{"report_id":"1e212ad2-13d1-4a94-821d-42518bbfc488","version":0,"status":"done","tags":[],"date":"2026-08-04T05:44:16Z","url":{"schema":"http","addr":"aurumfoundation.app/","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"aurumfoundation.app/","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"title":"Verification Portal","dom":{"size":6920,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3115)","md5":"23b2c228f7f594b163c77ae15d4d73b9","sha1":"1bbb84dd5cd9a1e24f1e10bc133df7b82d477845","sha256":"a2070da9d04d7226f0307f638c662ab167a4ba2f2cc105dfa1ffc0c81627bede","sha512":"ea58f9b25dd2c822a1b368468ab7f0f461f4cbb5694757939df146c7dd1fd66f0dde2b291e819c0c82714340b663a5093eb4f8a7a8c75651f0ca6dee64145b3a","ssdeep":"96:nCBvIMjzWjM8sBTFA1cgx+M73sQ8egsBPmLTHgJPm7N+KVf1/XL/6pnTDL46OL80:swMjzWjM8ss1Nm/su7hXDbLQ0","tlshash":"34e16447d98900177233b56ab8c1fc471a23a50fa5d5885df093a9e69ac8ecbc49253f","dom_hash":"domhashd8516a562da6ca9444fe79a75d33f890","first_seen":"2026-08-04T05:39:36.034228Z","last_seen":"2026-08-04T05:44:21.489829Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aurumfoundation.app/","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T05:44:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":146540,"sent_data":1852,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-08-02T03:00:11.697852Z","alert_count":0,"request_count":1,"received_data":944,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aurumfoundation.app","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-04T05:39:31.156066Z","last_seen":"2026-08-04T05:39:31.156066Z","alert_count":58,"request_count":29,"received_data":2773778,"sent_data":13898,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":1,"received_data":73777,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-08-02T03:24:23.400203Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":609,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aurumfoundation.app/assets/events-DQ172AOg.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a80663ffbb4a6e247d024874a2456e","sha1":"8f64e93e4f832983754e56e37d18f16bff133b2e","sha256":"da208eb12e58611c9ebd0b6c352fc11c64f9f8c7f3f1b44a0f7f2b2c4ea83bac","sha512":"48f7a03a4fe8a76ff77d46b869eea9571d1f31e8fa0385d4d35b8c82a04f2ce0edfbc00618d3ea77f86cb3cbe6125247a3dab958bb790690bf45f39a8478768e","ssdeep":"96:5ER9ttlJTZFWHs9BEdCOoRLUlRHZGAq6vvVu1o3IMmmPaJvsVk:GTrlJTfWMDchq6tu0NPQ","tlshash":"44c153ccb38578b013e7d3abb07f520bf134a594640c5118b246ecf9696bc9e4126fb8","size":6126,"data":"","first_seen":"2024-12-25T05:30:42.59477Z","last_seen":"2026-08-04T15:56:43.291579Z","times_seen":669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/rabbyWallet-GFVPHCTK-CCnTfCkL.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"40592e4c7a225cfe8c7e3aedbe82ff75","sha1":"b85ee488bfc6bdad3081c0ae1e0e9be6b2a564e4","sha256":"d6ddd32ad1ed24ab07fd77c99831f0c92da4d753d854229022b2435777ac780c","sha512":"fbed6be85809c19329c4f28dc6fb4629d7d0604731f4728b24f9b5e717838e43e575de7d6adfa0cff0ca50606c48c9e2351e085108f102a243cdc45985474755","ssdeep":"","tlshash":"bc51ecacb6322e5aa877f84fde59ba1d5020bf6fdc145071ddee23089f427687494520","size":3162,"data":"","first_seen":"2025-09-03T16:24:17.0302Z","last_seen":"2026-08-04T05:48:35.068676Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/assets-Q6ZU7ZJ5-P8HioiAD.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0be1e539d9c370f71c5ed19f66fb0870","sha1":"b42033f215024e2008bf0d5e032eb8b0df4cd953","sha256":"312c407a303fa7679b7eeccd85173ad7c0967df4f417c4b9e3ce05519ff3e591","sha512":"07bb4c57bd73df5ac1b0031e9d9c94be7ed97758dc07e0cda507b4fafafae3928b59ccdf403a19b3516bcd4721be0242c004c6f0408a52a707380c0b36c36dec","ssdeep":"384:ppByhqW2xs3dwktSu6foTLEQD4zrlqPqo:ppBSqQ3p8BrlqPqo","tlshash":"f8b278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","size":23619,"data":"","first_seen":"2025-06-30T17:29:04.8722Z","last_seen":"2026-08-04T05:48:35.057717Z","times_seen":606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/metaMaskWallet-EI6MED72-D5HFOsnz.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3843526f951fc0dd692552df7b63b966","sha1":"0b39098b72c25cf9b875769e97da7066ed020628","sha256":"bef73ae2f7d251d832d85dc997d27a77805b59a8c62fbc5c0a9e4d2b7b897492","sha512":"32157c1166200b4d27247ac8371f9b7d4c49ee9e9e0e879a8c12ab1136515723b94fb0bd9e89556eb143f3c18c2f8e336b1da96c5892e0ce5a0c889556d11e7a","ssdeep":"","tlshash":"a24131be29321d4f68729c27df891a4d3122ef7bce146c25ce69121ccd63719b1e0a31","size":2203,"data":"","first_seen":"2026-03-27T21:51:04.777125Z","last_seen":"2026-08-04T05:48:35.056317Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index.es-ZkcRUGfK.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c389a8b9c6609f603ba86dbfb868670","sha1":"4626abab6c0738e9646f4d1ab2096fde75fa6dce","sha256":"3a846f001ec1fcf99519387c8674924a6f66e2e5020765b3d2ada858e61a22dd","sha512":"4400f97d9d20584c3490a6df1a323f3e67048ef7bf42c83f513b877ada69a4dc2d45f2380526e44b8d687bd6aee7640dd87d8cc70bfb63ba68e77104edb18b33","ssdeep":"6144:d0IeYwq9fBLZELc8bzkTDygspJgT8PAfmgjVPmuNVw66BP:dbeYvF9ygspuSAfmgjVPk66BP","tlshash":"ff844d4073a6b07603e665d9e8762201f2395864705cd06cfbacadefae844858b3ff75","size":407688,"data":"","first_seen":"2026-08-04T05:39:36.075619Z","last_seen":"2026-08-04T05:44:21.508185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/fallback-BdI6sB7B.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9442ec60e2198f0291085960caefd91","sha1":"0c777c551655237909d29ff19ee752d01d1a9ad8","sha256":"4facb4321597714b68a8a4264537ec24249b2700b7edf13d79a60b2ad68ede0d","sha512":"1b3fe95d24457169979c3eb747580b7f09f24b60e02a66d785710f10b48a01439d0120f4185fe79fc2fe8e111876c10ff5f9b00fbb4d5029d6daeccf11f28e8c","ssdeep":"","tlshash":"a04196c6e6bb60609955c155c5652029d20ccc0879a780c3fe504bdfbc97649beeef0d","size":2025,"data":"","first_seen":"2026-08-04T05:39:36.064843Z","last_seen":"2026-08-04T05:44:21.495865Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index-D9YT4_pl.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71155b177f0bcc4506d6997aaf709499","sha1":"fe678c1c1cba258731462e561cd581208c7fae59","sha256":"333d93c4a792bbefd625c1577f51f5d9333ba7c2866f0e49cbdb490ce949c373","sha512":"1fdb7d3a70a772b38d90a63a5fdcaecadf2498b6eef3ad91b5d5199fa743cd2c6247f4488e7b7edfe1335bb2a84b7d32330e868faeff8dfa9280c3a76bfa9c6a","ssdeep":"6144:rgRgeHTwqbslw6bLn6Bj211sKzIqk8ruoL4Ld5Y+pOOTmzqk0FrqyYRS7ciRuG6m:0OeTbsK6bO811sKzIawLXpc0FrqyUS7N","tlshash":"98645c84b29570758ee654e5a0372201f235bc01b4cd8464f6e8dafb3ee98894767f3e","size":329370,"data":"","first_seen":"2026-08-04T05:39:36.042325Z","last_seen":"2026-08-04T05:44:21.494639Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/coinbaseWallet-OKXU3TRC-DnGdeF1T.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8e3a76354dc313487eb94d5f21796940","sha1":"e3692b42697ba01c1b611ecebb85d1468795f9d8","sha256":"133743b926c99e64b579434a6f756f59986d4947feafafce2846ff39318d1aa8","sha512":"5f56536192dc1ac7d8edda2e4b264299389ea3db5a032dc233a404c9cd45117df3f9696ab103ac60bfdb3a2b5474a65107bb0ef5934db318a77b9d691e19f662","ssdeep":"","tlshash":"d10126ff11b03c820c37c037a35c760d79706f4b2a651e2e6bd02a10de2943860e1a33","size":816,"data":"","first_seen":"2025-06-30T18:28:52.623675Z","last_seen":"2026-08-04T05:48:35.085349Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/safepalWallet-7MFIBUI7-BFujmVfg.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9758821492b9cebccaf01e9ee3436fbe","sha1":"a957f9eed457e6ed2b53d2d044b2f5f705f87e47","sha256":"73c6fe1a5397767e258959adf6082b42efc7b6bef3466f46038046d3deb5c59f","sha512":"9fe0129bd0fad7c73d235ef3b04f61e9a7b84cdf4da503af19cf9018aaf3b6e92570455fc7122819a15a9dd019ea682af430e4f5653516c33bab04bc299a08ad","ssdeep":"","tlshash":"2a01266e313328867c265c27df54710d8110eeefec60e92e8d7a21046f4aa4cb551a74","size":805,"data":"","first_seen":"2025-10-19T09:11:49.618552Z","last_seen":"2026-08-04T05:44:21.503616Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/login-UP3DZBGS-Db_wM5oQ.