{"report_id":"223a8be7-3e90-4d05-bc50-a417a38eea7b","version":6,"status":"done","tags":[],"date":"2026-02-14T09:07:03Z","url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"title":"策略驱动多智能体编剧系统","dom":{"size":396479,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19515)","md5":"b6dac3d9869c7762cdc6b2aa4efb978f","sha1":"9d9e61f351f37fd153a3861744a850a647fc2042","sha256":"1029b66c52e03ffe3672a51876c340ea5b73e584efea5a39a5dfa146efa4b9cb","sha512":"b9b779f35447bcd83f66870e688228cb1eda3f271698ce6f09767fd491c93034aae75bc23ca0f5b72fb69675ed065436ee5cf12a561a3c7988b25b1addfa0bab","ssdeep":"6144:fe/+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrtBwwas7C:fArnxPOvyJZYLQ","tlshash":"7a847d98327911796ea702e5a0af6507b1383413b40d88b1f518fc696bf49d630b7faf","dom_hash":"domhash3205b64b01a687761a2cd081866c3793","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T09:07:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"openclaw.actor/assets/index-BRVPZamE.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"files.manuscdn.com","ip":{"addr":"3.167.2.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":1414307,"first_seen":"2025-03-12T08:00:03.578177Z","last_seen":"2026-02-09T10:39:52.963783Z","alert_count":0,"request_count":2,"received_data":745128,"sent_data":953,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"manus-analytics.com","ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-19T13:04:57.49856Z","last_seen":"2026-02-13T04:14:13.310228Z","alert_count":0,"request_count":3,"received_data":6146,"sent_data":1439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plausible.io","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-12-30","domain_rank":8565,"first_seen":"2019-02-01T08:53:03Z","last_seen":"2026-02-09T08:01:19.835059Z","alert_count":0,"request_count":3,"received_data":7428,"sent_data":1453,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"openclaw.actor","ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-14T09:07:06.079308Z","last_seen":"2026-02-14T09:07:06.079308Z","alert_count":6,"request_count":6,"received_data":9726451,"sent_data":2745,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":4,"received_data":167676,"sent_data":2165,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.manus.im","ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":485297,"first_seen":"2025-03-12T08:00:03.587143Z","last_seen":"2026-02-10T10:07:36.920227Z","alert_count":0,"request_count":1,"received_data":196,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04922dc466f5064568485143fa28245a","sha1":"014a2847682b000a8278fe7384c469d5bb814969","sha256":"1288fa5ce0e4145f3b05569b68ac77f24afbb02d030a0bf497437709db138daf","sha512":"932250bd757f0d63f48245f2ce2b22c8cb692eb9556918e15cc331b4d6971744d34beca7b6b97c601fe41242aea40fd0a61a86117efce91f0c474fd19fdba142","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt0:DrnxPOvyJZYLM","tlshash":"aa748e98327925796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","size":366792,"data":"","first_seen":"2025-12-17T21:55:23.967437Z","last_seen":"2026-06-07T03:56:12.242412Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0f412cce5c5f1659c8d8b9162c1bbd4","sha1":"ae390292d7952a8439ba44c1a8c05caf7d8e94f1","sha256":"4a9b2c51cb9b4d5f41af1dc454fd39c0a7bea892597211d96b489bf0af1fa73c","sha512":"528fa529bdbf9151b027df6a7c9a2db451aedde4c7e47aaf0c3d30263308af7ac9844e5e14b4a37f1640ec5338baa2ef4a3363225eefe57064ae1a7299a5869d","ssdeep":"","tlshash":"70e02bd3430c81e955a08254549d24c8fd0e88062d5a9535ddb5a90444de135d051275","size":385,"data":"","first_seen":"2026-02-14T09:07:11.868993Z","last_seen":"2026-02-14T09:07:11.868993Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-07-24T08:55:35.396515Z","times_seen":688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-07-19T03:33:28.665953Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97247d1a8e9d91cafde0cce7c823b382","sha1":"a7a54c71957545771fd45025084f406c152778c3","sha256":"0291902ff79f5d72058f0ecf27a6261b3c5e757cb12b4f5fe8874e24deefb30d","sha512":"0e0af62f9247d36eb5f13ee0d56997e5404410c896a407cf26c1091fa60cc0d871104162287c132bbd6c53b27cedbba3871d9f46fece018f5060d7635a8db868","ssdeep":"","tlshash":"e0d0a9e4a38cb32d12bc30848b2f334b702e042a19442a933905d257b428f8f8b34ef8","size":241,"data":"","first_seen":"2025-06-01T08:22:11.798063Z","last_seen":"2026-06-01T18:37:29.561286Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.167.2.