101a00277e182ee0b32b007a7427edc","first_seen":"2024-09-19T20:57:03.388628Z","last_seen":"2026-06-03T10:05:48.750849Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2061,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/luna.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/luna.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 462\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"37a613bae1ff21dd0d1dbcd452a0778d\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AAE378F6\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUxKKT8Z%2FrEO%2FiQnASfoAn4qYbJ9PcKa7B%2BCEr0nAHXlfGTu7iQYdKtUcfmROjBQJ%2BU8NJZyq0VYU4EMGfmCknPbaSOpO8cpf7Ff1EGUnXN6\"}]}\r\ncf-ray: 9845e2fbcdf0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"37a613bae1ff21dd0d1dbcd452a0778d","sha1":"3161387cd4d20f6c3d9191a9cad698fa0eef95f2","sha256":"888b895e1e6553ef563ec3590f470b6e0b78f1c38e051e237f4c8bd281e2674b","sha512":"fd6a1bfd26d92cef20141132567c832c700642b6f0d805e55c39c306ebe9c01605c357b3e080ad6ec28bd4ac7a5136007da118223ce7f6b38f46ff76243456e0","ssdeep":"","tlshash":"4af05c03bb41f4f8d822c036c4470322a83b084392ff80ebdac26b38680b4ec6507782","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.654171Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-hero-pattern--2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-hero-pattern--2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 266\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":581,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"743825df5c458632c1b9706ab65b0e11","sha1":"ad89c86afed055dae4ae416d4f08cdf0e74ed0d6","sha256":"8a077efa1d92c797842c28e579dfa584c0dd4e15013e8f1d40944e05f747e5fa","sha512":"18f1d0c5516bcbe3a7ca4fd631917ff4e8cf2d1b4f96f62f23ebb0d9f1af4ff71c5b2bd93a71082718e260c1f880721a6212815e5329f8ed3c3834b99e803d7b","ssdeep":"","tlshash":"c3f08bf93b198c16f328c064ebeab99300920cf10f512179c1211ebaf472b1734ba7d9","first_seen":"2024-09-19T20:57:03.354375Z","last_seen":"2026-06-03T10:05:48.746657Z","times_seen":10,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xrp.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/xrp.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2426\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"062f93b4108e8a89fad2b7b54bc0e832\"\r\nlast-modified: Mon, 24 Apr 2023 15:43:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AADDBA8D\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrXNwV9icEdOUurbv2d1dskVlEx83EJcu9HVHajKK2Eix%2BqLcwfg3Kft70LMlx00cZISyvmAmWpY54WKm4g7cbQsZtUleyxhsLPbzSLJcHag\"}]}\r\ncf-ray: 9845e2fbbdedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"062f93b4108e8a89fad2b7b54bc0e832","sha1":"a7d0610335e366e813d2594e4c1b18512f55d416","sha256":"ec3b2ee981b282bd72d6e6949950aa7ddcfa066e5ccf0d04ea3451a77e91fe17","sha512":"c03775a7fc518176f55c27d5c3fdd5bab5c829baa5344db265be3ced6c54af2709886e16e3b223948d5f2ba6c6169d27ec1e7e791100efcfeefa5dd176815b85","ssdeep":"","tlshash":"0241e8c4364c7a8f48251abff397915be14a0712987cd65e843c53de98ea38cfc8e201","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.817371Z","times_seen":2570,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ht.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/ht.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2935\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d303dbabf27a6f78eb7146a3fcc562e5\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AF30517E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kekv7P8lffFWOmYpR2AdIK5NVYPncCARs5HsoQPZ9v1foEkfhx87ZbRf6%2BoSpkOgfq0ksgC9oi5GCu3kJcgGlUwCvRSV%2FAbbEEE%2F2wM%2Fd%2Bv\"}]}\r\ncf-ray: 9845e2fc4e84b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"d303dbabf27a6f78eb7146a3fcc562e5","sha1":"dd73e2de21a347bfbf0ac8e0d81afd3499e34c15","sha256":"2562132a0bf0814a83c71612cfef97f9fbd1e52e884dce29279f4fd251776e6b","sha512":"7b94446ebd7c9def7b9383a0b95a4f499816b7a852722823666c226887d59c32ce9493bc47d77676be863987b0de68b29e29fde70652993b03c96f16b304e50e","ssdeep":"","tlshash":"94516d64a686624af877963b6ccfa10b9618ff061585cc1b3fb3a0f3314e2b36116198","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.746413Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/4128/small/solana.png?1718769756","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png?1718769756 