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"28b65459ef616c41fcbc14d2cd2d5b6b","sha1":"86909f4bf8887dfaab1476058affbb145ba960dd","sha256":"0495b387d34305302644928b6531de715906a7792bebd23443255a5511c0b713","sha512":"fdecb6cdd43226b57fa759a6a88fc4c2506b38d4e7ed7ca28edb702c0a20b8e0890fa9f63e9b893f6a1754389ca8cd213c1ade58be385ff3525960176a01b8b6","ssdeep":"192:CQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOZ:e4pjZWQufLsSEBovGSjedtqPq2qSqC","tlshash":"1c32dbbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","size":11995,"data":"","first_seen":"2025-06-30T17:29:04.849297Z","last_seen":"2026-08-04T05:48:35.066998Z","times_seen":608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index-D-xKVUkU.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4c8fc8d660362ca51501fec8fa20daa","sha1":"b04075a1777517487d8ad4d4fac6318cae7ce451","sha256":"f6019afcb1fe52b7ad5635473dd52056a28da52b5ba79fff66a993ed3f738c66","sha512":"685dbf0a52e087ef7917a8e61699e1703f4805ef16c1e845dd48074ef95bbefdace5b1cc543603a4a758dd449515d18179935eca533c59a79a2f434431ed7a04","ssdeep":"12288:/JPUU0XXMJEzaI2BgOx5g1zxOvrFu64zfdcKS1b8FXQxXwe6saKEKT9QiEgOIOmB:/TwXMJEOIkrFu647udTdNC+O3NM9F","tlshash":"73559e84b291b57987a344d8186f1004f1351d69f40d88a0b2bcd8be3ff9985e5bbfad","size":1308420,"data":"","first_seen":"2026-08-04T05:39:36.080742Z","last_seen":"2026-08-04T05:44:21.508936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/walletConnectWallet-YHWKVTDY-D3lyiczV.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"07c75d659ccf42b0f285650d330effed","sha1":"19d69164e8b8b965c069816691c1fc636af06f75","sha256":"6fa7eb15946d4f1b38ee89dca64f3b772eac28e8903c81001dc35bd32edb5649","sha512":"f057b9ccbabd042aabcc602f3b801bb22a17905c07263e13bb305676a6143a7608ff43a4e1e16d79041cd5cd3c1f2a7a1fe6eb3a5ff1f8f2f46d46d2c75ecbae","ssdeep":"","tlshash":"1a416bef24b03cd9d43bc5639429301d61722a3bff2d5a559aab62647e65c5020d4633","size":1877,"data":"","first_seen":"2025-06-30T17:29:04.865387Z","last_seen":"2026-08-04T05:48:35.076694Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/parseSignature-DSgRaAl1.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2be35da9af68e0b51f15ed2ff4508861","sha1":"729fd8910717914fe6462bf9e19bd063463eff39","sha256":"2d688d0eb2a02e988a3ec8b5c14ce649f2bca1e80db035bce5bbc846db0df834","sha512":"e82793bd6f840152ffdc26147b830a741b588b67cfeee141a86c5d2ae20bf3afd047e4a1ff0109d7a5ae64d86a1fd9e7fe812d19a19b874a90cd9ea3f440c24b","ssdeep":"","tlshash":"805156ed16d5913dc38135ea64ebb540b06c74e454dc60e6eb5c694f3af4973c918e08","size":2712,"data":"","first_seen":"2026-08-04T05:39:36.061819Z","last_seen":"2026-08-04T05:44:21.507097Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/core-Um1Y18CS.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"754ef635d3078d71020226069b981fe9","sha1":"70f00b28cf353afa10bfc7f273817f54ac1fe042","sha256":"88b9be84a01a5e54fb4e4c86a54765f10c1a299bb8f25d5dd2e400acd8b66b5f","sha512":"0f2348345de981fedafda4684725d1c4fa71fd4054b041d42a477dba09135b09c1dbcfac49774ddeeabad042f9ee3398c3d92b4965ebe9e8e11e032eba645c8a","ssdeep":"12288:BBMn4u45M84omyqXYPswcscjIwkXv4yg46hhz:zMn4u4qtPyqYPJcjIwev4Gm1","tlshash":"eba43a4072a6a43603a751edb8b52201f2341858701ad0adfefc9debdf855864a3ff76","size":470980,"data":"","first_seen":"2026-08-04T05:39:36.046083Z","last_seen":"2026-08-04T05:44:21.505272Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1e60c8d388af41613c47e2aba8284bd","sha1":"4afcc155bff3548f2839fb1e3513cba4c65ef760","sha256":"13b2e3e36ca53c062fcc3fdabbeecf59edb6f72a5dc6f07b0ed83957755cd815","sha512":"6515394f6537b682dac1d1c7a0defce9b372e37496e38a2fb896bd5461f2e0a2f8ce861f4ef308a3f4475fffe95508bcc20732e7724096a445e6df210a786af8","ssdeep":"","tlshash":"3fc012001a392138d0b0300a6b433f8b7a32003a228810202f089e013bf00ab82054e5","size":172,"data":"","first_seen":"2026-07-24T20:45:19.858601Z","last_seen":"2026-08-04T05:44:21.509494Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/okxWallet-QOP2OIPE-KJdrgOlU.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"745fafc5ee4f190912aad251c476676b","sha1":"2a7fd7c59e1ad15e73419dc1b163ef791957880c","sha256":"c147b0f7266346a92be097df1d47321ece872d21a1f4f0f52449055bc758e180","sha512":"f37135bbe6dfae486bf21ad0d8106002c9d372a5acbec19eea3f9b0c6b6cd76029e787638108b8ab19b47deb8eeed8bb99842ee175abb5ffecddcaa18927a919","ssdeep":"","tlshash":"ac21b64f60750adefc2d98a7e37931a682312efa7934d1350988790427dd9ecf024e1c","size":1116,"data":"","first_seen":"2025-06-30T17:29:04.860413Z","last_seen":"2026-08-04T05:48:35.060522Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/clsx.m-DHulAg21.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd64838e50061a16762037242174d321","sha1":"5bc1624ae224e067c9d93bae60c518ca57f48e49","sha256":"fb137b760bacfb05fc2eacfee16f7954a01bd739c1846a2efd5ea53e24f454e1","sha512":"b5207d2b5bb502a387ef3bbc933f4ee8cfa6d2fca59ce3c0514b46ee83e1349746b07ac1b0a37e34b1480cc0721551b151e4126ee79bac1eefa48dfd49035d90","ssdeep":"","tlshash":"4df09ec426c1608153ed58c1952b9143f418876297bcb040f5c0e7b551d4aa5120bff7","size":478,"data":"","first_seen":"2023-12-22T02:32:13Z","last_seen":"2026-08-04T05:44:21.504652Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[MetaMaskHybrid] isInsideMetaMaskBrowser:false","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1700,"column_number":206507},{"level":"log","text":"[MetaMaskHybrid] Using standard metaMaskWallet (desktop)","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1700,"column_number":207871},{"level":"log","text":"[CoinbaseHybrid] Using standard coinbaseWallet (desktop)","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1700,"column_number":210182},{"level":"log","text":"[OkxHybrid] Using standard okxWallet (desktop)","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1700,"column_number":213081},{"level":"log","text":"[SPDIAG]INITmap[actor:server1.conn0.watcher16.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[navType:map[configurable:true enumerable:true value:navigate writable:true] seq:map[configurable:true enumerable:true value:1 writable:true] t:map[configurable:true enumerable:true value:0 writable:true] url:map[configurable:true enumerable:true value:https://aurumfoundation.app/ writable:true] vis:map[configurable:true enumerable:true value:visible writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":16726},{"level":"log","text":"[INFO] SPDIAG:INITmap[actor:server1.conn0.watcher16.process7//obj22 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[navType:map[configurable:true enumerable:true value:navigate writable:true] seq:map[configurable:true enumerable:true value:1 writable:true] t:map[configurable:true enumerable:true value:0 writable:true] url:map[configurable:true enumerable:true value:https://aurumfoundation.app/ writable:true] vis:map[configurable:true enumerable:true value:visible writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"[SPDIAG]NAV_PATCH_FAILmap[actor:server1.conn0.watcher16.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[e:map[configurable:true enumerable:true value:TypeError: can't redefine non-configurable property \"reload\" writable:true] name:map[configurable:true enumerable:true value:reload writable:true] seq:map[configurable:true enumerable:true value:2 writable:true] t:map[configurable:true enumerable:true value:13 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":16726},{"level":"log","text":"[INFO] SPDIAG:NAV_PATCH_FAILmap[actor:server1.conn0.watcher16.process7//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[e:map[configurable:true enumerable:true value:TypeError: can't redefine non-configurable property \"reload\" writable:true] name:map[configurable:true enumerable:true value:reload writable:true] seq:map[configurable:true enumerable:true value:2 writable:true] t:map[configurable:true enumerable:true value:13 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"[SPDIAG]NAV_PATCH_FAILmap[actor:server1.conn0.watcher16.