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-07-19T09:39:33.009306Z","times_seen":311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/assets/index-BRVPZamE.js","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06174bd9a9241de4171dc850bf537ed0","sha1":"6cef1a8c08796251939fcafbceb1b760a909d415","sha256":"8964f983f679bbd24e1588f68fca61a3c393c6aaa1872ff9b18efeec6b5771f7","sha512":"d303e5d4bdacfa3d0c3379f779722259e4292b3df64f0730a1d49ca240357bd7a9e9f6ddcefddffb3744f3e4079bb199e02c9edc5d74bb08a1f7fc6983e70002","ssdeep":"49152:DFwJxM+iG5dGl/fAsvPeUTc6m3XQmWOKiLsmBYfwYAmhO6eZxQVLclWXiB7hdfCx:2L0h5","tlshash":"b2b59ee87295642a4a9345d5507f0103b23c2916700dc4b8fa2cedeb7db688661bbffd","size":2383175,"data":"","first_seen":"2026-02-14T09:07:11.872823Z","last_seen":"2026-02-14T09:07:11.872823Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"openclaw.actor/assets/index-BRVPZamE.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"openclaw.actor/assets/index-BHxy8Enz.css","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:41.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openclaw.actor","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 09:31:36 GMT","end":"Fri, 01 May 2026 10:31:28 GMT"},"fingerprint":{"sha1":"76:22:D9:EF:8E:8C:CA:E2:A7:D1:8F:89:DD:7C:6E:4B:53:75:AF:C5","sha256":"8D:3C:8A:7D:16:55:29:3E:C9:5C:CF:30:1D:AD:C4:DA:D2:E9:62:A4:5C:A9:9E:6E:CD:D7:37:CF:86:B0:9D:F4"}}},"request":{"raw":"GET /assets/index-BHxy8Enz.css HTTP/1.1\r\nHost: openclaw.actor\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cdb692f7e0a783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170235,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dde33e6dce902f925f92eca5b07520b5","sha1":"f71d31c9e30937bc86e34ee7acc4134a9814bc5c","sha256":"881993df14e034e41b4f98dd57f00e8f4351d924de67f4ccd807f1722b44facd","sha512":"476b4ee55ca526795d2139daa840e14f09b9a5c5aae3c05ccf99b9df5aac3e913e7db93893b903e05a46d4ac189e5a4a76ec025c019a4764d294a1cf90b34a9a","ssdeep":"1536:9RbNYhiWwA8EWQq+WeuxOM/PFACagSsMq+WDhzmAkX7zMMD/7HvK9e9tn988R98R:9RbKhiWwWHuEM/PFAgMq+WDhKAj27Ty","tlshash":"fdf3f750b265e53bbc2774fda38cf49c51057084ee2883eef919a12157c3ffa18ab618","first_seen":"2026-02-14T09:07:11.840978Z","last_seen":"2026-02-14T09:07:11.840978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/geist@1.2.0/dist/fonts/geist-sans/Geist-SemiBold.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/geist@1.2.0/dist/fonts/geist-sans/Geist-SemiBold.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.2.0\r\nx-jsd-version-type: version\r\netag: W/\"a3e0-AsR3mvOFEzx32e1r910gRJOHeyY\"\r\naccept-ranges: bytes\r\nage: 160003\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\nx-served-by: cache-fra-eddf8230024-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 41952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41952,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41952, version 1.0","md5":"68c5a93f38f4c49ada1207ac8d0b55ed","sha1":"02c4779af385133c77d9ed6bf75d204493877b26","sha256":"4fe87a988daaf4599ea3b9423d0420199f6c0019a7b5287ba2bb84438e1b7663","sha512":"9800f9903d9845e7d1dd6e970f1d07a5bb06ae9c806ad9767429995675cee9be4d194f94986604f66c94a9526721225d9f3ac6c17f46a5e1592a359ae3268305","ssdeep":"768:1AxR976B3hYVkEBtFFY6J+fjRrLNGE4yDDwjQh5XxaVo:2Bi3hM/tLY6MNGE4yfwjyhay","tlshash":"0c1302c4634c8688ef527537422a7971e86e059e7ba172b5fa976c2f2077f03a10d633","first_seen":"2024-03-05T14:25:03Z","last_seen":"2026-07-06T02:53:12.085583Z","times_seen":50,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/favicon.ico","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openclaw.actor","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 09:31:36 GMT","end":"Fri, 01 May 2026 10:31:28 GMT"},"fingerprint":{"sha1":"76:22:D9:EF:8E:8C:CA:E2:A7:D1:8F:89:DD:7C:6E:4B:53:75:AF:C5","sha256":"8D:3C:8A:7D:16:55:29:3E:C9:5C:CF:30:1D:AD:C4:DA:D2:E9:62:A4:5C:A9:9E:6E:CD:D7:37:CF:86:B0:9D:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: openclaw.actor\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\ncontent-length: 0\r\nlocation: https://files.manuscdn.com/user_upload_by_module/web_dev_logo/310519663270900235/htmHJPAdrhpFHWIa.png\r\ncf-ray: 