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2225\r\nx-amz-id-2: SfBASI/cmKEU2FHuhYxCuSg54GzoZncizGPG/99oxKurcE6ggYUYg5Qv7iF3lObUdiSjp8cgoek=\r\nx-amz-request-id: 0YAH2BEF9MW2JWQ0\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3660\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bf2d5UzJAjmzDa6oeszrJh9R%2FhDVnfn12i8ty2bhy5mNb3odilfEydZEIHG2XJOI7LYKagGw3pizJo6HlDLudTDTVC1dLiiZG9fORChxJCtCgCxkfQ8q6G0%3D\"}]}\r\ncf-ray: 9845e335deee2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"9f6644b0f146e9c7cad0c5b20b506082","sha1":"9f1232c3341ca8009407b441505fc307965fdf2a","sha256":"bd46e6d28abec9f7c4b462350aac62747dc34ac6160bba18174d67efdb33ed91","sha512":"1c643f4f862fa8fbc8a488be9af5f4e9fc107c7ac40e320977f2083ead90f6aa5944f3629749a43757e479983228629740e31caeb3f34d4c6d18af90f6b2b53b","ssdeep":"","tlshash":"f94129925711f7bbdaa9013475650901fe7d991c66b12ba5a18ceccc0819f94b80cf5f","first_seen":"2024-09-19T19:38:42.354997Z","last_seen":"2026-08-18T12:13:14.501083Z","times_seen":244,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":217,"dns":28,"connect":1,"send":0,"wait":4,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws.coincap.io/prices?assets=bitcoin,ethereum,xrp,tether,bnb,solana,usd-coin,dogecoin,staked-ether,tron","fqdn":"ws.coincap.io","domain":"coincap.io","tld":"io"},"ip":{"addr":"104.20.46.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"coincap.io","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 14:21:06 GMT","end":"Tue, 11 Nov 2025 14:21:05 GMT"},"fingerprint":{"sha1":"EE:47:21:22:32:93:53:31:3D:A9:80:D0:B4:08:6E:79:EB:DF:CC:78","sha256":"86:F1:5C:4C:51:B2:DF:32:BC:16:41:25:36:80:53:99:28:28:32:91:DE:8B:D8:42:1F:72:49:E1:AD:E0:93:29"}}},"request":{"raw":"GET /prices?assets=bitcoin,ethereum,xrp,tether,bnb,solana,usd-coin,dogecoin,staked-ether,tron HTTP/1.1\r\nHost: ws.coincap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://aerodrome-finance.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: D9PtEHB6qYZM+iMPahTu2A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 24 Sep 2025 22:58:37 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: X+D0TRRWv/5nB4poNdJMjPhdHvg=\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 9845e3360a29b4fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":215,"connect":192,"send":0,"wait":278,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-hero-pattern-3.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-hero-pattern-3.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0fce45940914018a37503b79dfdf2ac","sha1":"1270e03406f0cc105dab4f34006415fd59d2cfe3","sha256":"a65e8648411bc53c8ec6ca5d22083c6bb6a6ba23342febb81570845efb1d8869","sha512":"06e031ba362c77a5925e98d2c6a40bcd4b3c81184f5493ec98f7d4e1afa1e8996fb992c2fa1ec89926a05867c6775594c1390157523b911c807a74440ab14032","ssdeep":"","tlshash":"d2f0a626b01cd890a2218a14e3cbfa29300888e442d183faa2a04c77a574af7781fac4","first_seen":"2024-09-19T20:57:03.361743Z","last_seen":"2026-06-03T10:05:48.727395Z","times_seen":10,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-mobile-platform-pattern-2.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-mobile-platform-pattern-2.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 280\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":571,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c8822ddebf638508a3b59da6a7dbec","sha1":"a0eb2e70e16043212fe9837eeb88afff17939dc1","sha256":"47d1f7b6bac7c19e7668d55c059930584b3c7ae46ba89e2cf2a7c8a431f6536f","sha512":"dc6fc30462dab16a7fe15f976b7eddd54440bb17ea7709122cb6a0f1e7ead03e4ee87799947ec38c6b1ae6e3ee38c61a854b801168b12db208ed1d5b0112b01d","ssdeep":"","tlshash":"c7f04cfd31649c19ea61c128d28fa44a106f60a81a5442fad503b95e214cbf77c772d8","first_seen":"2024-09-19T20:57:03.431405Z","last_seen":"2026-06-03T10:05:48.747591Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/zec.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/zec.