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[e:map[configurable:true enumerable:true value:TypeError: can't redefine non-configurable property \"assign\" writable:true] name:map[configurable:true enumerable:true value:assign writable:true] seq:map[configurable:true enumerable:true value:3 writable:true] t:map[configurable:true enumerable:true value:14 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":16726},{"level":"log","text":"[INFO] SPDIAG:NAV_PATCH_FAILmap[actor:server1.conn0.watcher16.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[e:map[configurable:true enumerable:true value:TypeError: can't redefine non-configurable property \"assign\" writable:true] name:map[configurable:true enumerable:true value:assign writable:true] seq:map[configurable:true enumerable:true value:3 writable:true] t:map[configurable:true enumerable:true value:14 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"[SPDIAG]NAV_PATCH_FAILmap[actor:server1.conn0.watcher16.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[e:map[configurable:true enumerable:true value:TypeError: can't redefine non-configurable property \"replace\" writable:true] name:map[configurable:true enumerable:true value:replace writable:true] seq:map[configurable:true enumerable:true value:4 writable:true] t:map[configurable:true enumerable:true value:15 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":16726},{"level":"log","text":"[INFO] SPDIAG:NAV_PATCH_FAILmap[actor:server1.conn0.watcher16.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[e:map[configurable:true enumerable:true value:TypeError: can't redefine non-configurable property \"replace\" writable:true] name:map[configurable:true enumerable:true value:replace writable:true] seq:map[configurable:true enumerable:true value:4 writable:true] t:map[configurable:true enumerable:true value:15 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"Config state:map[actor:server1.conn0.watcher16.process7//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[config:map[configurable:true enumerable:true value:map[type:undefined] writable:true] configError:map[configurable:true enumerable:true value:map[type:null] writable:true] configLoading:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":8632},{"level":"log","text":"DeBank query status:map[actor:server1.conn0.watcher16.process7//obj31 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:map[type:undefined] writable:true] debankLoading:map[configurable:true enumerable:true value:false writable:true] error:map[configurable:true enumerable:true value:map[type:undefined] writable:true] hasData:map[configurable:true enumerable:true value:false writable:true] hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true] isConnected:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":9048},{"level":"log","text":"=== PRIORITY PLAN USEEFFECT ===map[actor:server1.conn0.watcher16.process7//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[configLoading:map[configurable:true enumerable:true value:true writable:true] debankLoading:map[configurable:true enumerable:true value:false writable:true] hasConfig:map[configurable:true enumerable:true value:false writable:true] hasDebankBalances:map[configurable:true enumerable:true value:false writable:true] hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":10289},{"level":"log","text":"Priority plan useEffect early return:map[actor:server1.conn0.watcher16.process7//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true] noConfig:map[configurable:true enumerable:true value:true writable:true] noDebankBalances:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":10544},{"level":"log","text":"[INFO] MULTICHAIN_DETECTmap[actor:server1.conn0.watcher16.process7//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:11 preview:map[kind:Object ownProperties:map[bw3WcResolved:map[configurable:true enumerable:true value:false writable:true] chainId:map[configurable:true enumerable:true value:56 writable:true] chainsQueueLength:map[configurable:true enumerable:true value:0 writable:true] currentIndex:map[configurable:true enumerable:true value:-1 writable:true] doneKeysCount:map[configurable:true enumerable:true value:0 writable:true] isBinanceMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj36 class:Function displayName:Mt extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12627 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] isCaipMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj37 class:Function displayName:mo extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12667 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] isConnected:map[configurable:true enumerable:true value:false writable:true] isMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj35 class:Function displayName:Xo extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12655 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] safePalWcDetected:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:11] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"Approval check:map[actor:server1.conn0.watcher16.process7//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:20 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:map[type:undefined] writable:true] chainId:map[configurable:true enumerable:true value:56 writable:true] configLoading:map[configurable:true enumerable:true value:true writable:true] debankLoading:map[configurable:true enumerable:true value:false writable:true] hasChainConfig:map[configurable:true enumerable:true value:false writable:true] hasConfig:map[configurable:true enumerable:true value:false writable:true] hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true] hasWalletClient:map[configurable:true enumerable:true value:false writable:true] isConnected:map[configurable:true enumerable:true value:false writable:true] walletClientLoading:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:20] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":20007},{"level":"log","text":"Not connected","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":21189},{"level":"log","text":"Disconnected - resetting state","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":24775},{"level":"log","text":"Config state:map[actor:server1.conn0.watcher16.process7//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[config:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj41 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] configError:map[configurable:true enumerable:true value:map[type:null] writable:true] configLoading:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":8632},{"level":"log","text":"=== PRIORITY PLAN USEEFFECT ===map[actor:server1.conn0.watcher16.process7//obj42 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[configLoading:map[configurable:true enumerable:true value:false writable:true] debankLoading:map[configurable:true enumerable:true value:false writable:true] hasConfig:map[configurable:true enumerable:true value:true writable:true] hasDebankBalances:map[configurable:true enumerable:true value:false writable:true] hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":10289},{"level":"log","text":"Priority plan useEffect early return:map[actor:server1.conn0.watcher16.process7//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true] noConfig:map[configurable:true enumerable:true value:false writable:true] noDebankBalances:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":10544},{"level":"log","text":"[INFO] MULTICHAIN_DETECTmap[actor:server1.conn0.watcher16.process7//obj44 class:Object extensible:true frozen:false isError:false ownPropertyLength:11 preview:map[kind:Object ownProperties:map[bw3WcResolved:map[configurable:true enumerable:true value:false writable:true] chainId:map[configurable:true enumerable:true value:56 writable:true] chainsQueueLength:map[configurable:true enumerable:true value:0 writable:true] currentIndex:map[configurable:true enumerable:true value:-1 writable:true] doneKeysCount:map[configurable:true enumerable:true value:0 writable:true] isBinanceMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj46 class:Function displayName:Mt extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12627 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] isCaipMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj47 class:Function displayName:mo extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12667 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] isConnected:map[configurable:true enumerable:true value:false writable:true] isMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj45 class:Function displayName:Xo extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12655 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] safePalWcDetected:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:11] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"Approval check:map[actor:server1.conn0.watcher16.process7//obj48 class:Object extensible:true frozen:false isError:false ownPropertyLength:20 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:map[type:undefined] writable:true] chainId:map[configurable:true enumerable:true value:56 writable:true] configLoading:map[configurable:true enumerable:true value:false writable:true] debankLoading:map[configurable:true enumerable:true value:false writable:true] hasChainConfig:map[configurable:true enumerable:true value:true writable:true] hasConfig:map[configurable:true enumerable:true value:true writable:true] hasPriorityPlan:map[configurable:true enumerable:true value:false writable:true] hasWalletClient:map[configurable:true enumerable:true value:false writable:true] isConnected:map[configurable:true enumerable:true value:false writable:true] walletClientLoading:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:20] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":20007},{"level":"log","text":"Not connected","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":1701,"column_number":21189},{"level":"warn","text":"WalletConnect Core is already initialized. This is probably a mistake and can lead to unexpected behavior. Init() was called 2 times.","filename":"https://aurumfoundation.app/assets/index.es-ZkcRUGfK.js","line_number":12,"column_number":120492},{"level":"log","text":"[SPDIAG]pageshowmap[actor:server1.conn0.watcher16.process7//obj58 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[navType:map[configurable:true enumerable:true value:navigate writable:true] persisted:map[configurable:true enumerable:true value:false writable:true] seq:map[configurable:true enumerable:true value:5 writable:true] t:map[configurable:true enumerable:true value:216 writable:true] url:map[configurable:true enumerable:true value:https://aurumfoundation.app/ writable:true] vis:map[configurable:true enumerable:true value:visible writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":16726},{"level":"log","text":"[INFO] SPDIAG:pageshowmap[actor:server1.conn0.watcher16.process7//obj59 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[navType:map[configurable:true enumerable:true value:navigate writable:true] persisted:map[configurable:true enumerable:true value:false writable:true] seq:map[configurable:true enumerable:true value:5 writable:true] t:map[configurable:true enumerable:true value:216 writable:true] url:map[configurable:true enumerable:true value:https://aurumfoundation.app/ writable:true] vis:map[configurable:true enumerable:true value:visible writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743},{"level":"log","text":"[INFO] MULTICHAIN_DETECTmap[actor:server1.conn0.watcher16.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:11 preview:map[kind:Object ownProperties:map[bw3WcResolved:map[configurable:true enumerable:true value:false writable:true] chainId:map[configurable:true enumerable:true value:56 writable:true] chainsQueueLength:map[configurable:true enumerable:true value:0 writable:true] currentIndex:map[configurable:true enumerable:true value:-1 writable:true] doneKeysCount:map[configurable:true enumerable:true value:0 writable:true] isBinanceMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj68 class:Function displayName:Mt extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12627 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] isCaipMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj69 class:Function displayName:mo extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12667 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] isConnected:map[configurable:true enumerable:true value:false writable:true] isMultiChainWC:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj67 class:Function displayName:Xo extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:12655 line:1701 url:https://aurumfoundation.app/assets/index-D-xKVUkU.js] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] safePalWcDetected:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:11] sealed:false type:object]","filename":"https://aurumfoundation.app/assets/index-D-xKVUkU.js","line_number":2,"column_number":9743}]},"http":[{"url":{"schema":"https","addr":"aurumfoundation.app/SPDIAG/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.666Z","timestamp":1785822229666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /SPDIAG/api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 159\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":159,"data":"{\"level\":\"info\",\"message\":\"SPDIAG:NAV_PATCH_FAIL\",\"data\":{\"seq\":3,\"t\":14,\"name\":\"assign\",\"e\":\"TypeError: can't redefine non-configurable property \\\"assign\\\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":3064,"size_decoded":3501,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"5865d0c3d9a4403fd7aaf702e6bb8b99","sha1":"d8cc39f1ec6f1d55e637658a62b69a4043fa529e","sha256":"40f2e74a915dfeeaae98269e6b5a4ab974ba21423e1dd9675a0728d3f358d6a5","sha512":"1d2a67a2d5320c7959aa264023651a0b06385ca65c25d3e03f2a56f120b93defecaeb261d8d8eba607926d1ae3f0cba906c103136e320a594623b3586fcdfbaf","ssdeep":"","tlshash":"885131db8d5a4866b120a139b8d1fe0b0427604f5bf99c90b1c6e847cfc5bcdc6a3e64","first_seen":"2026-08-04T05:39:36.037586Z","last_seen":"2026-08-04T05:44:21.491255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/rabbyWallet-GFVPHCTK-CCnTfCkL.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.716Z","timestamp":1785822229716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/rabbyWallet-GFVPHCTK-CCnTfCkL.