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 3009\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"206c113797fc5810036e7f0aebce037f\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AFAB5112\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ni4CNk1R0eiWOD7vgzGmT6%2FID3hVArOk5FE3fvt15eXeUqD8xJHLkCOZ%2Fk%2FvQux2ytqkxwuSiAhvzzPuRgWqkpBqyYf3HrvNv5iqDkS7lDk%2F\"}]}\r\ncf-ray: 9845e2fc4e7ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":3009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 78, 8-bit colormap, non-interlaced","md5":"206c113797fc5810036e7f0aebce037f","sha1":"24f46627873dd27e74dab7290f96d8cb02c2e9ff","sha256":"2ca56fb4beab86f55bf203b14b7730aaa8ad3597b0782d5d8f5fc5c11092b863","sha512":"716841e557c297e24b49138403eb312270bcd8117453431b2f85f9d0a67bfb44d6445f80a2125546a3497aba77477f50cc6c552868f6265939aaf0d07c4427fa","ssdeep":"","tlshash":"f7515d0ecd1cc614d8ed6db5028609ea96a30e932ec9359fe9ae2740830a29c54d7756","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.701248Z","times_seen":2380,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/mana.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/mana.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 4979\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"924a8c5bf9224dc8ba5f967b28bfdec3\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B045C2C8\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAy10enfyKJJXIcfOFP14Ilx1z0E4VpZVbrjFEvfpbjcNt4x9bz%2F9JE8ohaFoPPQ8l6%2BCUvs0PueNlhCc%2B76Ny7h99DOZrqJhoKuxnE6MHfY\"}]}\r\ncf-ray: 9845e2fc4e89b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":4979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"924a8c5bf9224dc8ba5f967b28bfdec3","sha1":"f6cc54e97a936dcf0adb8419a51ce88422184a91","sha256":"67cbed15df535147fc45d100db51d70ead340183dd6922278d5fecbecbdf9659","sha512":"7f69553f679f3abef8744a74348dd244bf41a9663040e5c165424e98a78d4f46917f989b3a60ea30735ed254c8ea1e1efdba7973c4d01377dade15c8112f46c4","ssdeep":"96:hpWwjwU/Ly6HycTIL65goeMpQEkY6BldxnY3C5/s/6OEQeCXdMWE3kCmH8Xraqxp:bjtHPTIL6ZeXTh6y5/OyCVNCRr1/","tlshash":"c4a1aee248cbf765918efd954557307bb2bc0b8f4d43b62ed215d6fc2ea823a4c0a412","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.713401Z","times_seen":2380,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/lrc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/lrc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 7538\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2f29bf7ff1aa55b41973a32643884401\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B14C9CC0\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2B%2F3PPb2EYJLtupUrOcp9dbclTeH9SHgKhcpqOtx1oHRCuMgp0g62NaullZn%2FzZFRRD%2BrteplUED5%2BBVsTPecR%2BqJrdKV4RqERVvfXN2M9Vk\"}]}\r\ncf-ray: 9845e2fc8ed0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7538,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"2f29bf7ff1aa55b41973a32643884401","sha1":"8111c601369de824f94bd7644161ca8c30b331c7","sha256":"78550f1a79d51d7781c1c42771d34f0714d9e3f1ff09fd8d4bb90511a63ae063","sha512":"0b32e6fc658bcd8562c9f5fe17aec1501b3bee86e7d280914481c771ce271243f6da7746afedbf670e196e671dc6c838693cde7d5b410cc2e707875bcd621f83","ssdeep":"192:l9t3a3lCCzgeFO4pHiEpRuNauravg8iWYLeQO:l9t3a3lnrFOWHZ0V2dQO","tlshash":"5ff17f96936c3156d99d4b3d0de58b71ba68bc9355f9c327f0dc8180276e5f10c580e9","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.742378Z","times_seen":2258,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e59n2h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e59n2h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nexpires: Wed, 24 Sep 2025 22:58:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128725\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370731,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"be6171e7ba328045a3a0955b2d1b2976","sha1":"72625b4437d0b89939baf743c48d5475b6c15e63","sha256":"67968d3d558284017dd9ef7b95a842ce81f8b501d097733b2343c7f14d440d4d","sha512":"a367cdb220999244b1ccb1d0274b67b65bbc0dfb793cdb29da0acd88d0b667dbf80ef87e02f6dbc129d38da05dc94b5208a9dd7a1fe9c1b3b9d9222c33f012d7","ssdeep":"6144:wTpmM2/RNpveqkD1g1/9G1SvuVc/D3WBH:4mLRely/LI","tlshash":"2e741acd73c674265396a478903f018bb5bb6892f44cc899f186dce42e74a9a4237f7c","first_seen":"2025-09-24T22:59:15.359341Z","last_seen":"2025-09-24T22:59:15.359341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aerodrome-finance.vip/\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845e3381ab8b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":135,"dns":0,"connect":1,"send":0,"wait":121,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-exchange-pattern.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-exchange-pattern.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 282\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":567,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fd3a9e96ba13c8c9dbfcf4ce7089986","sha1":"55da052be5b67ec510f970963f6d1d04fc33ee6a","sha256":"e34f52f5a13004d275bcbffac61464aa8d18babd74f16958e3f47c41f5756922","sha512":"f80a3720cc4c2a08be68cd3ae4863821f0095ad790d2c91b337698304717c68da2bedebbd46e47dd73e9c0c2f29bfedd140f6d91cf0d82a27c3399e016f34b45","ssdeep":"","tlshash":"97f081b8355c9c1ce710c045a3cfe41a212a41c4290647eaa9c22d076654af76c7b7ec","first_seen":"2024-09-19T20:57:03.411517Z","last_seen":"2026-06-03T10:05:48.693854Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2064,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/testimonial/testimonial-euronew.png","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/testimonial/testimonial-euronew.png HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2073\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 56, 8-bit/color RGBA, non-interlaced","md5":"d2f7b3096cc93cbd73edd5c9aec06a59","sha1":"f3dae6c09f18e726cca2e15ec6840d2a8c2f1b57","sha256":"4655e21210265d3c7eb154aac776ff03fb27b8c4f6fc839b3dc40cf2f61115cf","sha512":"747a246414078e31c7793d37d1b8732c7031454a717d543ccf56cbe6425e2378334f0bb492fe8e5b5b779d55ab15d0b46aff444de85acc9662f680b8965ac218","ssdeep":"","tlshash":"d24109d9d12c15247ec8011a33c786155d3d1a661632e5b267daa421b7a090276f2f72","first_seen":"2024-09-19T20:57:03.429576Z","last_seen":"2026-06-03T10:05:48.836167Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2040,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jsoncdn.github.io/json/BabyGT.js","fqdn":"jsoncdn.github.io","domain":"jsoncdn.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /json/BabyGT.js HTTP/1.1\r\nHost: jsoncdn.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 23 Aug 2025 15:14:04 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68a9dabc-328f6d\"\r\nexpires: Wed, 24 Sep 2025 23:08:27 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 156C:1E6962:20A6EA:20ED29:68D47793\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1758754707.448205,VS0,VE316\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cec010adf27593fbd5cc76890caf3bb1dbfc4309\r\ncontent-length: 2398042\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3313517,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"24c3418f8019ec9c1d2d5bea2688962b","sha1":"1492cd7ed98f16a9f673e49fc631b8aeb14c6577","sha256":"c78514ad194c7c959a9967579d7c6ed9ddd93bf321752fbd3222d4314945a099","sha512":"587d3d4ca402643be7934f1f255872b5242ca9c4caa2bbc538fe477e845208d8db659c484b3abc61f3b39fbd8e03cc9effc610da0d094dab5a908e7bc2a3f366","ssdeep":"24576:8Ib/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RT8:8GGkwdNZngkO5T8","tlshash":"9a25d0d259c6b3dc8acb059fbc6e6fadd8404c128b4c6966f90cdc85f358b6041f366a","first_seen":"2025-09-24T22:59:15.365204Z","last_seen":"2025-09-24T22:59:15.365204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":33,"dns":28,"connect":27,"send":0,"wait":342,"receive":356,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/btc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/btc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2708\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"638e7a558628c3c25aaef74de842c0d3\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AA52F69D\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBgCAdNtN7UoozTazTJ%2BQO3IQQSJ72pHogBgHCorPzqEu%2FUP5hEcx2qI%2Fyx3zahMbwvLYtNjFbYDhessu6wX%2BqJiAum%2Bx8V9HyEPoUK3x8%2B9\"}]}\r\ncf-ray: 9845e2fbaddeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"638e7a558628c3c25aaef74de842c0d3","sha1":"3d41002b08d0a01a8ef9976c9ad2cfa101609f92","sha256":"0c8495f4eab0a8d8dbd3e36d29a0cb6229f8fe45ce3ed5e78c6cb5dd5ef2bb75","sha512":"469c01555f8178260b254d62e016c15573043e46b2911546572926d9a201819ebbb569acb69cd05aa98e0501cb748c8f9265ef0d2847565720a57b33a1878177","ssdeep":"","tlshash":"f6511af9d3d32935e71782763d76c1f1f2d9d004905ac247be74606addac3115b4260c","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.758118Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/mobile-landing-page-v3-exchange-gradient.