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3162\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"c5a-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3162,"size_decoded":3605,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3161)","md5":"40592e4c7a225cfe8c7e3aedbe82ff75","sha1":"b85ee488bfc6bdad3081c0ae1e0e9be6b2a564e4","sha256":"d6ddd32ad1ed24ab07fd77c99831f0c92da4d753d854229022b2435777ac780c","sha512":"fbed6be85809c19329c4f28dc6fb4629d7d0604731f4728b24f9b5e717838e43e575de7d6adfa0cff0ca50606c48c9e2351e085108f102a243cdc45985474755","ssdeep":"","tlshash":"bc51ecacb6322e5aa877f84fde59ba1d5020bf6fdc145071ddee23089f427687494520","first_seen":"2025-09-03T16:24:17.0302Z","last_seen":"2026-08-04T05:48:35.068676Z","times_seen":386,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.723Z","timestamp":1785822229723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155389\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-05T19:29:04.152112Z","times_seen":31427,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/favicon.png","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.823Z","timestamp":1785822229823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 59982\r\ncontent-type: image/png\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"ea4e-19faffe4340\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:24 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":59982,"size_decoded":60406,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"ef2fc7957c0c27d2305c5c9f5b01b8ab","sha1":"a15a5b67b088625065d95a3a810dbf13f4cc1540","sha256":"bf71f3fdd435c38d075e3563c0e2fbb7a08b1d88cc8069ad0fbd2964720c7005","sha512":"e293d34f452016044c0c4013fff30a2d78a94684f29fae7e37ce1b7fc5ecb7f00c44d3362739b0e6ce8a3dc5c8098a00657e73699b12b72eff725acef26d183a","ssdeep":"1536:uLkrONuKm16VMAyu6w8MU7YALzSbphBLomeCa9F9i6Cg:OkyIKBIu4dvqpDLomeCKGO","tlshash":"d44302b6067070758fbf93e658e18da4e66ef112a2843acc3375ea4c9c76e106c712b1","first_seen":"2026-07-24T20:45:19.843963Z","last_seen":"2026-08-04T05:44:21.493584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/SPDIAG/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.867Z","timestamp":1785822229867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /SPDIAG/api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 161\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":161,"data":"{\"level\":\"info\",\"message\":\"SPDIAG:pageshow\",\"data\":{\"seq\":5,\"t\":216,\"persisted\":false,\"vis\":\"visible\",\"url\":\"https://aurumfoundation.app/\",\"navType\":\"navigate\"}}"}},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3064,"size_decoded":3501,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"5865d0c3d9a4403fd7aaf702e6bb8b99","sha1":"d8cc39f1ec6f1d55e637658a62b69a4043fa529e","sha256":"40f2e74a915dfeeaae98269e6b5a4ab974ba21423e1dd9675a0728d3f358d6a5","sha512":"1d2a67a2d5320c7959aa264023651a0b06385ca65c25d3e03f2a56f120b93defecaeb261d8d8eba607926d1ae3f0cba906c103136e320a594623b3586fcdfbaf","ssdeep":"","tlshash":"885131db8d5a4866b120a139b8d1fe0b0427604f5bf99c90b1c6e847cfc5bcdc6a3e64","first_seen":"2026-08-04T05:39:36.037586Z","last_seen":"2026-08-04T05:44:21.491255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index-D9YT4_pl.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.937Z","timestamp":1785822229937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/index-D9YT4_pl.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 329370\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"5069a-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":329370,"size_decoded":329817,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31787)","md5":"71155b177f0bcc4506d6997aaf709499","sha1":"fe678c1c1cba258731462e561cd581208c7fae59","sha256":"333d93c4a792bbefd625c1577f51f5d9333ba7c2866f0e49cbdb490ce949c373","sha512":"1fdb7d3a70a772b38d90a63a5fdcaecadf2498b6eef3ad91b5d5199fa743cd2c6247f4488e7b7edfe1335bb2a84b7d32330e868faeff8dfa9280c3a76bfa9c6a","ssdeep":"6144:rgRgeHTwqbslw6bLn6Bj211sKzIqk8ruoL4Ld5Y+pOOTmzqk0FrqyYRS7ciRuG6m:0OeTbsK6bO811sKzIawLXpc0FrqyUS7N","tlshash":"98645c84b29570758ee654e5a0372201f235bc01b4cd8464f6e8dafb3ee98894767f3e","first_seen":"2026-08-04T05:39:36.042325Z","last_seen":"2026-08-04T05:44:21.494639Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/fallback-BdI6sB7B.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.947Z","timestamp":1785822229947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/fallback-BdI6sB7B.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2025\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"7e9-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2025,"size_decoded":2468,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2024)","md5":"e9442ec60e2198f0291085960caefd91","sha1":"0c777c551655237909d29ff19ee752d01d1a9ad8","sha256":"4facb4321597714b68a8a4264537ec24249b2700b7edf13d79a60b2ad68ede0d","sha512":"1b3fe95d24457169979c3eb747580b7f09f24b60e02a66d785710f10b48a01439d0120f4185fe79fc2fe8e111876c10ff5f9b00fbb4d5029d6daeccf11f28e8c","ssdeep":"","tlshash":"a04196c6e6bb60609955c155c5652029d20ccc0879a780c3fe504bdfbc97649beeef0d","first_seen":"2026-08-04T05:39:36.064843Z","last_seen":"2026-08-04T05:44:21.495865Z","times_seen":2,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/walletConnectWallet-YHWKVTDY-D3lyiczV.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.715Z","timestamp":1785822229715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/walletConnectWallet-YHWKVTDY-D3lyiczV.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1877\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"755-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1877,"size_decoded":2320,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1876)","md5":"07c75d659ccf42b0f285650d330effed","sha1":"19d69164e8b8b965c069816691c1fc636af06f75","sha256":"6fa7eb15946d4f1b38ee89dca64f3b772eac28e8903c81001dc35bd32edb5649","sha512":"f057b9ccbabd042aabcc602f3b801bb22a17905c07263e13bb305676a6143a7608ff43a4e1e16d79041cd5cd3c1f2a7a1fe6eb3a5ff1f8f2f46d46d2c75ecbae","ssdeep":"","tlshash":"1a416bef24b03cd9d43bc5639429301d61722a3bff2d5a559aab62647e65c5020d4633","first_seen":"2025-06-30T17:29:04.865387Z","last_seen":"2026-08-04T05:48:35.076694Z","times_seen":595,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index-H1UgodAD.css","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.129Z","timestamp":1785822229129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/index-H1UgodAD.css HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 108572\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"1a81c-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":108572,"size_decoded":109012,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3a9800c8786696b052ce3a33da66b945","sha1":"6f7f17a13d56b6612c2c158c665ed2ba5d858f3b","sha256":"d3231de3260e6587d85247ab2fd0514c429807ebe12e1a1b96e1362159fc6784","sha512":"20c54f960d47157c8fddfa5d125ffff56793690a73c8d78d9e45a2dd9c0decce8a6472e67ba09a94bfef154d5dd03bfff878e2496775ec396a6f8319be043c75","ssdeep":"3072:OYBzQYofh7+tahw8ZUXMGwfC378VQZkt5Fh6Qf:OYBzQYofh7+tahw8XfC378VQZkt5Fh6W","tlshash":"bbb3761c7d1c363e3d2752f482c8a9dc910bb3c5df3e47a7bc9552285ac63e139aa624","first_seen":"2026-08-04T05:39:36.05704Z","last_seen":"2026-08-04T05:44:21.497189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/SPDIAG/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.664Z","timestamp":1785822229664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /SPDIAG/api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 159\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":159,"data":"{\"level\":\"info\",\"message\":\"SPDIAG:NAV_PATCH_FAIL\",\"data\":{\"seq\":2,\"t\":13,\"name\":\"reload\",\"e\":\"TypeError: can't redefine non-configurable property \\\"reload\\\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3064,"size_decoded":3501,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"5865d0c3d9a4403fd7aaf702e6bb8b99","sha1":"d8cc39f1ec6f1d55e637658a62b69a4043fa529e","sha256":"40f2e74a915dfeeaae98269e6b5a4ab974ba21423e1dd9675a0728d3f358d6a5","sha512":"1d2a67a2d5320c7959aa264023651a0b06385ca65c25d3e03f2a56f120b93defecaeb261d8d8eba607926d1ae3f0cba906c103136e320a594623b3586fcdfbaf","ssdeep":"","tlshash":"885131db8d5a4866b120a139b8d1fe0b0427604f5bf99c90b1c6e847cfc5bcdc6a3e64","first_seen":"2026-08-04T05:39:36.037586Z","last_seen":"2026-08-04T05:44:21.491255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/metaMaskWallet-EI6MED72-D5HFOsnz.