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/mobile-landing-page-v3-exchange-gradient.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 509\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":974,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0e6d226092dd16919ea4be84a31a5c6","sha1":"58d2417b9a41768bfbafc695665e8d47570c6c5b","sha256":"dfff418036a25484235c38d3347723c3bbc3c4587d6e727185b2ce29967c54a5","sha512":"0b053411ff3da8c8bb6a362b2980f0411cfafc7fa13875896afc42b26a839c79462697ecbd1af59b7f92ca9fa6dbc869f5ce6a855a829567c71d1707b0abf815","ssdeep":"","tlshash":"ca11e168a1a83529e4adc19cfbd64c09716980da8281858df45d7f2f5222c82ac6f3e4","first_seen":"2024-09-19T20:57:03.396476Z","last_seen":"2026-06-03T10:05:48.76783Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1094,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/js/Chart.min.js","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/js/Chart.min.js HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2020 10:33:34 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\netag: \"4313f60cf9317891f11b4c746d9fb7b1\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 670a338b13066689f35346a843426e26.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: QFipDwAMEllnrn29S0lhsCFHS9Pp59sFW_e0smVJFamhsK3iv1qpMQ==\r\ncache-control: max-age=14400\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9845e3371f3a56c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159626,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4313f60cf9317891f11b4c746d9fb7b1","sha1":"569490dd4e8dfd2b33016899d2a5baf65ec51138","sha256":"6e2a308caf0369a9e41a57d1c73d9229c52399944b540990749045def75217af","sha512":"e7e56675d45d0035a92f0b7bac41d3c891eee6058a403c754bc052793735719594e3190cddcee3580b0bc67ca6010223a58661518ccfd4e25b73088129ddb3e7","ssdeep":"1536:bUYPoEhqUXujc9ejeM+xq1drdX5vECW1i9ySXzv2MmcXZBrCjhH4ASWcfS7vDsLP:zpDeJO2NlJ4j9Pe2kj","tlshash":"66f308c87281702943b362e8552f150ea2373954290b9a94f6b2d5d27cbc9ce71bbf3d","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-08-17T04:11:44.407684Z","times_seen":110,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/img/sort_both_dark.png","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 11:30:38 GMT","end":"Wed, 05 Nov 2025 12:30:36 GMT"},"fingerprint":{"sha1":"38:EE:3C:24:00:19:9B:7E:AF:29:F3:64:A4:19:D1:CE:77:98:BA:BC","sha256":"E8:24:6E:BA:A2:7E:99:5C:2C:44:97:94:A7:F1:E6:26:6F:DB:A8:50:F1:63:50:B7:58:5C:2A:2B:7F:73:71:FA"}}},"request":{"raw":"GET /widgets/assets/public/img/sort_both_dark.png HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://static.cryptohopper.com/widgets/assets/public/css/style.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2941\r\nlast-modified: Wed, 12 Aug 2020 10:33:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\netag: \"75809f0825eb44bd5673877318deb95b\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2ec95fe7e41d4394d0fc48587428057e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 77ECBjNp5N1_sk9HPQb3wOoLfmcrcIlaIx8qDjWu5Usa5puAKEugsw==\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\ncache-control: max-age=14400\r\ncf-ray: 9845e336ff3856c0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced","md5":"75809f0825eb44bd5673877318deb95b","sha1":"6ac7d2da7802be6f2db230cc0d5cdd7e31adbfc9","sha256":"8c54baca93c22e851ffbf1d9752b9939d355aedd4e8df951a383a7156cebe329","sha512":"e032ed62d38caf0b1a34ec313c85e5f18d9962ac95fc73442e04079d38a3bec945665d006d90c8ed4cdc1232ebf1b126d6d3c6d437d888c3c83c74c1ebcb5a25","ssdeep":"","tlshash":"3e517daf9970908f7cde78420dcc0606d769726c895b3338a0d3a5de5096d076b66072","first_seen":"2023-07-23T16:57:33Z","last_seen":"2026-07-29T04:58:12.573955Z","times_seen":39,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/matic.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/matic.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2554\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d21304cb80dd678815a4e7efa2c413ab\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16ABBF7456\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWxp5bqmrOfgms7TlBeW83Zxb1m3lCrG7zqDo2su9TUnC%2FodDVkblzeaD0D0Y3uU7JxkdL0D%2Bw9%2Fy09wQB2%2Fe%2BVyEiPSLdLVzCjsVA60GVea\"}]}\r\ncf-ray: 9845e2fbde07b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"d21304cb80dd678815a4e7efa2c413ab","sha1":"e6914c189acbdc4b3332496f550b612826cba418","sha256":"8070fecfc63868553395fd61f45338bff7b8ebf91b2dbe640885385b34787b86","sha512":"fe0e8bcccaf63109d6f3ce8a6e9439d96d44c562b2961d83eb2d508a272c94fae4495603e9a79f79612060124bfaa650742091929558b3fd46638d39e70ca3e4","ssdeep":"","tlshash":"88514a939f939ccf632f0238806bb47d21eb0da16169e205c5ce99ac4c9b36c01e8ac1","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.649613Z","times_seen":2441,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v2/landing-page-v2-why-choose-us-illustration.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v2/landing-page-v2-why-choose-us-illustration.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 128063\r\ndate: Wed, 24 Sep 2025 22:58:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":588562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2438869b441d97c89fe630d403770853","sha1":"283a9d462f2ad7c0e29c2820e27f35e0485db94f","sha256":"0157995f4c2789de07c7276d924648fc6fda5fb0f68d6ba9109a2ef80f11331a","sha512":"be554c959969555a2e48df8989bb1e8d246fb2f38d01e67fa11cb0c290dba84e20b7da2f1d92fc759d49df9199938aca6c7628300a7e11ae4432781f34110a25","ssdeep":"1536:22BiNhEf2+6wfCaiRsK2QTgoJevrAQxkeqaHjQS6cCBQar6EvtYvXXdv6/5e5S6B:c1qr","tlshash":"42c41ffd2b7088e54c8947feef1d51dd34639aef54454d44e2a86f1c28a0a7a8c89bc2","first_seen":"2024-04-14T05:44:29Z","last_seen":"2026-08-09T22:52:28.392088Z","times_seen":41,"resource_available":false,"data":null}},"time_used":2081,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2075,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/css/pages/landing-page-v3.css","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /css/pages/landing-page-v3.css HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8521\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"ccc3e3e19da4cbbb5b09b3169c67fdcb","sha1":"7a2ad4927837845c9b3f334ce3a792636966f6ff","sha256":"c43d07fc96a2bd2069a4c4b6166cace14ef4ab32932f60dd6edfddf85481ae64","sha512":"c90465fc405f3b85e0973797f6fcf5fb3f1600f184babb6efd9b3f195c6a8e70da23a43ac88fca4f852e480de70b01bb0bb19af4df3dbb5069aceef53b64b1db","ssdeep":"1536:QPGjWl4CU5Rq95fszqPetbPp9rSPiVhtOH:/5Y1","tlshash":"6a638608c6712d549447146a3aeb3fc07b2c0c0e6a0ede5d67a632b8ddde75046b2fad","first_seen":"2024-09-19T20:57:03.348902Z","last_seen":"2026-03-31T14:54:29.158474Z","times_seen":5,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dot.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/dot.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 5124\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"75d68eecf3680e19d2f527c44907a0e3\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AAA6E2FD\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 3\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVHovOYmmBTaQgw8k5t5xm56EBTcyCMoQ8AFN7MUvKdT92JHTOhxQRw97GTCdRoP9A4W7DXZC%2FrsaxZ0cOmWX%2F6ZPhgrA9exxptGedNMAK0I\"}]}\r\ncf-ray: 9845e2fbde01b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"75d68eecf3680e19d2f527c44907a0e3","sha1":"2d4c1a683cfa448e41d7d39cb87d46e6811fdf6d","sha256":"a060df05f655e8abc3994282b5a00bb0666050c87dc35b1e28c81bcc12ac6d2c","sha512":"ac63b4502b3f225a3bb5d04f86f999437511741b16d60dfa2dff735cec265aa29dc95a98dadd9cfddc30ef55a68bd7508fd97f2e39aab4532f152f51f7ba52dd","ssdeep":"96:hWixEaXrGnHhnV2l1qqFqP0R6JdwFud8yzAZ8AgQ+Y25kyvXMsjEThzF:six98HhnOF16h8l3N2qyvXMsKb","tlshash":"27b18e33ced4acb5760bc36d885d500a58ebd610b597086720609c2483799bbe196f4b","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.760157Z","times_seen":2484,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/fonts/SofiaPro-SemiBold.ttf","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/fonts/SofiaPro-SemiBold.ttf HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/css/pages/landing-page-v3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T18:09:01.866488Z","times_seen":41498,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/landing-page-v3/landing-page-v3-mobile-platform-pattern-1.