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.703Z","timestamp":1785822229703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/metaMaskWallet-EI6MED72-D5HFOsnz.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2203\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"89b-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2203,"size_decoded":2646,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2202)","md5":"3843526f951fc0dd692552df7b63b966","sha1":"0b39098b72c25cf9b875769e97da7066ed020628","sha256":"bef73ae2f7d251d832d85dc997d27a77805b59a8c62fbc5c0a9e4d2b7b897492","sha512":"32157c1166200b4d27247ac8371f9b7d4c49ee9e9e0e879a8c12ab1136515723b94fb0bd9e89556eb143f3c18c2f8e336b1da96c5892e0ce5a0c889556d11e7a","ssdeep":"","tlshash":"a24131be29321d4f68729c27df891a4d3122ef7bce146c25ce69121ccd63719b1e0a31","first_seen":"2026-03-27T21:51:04.777125Z","last_seen":"2026-08-04T05:48:35.056317Z","times_seen":298,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:50.109Z","timestamp":1785822230109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 215\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":215,"data":"{\"level\":\"info\",\"message\":\"MULTICHAIN_DETECT\",\"data\":{\"safePalWcDetected\":false,\"bw3WcResolved\":false,\"chainsQueueLength\":0,\"currentIndex\":-1,\"isConnected\":false,\"chainId\":56,\"doneKeysCount\":0,\"sweepPresent\":false}}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://aurumfoundation.app\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:50 GMT\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-05T21:06:09.00676Z","times_seen":180139,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/SPDIAG/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.661Z","timestamp":1785822229661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /SPDIAG/api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 137\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"level\":\"info\",\"message\":\"SPDIAG:INIT\",\"data\":{\"seq\":1,\"t\":0,\"vis\":\"visible\",\"url\":\"https://aurumfoundation.app/\",\"navType\":\"navigate\"}}"}},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3064,"size_decoded":3501,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"5865d0c3d9a4403fd7aaf702e6bb8b99","sha1":"d8cc39f1ec6f1d55e637658a62b69a4043fa529e","sha256":"40f2e74a915dfeeaae98269e6b5a4ab974ba21423e1dd9675a0728d3f358d6a5","sha512":"1d2a67a2d5320c7959aa264023651a0b06385ca65c25d3e03f2a56f120b93defecaeb261d8d8eba607926d1ae3f0cba906c103136e320a594623b3586fcdfbaf","ssdeep":"","tlshash":"885131db8d5a4866b120a139b8d1fe0b0427604f5bf99c90b1c6e847cfc5bcdc6a3e64","first_seen":"2026-08-04T05:39:36.037586Z","last_seen":"2026-08-04T05:44:21.491255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/SPDIAG/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.668Z","timestamp":1785822229668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /SPDIAG/api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 161\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":161,"data":"{\"level\":\"info\",\"message\":\"SPDIAG:NAV_PATCH_FAIL\",\"data\":{\"seq\":4,\"t\":15,\"name\":\"replace\",\"e\":\"TypeError: can't redefine non-configurable property \\\"replace\\\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3064,"size_decoded":3501,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"5865d0c3d9a4403fd7aaf702e6bb8b99","sha1":"d8cc39f1ec6f1d55e637658a62b69a4043fa529e","sha256":"40f2e74a915dfeeaae98269e6b5a4ab974ba21423e1dd9675a0728d3f358d6a5","sha512":"1d2a67a2d5320c7959aa264023651a0b06385ca65c25d3e03f2a56f120b93defecaeb261d8d8eba607926d1ae3f0cba906c103136e320a594623b3586fcdfbaf","ssdeep":"","tlshash":"885131db8d5a4866b120a139b8d1fe0b0427604f5bf99c90b1c6e847cfc5bcdc6a3e64","first_seen":"2026-08-04T05:39:36.037586Z","last_seen":"2026-08-04T05:44:21.491255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/assets-Q6ZU7ZJ5-P8HioiAD.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.719Z","timestamp":1785822229719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/assets-Q6ZU7ZJ5-P8HioiAD.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 23619\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"5c43-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23619,"size_decoded":24064,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23618)","md5":"0be1e539d9c370f71c5ed19f66fb0870","sha1":"b42033f215024e2008bf0d5e032eb8b0df4cd953","sha256":"312c407a303fa7679b7eeccd85173ad7c0967df4f417c4b9e3ce05519ff3e591","sha512":"07bb4c57bd73df5ac1b0031e9d9c94be7ed97758dc07e0cda507b4fafafae3928b59ccdf403a19b3516bcd4721be0242c004c6f0408a52a707380c0b36c36dec","ssdeep":"384:ppByhqW2xs3dwktSu6foTLEQD4zrlqPqo:ppBSqQ3p8BrlqPqo","tlshash":"f8b278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","first_seen":"2025-06-30T17:29:04.8722Z","last_seen":"2026-08-04T05:48:35.057717Z","times_seen":606,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.777Z","timestamp":1785822229777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 215\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":215,"data":"{\"level\":\"info\",\"message\":\"MULTICHAIN_DETECT\",\"data\":{\"safePalWcDetected\":false,\"bw3WcResolved\":false,\"chainsQueueLength\":0,\"currentIndex\":-1,\"isConnected\":false,\"chainId\":56,\"doneKeysCount\":0,\"sweepPresent\":false}}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://aurumfoundation.app\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":418,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-05T21:06:09.00676Z","times_seen":180139,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=c48e333dcad9f79fb44b78c47b6b4afc\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:50.102Z","timestamp":1785822230102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /e?projectId=c48e333dcad9f79fb44b78c47b6b4afc\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurumfoundation.app/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 702\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":702,"data":"{\"eventId\":\"3668a25e-4d7a-4a98-bc0a-2efafff08ea4\",\"url\":\"https://aurumfoundation.app/\",\"domain\":\"aurumfoundation.app\",\"timestamp\":1785822230100,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"projectId\":\"c48e333dcad9f79fb44b78c47b6b4afc\",\"networks\":[\"56\",\"1\",\"42161\",\"8453\"],\"metadata\":{\"name\":\"Wallet Approval\",\"description\":\"Wallet Approval\",\"url\":\"https://aurumfoundation.app\",\"icons\":[]},\"showWallets\":true,\"featuredWalletIds\":[],\"excludeWalletIds\":[],\"enableEIP6963\":false,\"enableInjected\":false,\"enableCoinbase\":true,\"enableWalletConnect\":true,\"features\":{\"email\":false,\"socials\":false},\"manualWCControl\":true,\"basic\":true,\"sdkVersion\":\"html-core-1.7.8\",\"siweConfig\":{\"options\":{}}}}}"}},"response":{"raw":"HTTP/3 202 \r\ndate: Tue, 04 Aug 2026 05:43:50 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a25b3f2a4a79b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1579,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T21:03:26.665966Z","times_seen":17731141,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":3,"connect":17,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.124Z","timestamp":1785822229124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Aug 2026 05:43:49 GMT\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145856,"size_decoded":8135,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"194d9b4264ae31301c9ddcebe7065ca4","sha1":"bc9e7d59e1021aaf4915478b6a459f2ece1dd060","sha256":"82fd0d181927fff9a997dcd3b61fc25d4df92e3bdf91f33bfd01a85b6b2ddf1a","sha512":"73f5e8fce63b94fb920634148e6eaa75736473b467c07e4eb3e9345f60d4fa2b64fd750bbcb25cffce3e06b10b9bbd661bea08826580ca24c5585fa9ec683073","ssdeep":"768:CtFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:5VXPNo6mACNqHvDyWNpQ9","tlshash":"efe31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-06-09T04:03:47.231468Z","last_seen":"2026-08-05T13:56:01.535524Z","times_seen":161,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":40,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/events-DQ172AOg.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.646Z","timestamp":1785822229646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/events-DQ172AOg.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 6126\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"17ee-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6126,"size_decoded":6570,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6125)","md5":"f6a80663ffbb4a6e247d024874a2456e","sha1":"8f64e93e4f832983754e56e37d18f16bff133b2e","sha256":"da208eb12e58611c9ebd0b6c352fc11c64f9f8c7f3f1b44a0f7f2b2c4ea83bac","sha512":"48f7a03a4fe8a76ff77d46b869eea9571d1f31e8fa0385d4d35b8c82a04f2ce0edfbc00618d3ea77f86cb3cbe6125247a3dab958bb790690bf45f39a8478768e","ssdeep":"96:5ER9ttlJTZFWHs9BEdCOoRLUlRHZGAq6vvVu1o3IMmmPaJvsVk:GTrlJTfWMDchq6tu0NPQ","tlshash":"44c153ccb38578b013e7d3abb07f520bf134a594640c5118b246ecf9696bc9e4126fb8","first_seen":"2024-12-25T05:30:42.59477Z","last_seen":"2026-08-04T15:56:43.291579Z","times_seen":669,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/coinbaseWallet-OKXU3TRC-DnGdeF1T.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.707Z","timestamp":1785822229707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/coinbaseWallet-OKXU3TRC-DnGdeF1T.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 816\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"330-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":816,"size_decoded":1258,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (815)","md5":"8e3a76354dc313487eb94d5f21796940","sha1":"e3692b42697ba01c1b611ecebb85d1468795f9d8","sha256":"133743b926c99e64b579434a6f756f59986d4947feafafce2846ff39318d1aa8","sha512":"5f56536192dc1ac7d8edda2e4b264299389ea3db5a032dc233a404c9cd45117df3f9696ab103ac60bfdb3a2b5474a65107bb0ef5934db318a77b9d691e19f662","ssdeep":"","tlshash":"d10126ff11b03c820c37c037a35c760d79706f4b2a651e2e6bd02a10de2943860e1a33","first_seen":"2025-06-30T18:28:52.623675Z","last_seen":"2026-08-04T05:48:35.085349Z","times_seen":434,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T05:43:48.403Z","timestamp":1785822228403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:48 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":3064,"size_decoded":3521,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"5865d0c3d9a4403fd7aaf702e6bb8b99","sha1":"d8cc39f1ec6f1d55e637658a62b69a4043fa529e","sha256":"40f2e74a915dfeeaae98269e6b5a4ab974ba21423e1dd9675a0728d3f358d6a5","sha512":"1d2a67a2d5320c7959aa264023651a0b06385ca65c25d3e03f2a56f120b93defecaeb261d8d8eba607926d1ae3f0cba906c103136e320a594623b3586fcdfbaf","ssdeep":"","tlshash":"885131db8d5a4866b120a139b8d1fe0b0427604f5bf99c90b1c6e847cfc5bcdc6a3e64","first_seen":"2026-08-04T05:39:36.037586Z","last_seen":"2026-08-04T05:44:21.491255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":10,"connect":13,"send":0,"wait":72,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index-D-xKVUkU.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.127Z","timestamp":1785822229127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/index-D-xKVUkU.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1308420\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"13f704-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1308420,"size_decoded":1308844,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39734)","md5":"088b14e2da99b94267a9b51e104f66f6","sha1":"32ee92e565af857cdea52d868ebe81ed03d3f069","sha256":"88999d8d93f0d279c110921ecb030b1e807841d6e2aa4bf0e1e58697d7993c17","sha512":"b6f39b445322e194ce9414e14cfd0725970ac2a17fe7aa5db72e954d6e5ac936b4d99cd83f62965d5d8aa059f7bb738029bf1f8fb449f4f077fc7fa8ffa0acf9","ssdeep":"12288:/JPUU0XXMJEzaI2BgOx5g1zxOvrFu64zfdcKS1b8FXQxXwe6saKEKT9QiEgOIOg:/TwXMJEOIkrFu647udTdNC+Og","tlshash":"94258c9472a5b16947d341a914af0004f2345d1ab40c88a4b6acddfe3fbad8885fbf7d","first_seen":"2026-08-04T05:39:36.074003Z","last_seen":"2026-08-04T05:44:21.502361Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/api/mobile-log","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.691Z","timestamp":1785822229691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"POST /api/mobile-log HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://aurumfoundation.app/\r\nContent-Length: 215\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":215,"data":"{\"level\":\"info\",\"message\":\"MULTICHAIN_DETECT\",\"data\":{\"safePalWcDetected\":false,\"bw3WcResolved\":false,\"chainsQueueLength\":0,\"currentIndex\":-1,\"isConnected\":false,\"chainId\":56,\"doneKeysCount\":0,\"sweepPresent\":false}}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://aurumfoundation.app\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-05T21:06:09.00676Z","times_seen":180139,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/okxWallet-QOP2OIPE-KJdrgOlU.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.712Z","timestamp":1785822229712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/okxWallet-QOP2OIPE-KJdrgOlU.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1116\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"45c-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1116,"size_decoded":1559,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1115)","md5":"745fafc5ee4f190912aad251c476676b","sha1":"2a7fd7c59e1ad15e73419dc1b163ef791957880c","sha256":"c147b0f7266346a92be097df1d47321ece872d21a1f4f0f52449055bc758e180","sha512":"f37135bbe6dfae486bf21ad0d8106002c9d372a5acbec19eea3f9b0c6b6cd76029e787638108b8ab19b47deb8eeed8bb99842ee175abb5ffecddcaa18927a919","ssdeep":"","tlshash":"ac21b64f60750adefc2d98a7e37931a682312efa7934d1350988790427dd9ecf024e1c","first_seen":"2025-06-30T17:29:04.860413Z","last_seen":"2026-08-04T05:48:35.060522Z","times_seen":426,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/safepalWallet-7MFIBUI7-BFujmVfg.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.718Z","timestamp":1785822229718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/safepalWallet-7MFIBUI7-BFujmVfg.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 805\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"325-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":805,"size_decoded":1222,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (804)","md5":"9758821492b9cebccaf01e9ee3436fbe","sha1":"a957f9eed457e6ed2b53d2d044b2f5f705f87e47","sha256":"73c6fe1a5397767e258959adf6082b42efc7b6bef3466f46038046d3deb5c59f","sha512":"9fe0129bd0fad7c73d235ef3b04f61e9a7b84cdf4da503af19cf9018aaf3b6e92570455fc7122819a15a9dd019ea682af430e4f5653516c33bab04bc299a08ad","ssdeep":"","tlshash":"2a01266e313328867c265c27df54710d8110eeefec60e92e8d7a21046f4aa4cb551a74","first_seen":"2025-10-19T09:11:49.618552Z","last_seen":"2026-08-04T05:44:21.503616Z","times_seen":7,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/login-UP3DZBGS-Db_wM5oQ.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.721Z","timestamp":1785822229721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/login-UP3DZBGS-Db_wM5oQ.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/assets/index-D-xKVUkU.