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/landing-page-v3/landing-page-v3-mobile-platform-pattern-1.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 281\r\ndate: Wed, 24 Sep 2025 22:58:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b7d47d26e6deab03cd2ccacf989e567","sha1":"38682727bc6c007d6bc77c1a9ed93ef49334ccc5","sha256":"3b2a790215369f751aef1f4965b15475f9879250c5e29412fd0f009f3f99e668","sha512":"df8783b5c28c23c4ee341a1063fb1979a53fe65b609b19b6d5dfd37d0deb2860cd759d2b2d7de9cf2d1e36c12457d5ae94d8f881052fad5b3f15e31a9730dbb5","ssdeep":"","tlshash":"10f04ca7b44ccd25e610c8adc38ba90c511e80d6079132fbe9011e4f60685d7b45f6e4","first_seen":"2024-09-19T20:57:03.430421Z","last_seen":"2026-06-03T10:05:48.711013Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ada.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/ada.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 2631\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a02d8e21bee07487dd21b1cf84f07812\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16AB76B95F\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq9Ke1dxy1eOs5%2FTJuxLuacqBov%2BSKzJac6Eup%2FGDaYx%2B5JD60kntN%2BLXhc128bsSVu0CoVxRiWp42L5dSoVc6zQUyUefD%2BrGadEr8HJWFl7\"}]}\r\ncf-ray: 9845e2fbcdf8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"a02d8e21bee07487dd21b1cf84f07812","sha1":"55b124bce8be0ad475350ea79defd1441e17dc1b","sha256":"a66a9644ea48e7dd6bcea9070b13e9d9e12368b1ec97e452660769b4a3d7443f","sha512":"bfdb893ec31797c21ed2500d6050a0f1e038731e32279700a4140d26bbef2b40fb2cad93170ca879142c964b1f787d475c9adc0010988a2e8c9caac5d3d777f5","ssdeep":"","tlshash":"9e512924b268023e9a4e811b4bdf4d0e8f185e5f8b6f4f399b1a11a3f4173d93241235","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.697881Z","times_seen":2498,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/okb.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:27.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/okb.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 171988\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2e32c80479d4bed505019c14eacaf480\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B1823D88\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoQU%2B%2FY1MM0qo15gKnVxKqOc1J670WIClBUyyRBY5Nhm5QBUCxCtcLFVxpWA7vynXOHLkv5pudnUEpxtV8aaKaramRdrBawp4eotaq3BWw3E\"}]}\r\ncf-ray: 9845e2fc7eb7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4268 x 4268, 8-bit/color RGBA, non-interlaced","md5":"2e32c80479d4bed505019c14eacaf480","sha1":"f4a29b47546baa05e9a031c2e64de6a225439345","sha256":"8ec39e3f0e4f8300ee7105898c4da61f180a5ffedd1f90d2d2f2603a15b702c1","sha512":"deebc6eba12397d0c0ac7fb7dea6a3a71a29f3a61b931f3159f2c4b29e6190396ac74fb7542bde13546678cc12624be9bb252c910bb8a4e07255727cf0bad5ce","ssdeep":"3072:JQJXaNlWqTu+pU5JFi2d31Fb+7yYqBeMMaIs71S8yaSDr:CwEaut5Jg61lYqBo/s713yaS3","tlshash":"28f36cbdcc56cfded816853088b90f183ebc339c4359230e57f9a8766eea298b147591","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.646069Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/snx.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=","date":"2025-09-24T22:58:28.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 03:04:12 GMT","end":"Fri, 31 Oct 2025 04:02:32 GMT"},"fingerprint":{"sha1":"F0:40:AE:FA:3F:11:A5:9C:F9:B2:B6:67:70:19:F6:09:FF:C8:0E:63","sha256":"57:56:4B:0C:01:10:2A:37:96:6E:F6:B9:E9:E9:1F:D9:26:E5:C3:68:7F:8F:46:45:F0:06:C4:12:79:C9:58:A3"}}},"request":{"raw":"GET /static/img/coins/small/snx.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 10681\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"efad452c761f8e466a2922b6ff583c48\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 18685A16B118742E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1WqS%2Be1VQMrnE5DuCekzm%2FXpdqtLmalzRiSXbJWAb69oh810VtV8VGe55ZQ05vPmcIfZhiADHSAnz2wUeweYq3jzyOqRQ847zlM%2BHQuQ7D6\"}]}\r\ncf-ray: 9845e2fc7ec5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, interlaced","md5":"efad452c761f8e466a2922b6ff583c48","sha1":"33435b401b5384a9400a85286ce04416f0d7f758","sha256":"e805352489efd80a7cc1e8372984c8c2c8547f290fd5233df05d5c821cf5acac","sha512":"5c9092471088a53cea5971608c6ecf6838db6cf6edab920ae320909d7c6d0b2d7d66e916472e0a542a520e9a29eb06dc485afb3e6439d8f1a7a03ad1c9105090","ssdeep":"192:HB9F3QwL0dUpKZXT8y+vfBbnxbKjAt9MGyjPtJ/ET7+Zu9nq7VDEJzM:h9SwLLKdPG1IAt+Gy7tJ/2iZu9KVDEJg","tlshash":"0c22cf4eb3af55de4f2d95bc1858c8317b6b4e142f44c5995fbef0020ad241932be0d6","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-08-10T04:59:42.772425Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/6319/small/usdc.png?1696506694","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:36.