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 11995\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"2edb-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":11995,"size_decoded":12440,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (11994)","md5":"28b65459ef616c41fcbc14d2cd2d5b6b","sha1":"86909f4bf8887dfaab1476058affbb145ba960dd","sha256":"0495b387d34305302644928b6531de715906a7792bebd23443255a5511c0b713","sha512":"fdecb6cdd43226b57fa759a6a88fc4c2506b38d4e7ed7ca28edb702c0a20b8e0890fa9f63e9b893f6a1754389ca8cd213c1ade58be385ff3525960176a01b8b6","ssdeep":"192:CQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOZ:e4pjZWQufLsSEBovGSjedtqPq2qSqC","tlshash":"1c32dbbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","first_seen":"2025-06-30T17:29:04.849297Z","last_seen":"2026-08-04T05:48:35.066998Z","times_seen":608,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/clsx.m-DHulAg21.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.939Z","timestamp":1785822229939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/clsx.m-DHulAg21.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 478\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"1de-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":478,"size_decoded":920,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (477)","md5":"dd64838e50061a16762037242174d321","sha1":"5bc1624ae224e067c9d93bae60c518ca57f48e49","sha256":"fb137b760bacfb05fc2eacfee16f7954a01bd739c1846a2efd5ea53e24f454e1","sha512":"b5207d2b5bb502a387ef3bbc933f4ee8cfa6d2fca59ce3c0514b46ee83e1349746b07ac1b0a37e34b1480cc0721551b151e4126ee79bac1eefa48dfd49035d90","ssdeep":"","tlshash":"4df09ec426c1608153ed58c1952b9143f418876297bcb040f5c0e7b551d4aa5120bff7","first_seen":"2023-12-22T02:32:13Z","last_seen":"2026-08-04T05:44:21.504652Z","times_seen":85,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/core-Um1Y18CS.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.945Z","timestamp":1785822229945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/core-Um1Y18CS.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 470980\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"72fc4-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470980,"size_decoded":471427,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37364)","md5":"754ef635d3078d71020226069b981fe9","sha1":"70f00b28cf353afa10bfc7f273817f54ac1fe042","sha256":"88b9be84a01a5e54fb4e4c86a54765f10c1a299bb8f25d5dd2e400acd8b66b5f","sha512":"0f2348345de981fedafda4684725d1c4fa71fd4054b041d42a477dba09135b09c1dbcfac49774ddeeabad042f9ee3398c3d92b4965ebe9e8e11e032eba645c8a","ssdeep":"12288:BBMn4u45M84omyqXYPswcscjIwkXv4yg46hhz:zMn4u4qtPyqYPJcjIwev4Gm1","tlshash":"eba43a4072a6a43603a751edb8b52201f2341858701ad0adfefc9debdf855864a3ff76","first_seen":"2026-08-04T05:39:36.046083Z","last_seen":"2026-08-04T05:44:21.505272Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/api/config","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.688Z","timestamp":1785822229688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurumfoundation.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 797\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"31d-aahPotZUgrG6+PmMBepTJDYXsGc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":797,"size_decoded":1168,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb2d348572ad1de0c68454fc6453b3ad","sha1":"69a84fa2d65482b1baf8f98c05ea53243617b067","sha256":"54afc0dcf6f1b91513c1c99dae4b19057f79e70f354d7a842114a99ba49f76c6","sha512":"74d7480c65594193fd851e32f1a6037835007cbd0650598a130c5144966b75de485bdd2a5cd6b5ad7347c1ff96d554f8f68154cc2122a0f5f0a32900b92bfba2","ssdeep":"","tlshash":"4401f1ce0bfc90c4b126c416609250bcb89b33fe3dafcd04c8978e660b424aa25db4c7","first_seen":"2026-08-04T05:39:36.077075Z","last_seen":"2026-08-04T05:44:21.506261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/parseSignature-DSgRaAl1.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.943Z","timestamp":1785822229943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/parseSignature-DSgRaAl1.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2712\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"a98-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2712,"size_decoded":3130,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2711)","md5":"2be35da9af68e0b51f15ed2ff4508861","sha1":"729fd8910717914fe6462bf9e19bd063463eff39","sha256":"2d688d0eb2a02e988a3ec8b5c14ce649f2bca1e80db035bce5bbc846db0df834","sha512":"e82793bd6f840152ffdc26147b830a741b588b67cfeee141a86c5d2ae20bf3afd047e4a1ff0109d7a5ae64d86a1fd9e7fe812d19a19b874a90cd9ea3f440c24b","ssdeep":"","tlshash":"805156ed16d5913dc38135ea64ebb540b06c74e454dc60e6eb5c694f3af4973c918e08","first_seen":"2026-08-04T05:39:36.061819Z","last_seen":"2026-08-04T05:44:21.507097Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:50.073Z","timestamp":1785822230073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurumfoundation.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 3064\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:50 GMT\r\netag: W/\"bf8-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":437,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T21:03:26.665966Z","times_seen":17731141,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=c48e333dcad9f79fb44b78c47b6b4afc\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:50.104Z","timestamp":1785822230104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /appkit/v1/config?projectId=c48e333dcad9f79fb44b78c47b6b4afc\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aurumfoundation.app/\r\nOrigin: https://aurumfoundation.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 04 Aug 2026 05:43:50 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a25b3f2a4e88723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":527,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-08-05T06:14:11.117826Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":4,"connect":14,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aurumfoundation.app/assets/index.es-ZkcRUGfK.js","fqdn":"aurumfoundation.app","domain":"aurumfoundation.app","tld":"app"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aurumfoundation.app/","date":"2026-08-04T05:43:49.644Z","timestamp":1785822229644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aurumfoundation.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 04:24:49 GMT","end":"Sun, 25 Oct 2026 04:24:48 GMT"},"fingerprint":{"sha1":"E5:1D:1F:76:52:ED:A1:36:8D:50:B7:81:FB:F4:99:D0:1F:0B:97:52","sha256":"6E:E6:14:82:21:EF:13:EC:67:A0:DF:FE:27:1B:CF:7E:44:57:8D:59:DC:E6:17:40:E4:6F:6A:C8:19:8B:8B:C6"}}},"request":{"raw":"GET /assets/index.es-ZkcRUGfK.js HTTP/1.1\r\nHost: aurumfoundation.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aurumfoundation.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 407688\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 04 Aug 2026 05:43:49 GMT\r\netag: W/\"63888-19faffe4b10\"\r\nlast-modified: Wed, 29 Jul 2026 22:28:26 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-powered-by: Express\r\nx-robots-tag: noindex, nofollow\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":407688,"size_decoded":408135,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46531)","md5":"5c389a8b9c6609f603ba86dbfb868670","sha1":"4626abab6c0738e9646f4d1ab2096fde75fa6dce","sha256":"3a846f001ec1fcf99519387c8674924a6f66e2e5020765b3d2ada858e61a22dd","sha512":"4400f97d9d20584c3490a6df1a323f3e67048ef7bf42c83f513b877ada69a4dc2d45f2380526e44b8d687bd6aee7640dd87d8cc70bfb63ba68e77104edb18b33","ssdeep":"6144:d0IeYwq9fBLZELc8bzkTDygspJgT8PAfmgjVPmuNVw66BP:dbeYvF9ygspuSAfmgjVPk66BP","tlshash":"ff844d4073a6b07603e665d9e8762201f2395864705cd06cfbacadefae844858b3ff75","first_seen":"2026-08-04T05:39:36.075619Z","last_seen":"2026-08-04T05:44:21.508185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"aurumfoundation.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}