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 09:58:38 GMT","end":"Tue, 18 Nov 2025 10:56:13 GMT"},"fingerprint":{"sha1":"30:34:90:F9:98:DC:E8:FA:43:63:48:8A:39:A4:48:75:86:F8:DE:CD","sha256":"98:10:66:C1:DF:48:F0:0A:3B:2B:AF:0F:2B:28:3A:8E:E1:2E:CE:5E:A3:77:5E:52:26:54:2C:B0:AF:9E:31:69"}}},"request":{"raw":"GET /coins/images/6319/small/usdc.png?1696506694 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3966\r\nx-amz-id-2: 2GDssUIGp+1szfaWGZKcDyONS5KPvjvmZdyq6YIztJ6E757kqPO+HMyw9+cMXutbkcJcGGMTDyE=\r\nx-amz-request-id: 58QEYKFSHYAVP9MB\r\nlast-modified: Wed, 29 May 2024 03:00:48 GMT\r\netag: \"2129c1382a6617f0083ce8d5936b738f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .5ksyZKuLnhEzFkmjGzccqmJJLAvd9gK\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 417\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arv2fFgULdXXzdHMc5EfLCnv6wVx%2F7RYIJX5zEtWHHHlfreNh0h9sP%2B6aRetimxVksy15aU%2Bi2CMJpIUIxtUpOBcvO56Hgnru3q2yNxxb7ZWkqtCiFfsOWs%3D\"}]}\r\ncf-ray: 9845e335aec12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2129c1382a6617f0083ce8d5936b738f","sha1":"2c289471feb06b12228449841f52cd6fe23e9b3c","sha256":"1bda72a7f4a2f1931510e992c1ff38ca0f1b7a497be6636ab6457d08ca003c52","sha512":"ccf8f0ef3ca41456e797fde3e4dbcffefe37879d98097fb5c4745bd9f216c38be841b1356990e16f04271e2d9e1eef496370187530819ebee4151d1591097f68","ssdeep":"","tlshash":"65818eadb3502311edfe132adf49afc9d9e2cf44a00bd13425140a098c2741d87d7d0d","first_seen":"2024-09-19T19:38:42.360764Z","last_seen":"2026-08-04T03:27:56.181119Z","times_seen":254,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aerodrome-finance.vip/media/images/icons/arrow-down.svg","fqdn":"aerodrome-finance.vip","domain":"aerodrome-finance.vip","tld":"vip"},"ip":{"addr":"198.251.88.162","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:27.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aerodrome-finance.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 13:30:21 GMT","end":"Sun, 16 Nov 2025 13:30:20 GMT"},"fingerprint":{"sha1":"B6:50:7D:89:C6:A4:B0:A9:1F:43:78:B1:86:F7:57:DF:94:0E:0B:AA","sha256":"A2:7D:4F:08:16:74:1A:CA:0E:1F:0B:D6:3D:03:BB:68:57:55:16:5D:5A:EA:9E:9E:E6:5E:3A:54:89:80:C5:9C"}}},"request":{"raw":"GET /media/images/icons/arrow-down.svg HTTP/1.1\r\nHost: aerodrome-finance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aerodrome-finance.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Oct 2025 22:58:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 30 Oct 2024 19:49:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 277\r\ndate: Wed, 24 Sep 2025 22:58:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49f91a3d17e3e3cd2a547696610595a6","sha1":"44326f971613a5dc8bfd81b64684b65028cac512","sha256":"0645558affe7e2b70c820978d8eeaad5cb0389dca63e27d01163ead119187d80","sha512":"45f94f6c03c18df855d5d3a475e58ccb15d4d866464bce6674d15ea788c5d5140cb09815126a33bd85f59926fc3f999379f8f7bf5918f4dd8eb5e10c58750b29","ssdeep":"","tlshash":"7af059d3e26ed188509741300f295a051def24b3cfce516795429f3e96a8ff5c8a4de8","first_seen":"2024-09-19T20:57:03.400192Z","last_seen":"2026-08-09T22:52:28.38102Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1079,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-24","alert":"Phishing Block","trigger":"aerodrome-finance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"aerodrome-finance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"18.203.203.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aerodrome-finance.vip/","date":"2025-09-24T22:58:37.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aerodrome-finance.vip/\r\nOrigin: https://aerodrome-finance.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:58:37 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":208,"dns":84,"connect":36,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}