9cdb69374a64783d-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8407,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T10:50:44.833269Z","times_seen":17500087,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 424\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":424,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://openclaw.actor/\"},\"event_at\":\"2026-02-14T09:06:42.043Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://openclaw.actor/\"},\"event_at\":\"2026-02-14T09:06:42.043Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T10:50:44.833269Z","times_seen":17500087,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":367,"dns":22,"connect":167,"send":0,"wait":107,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.167.2.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:41.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Sat, 14 Feb 2026 06:13:04 GMT\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: SlSzvs2qgA7uyCDHYjL6MHYwtabOmI4YqKkQkWHBe3brnqYo8nEz6g==\r\nage: 11343\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-07-19T09:39:33.009306Z","times_seen":311,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":49,"dns":41,"connect":3,"send":0,"wait":1,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/poster-en.png","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openclaw.actor","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 09:31:36 GMT","end":"Fri, 01 May 2026 10:31:28 GMT"},"fingerprint":{"sha1":"76:22:D9:EF:8E:8C:CA:E2:A7:D1:8F:89:DD:7C:6E:4B:53:75:AF:C5","sha256":"8D:3C:8A:7D:16:55:29:3E:C9:5C:CF:30:1D:AD:C4:DA:D2:E9:62:A4:5C:A9:9E:6E:CD:D7:37:CF:86:B0:9D:F4"}}},"request":{"raw":"GET /poster-en.png HTTP/1.1\r\nHost: openclaw.actor\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 6792853\r\ncf-ray: 9cdb69364c83783d-OSL\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6792853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2752 x 1536, 8-bit/color RGB, non-interlaced","md5":"2ea21d3a39a7c539c4de95340f33b7ae","sha1":"992d7861d7f8ad57b9125c80de7754b1fbe52e90","sha256":"12a41007146b768509a46f77e7c9d03198775cdae9c0a04984b34ede7c28ef13","sha512":"bb5f0ff14b44a1b6b32154a28a12e875fbf52fa0dbff9e05f740fc7b80bd6c1c4fb7125de7dcbf0b10daced9d97dbc7e947bc530251e9583044d6d4ba5e9f47c","ssdeep":"24576:N96AgcOaixeUdyDfkGJ3v53724inYdnOeEmt:Nk31acezTZh372VYvt","tlshash":"6e253382fe49bfc3b59fe462eb71ca660928c1025f581a613846c9bc32475ec5b4bfc5","first_seen":"2026-02-14T09:07:11.848608Z","last_seen":"2026-02-14T09:07:11.848608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":449,"receive":329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/user_upload_by_module/web_dev_logo/310519663270900235/htmHJPAdrhpFHWIa.png","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.167.2.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /user_upload_by_module/web_dev_logo/310519663270900235/htmHJPAdrhpFHWIa.png HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://openclaw.actor/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8407\r\ndate: Sat, 14 Feb 2026 09:06:44 GMT\r\nlast-modified: Fri, 30 Jan 2026 20:46:20 GMT\r\netag: \"ab5a77a72c18c683e5ae22ff4bc0deae\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1w5IMRudCI_G1Qt05nlH4p-AsaBpcJhTcnxyuF4PKqPBOicAQWc47w==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":8407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"ab5a77a72c18c683e5ae22ff4bc0deae","sha1":"7a7e9b66001e6dce0d86235079be2e505291f021","sha256":"9741e9591b9c37742cd624ca32a2fa92a4e23335daba172f03e8a6d564b7dcc5","sha512":"2f8a1037a8d8eca7eb5889e52e5751f173098c9f1f8499085497fd9205c2afddaf2d4f1370a5639d2ccda990557917881166facd9bf68d93d0500a4b3fba6e68","ssdeep":"96:5vLdwMNZMDlM7VzWyJ6lDwrGwVfKvrS4HJ2RxjnqcNbxzqwLaaLRV67V1T+:5vBJNZ2GWyeDXjSAJ2RxjfpxzqgR6Hi","tlshash":"40020b87a13146b15805804b4cb5ea0d25617b37c298a0dcc396aefcb0ced4afe9f933","first_seen":"2026-02-14T09:07:11.850968Z","last_seen":"2026-05-19T00:13:35.524173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openclaw.actor","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 09:31:36 GMT","end":"Fri, 01 May 2026 10:31:28 GMT"},"fingerprint":{"sha1":"76:22:D9:EF:8E:8C:CA:E2:A7:D1:8F:89:DD:7C:6E:4B:53:75:AF:C5","sha256":"8D:3C:8A:7D:16:55:29:3E:C9:5C:CF:30:1D:AD:C4:DA:D2:E9:62:A4:5C:A9:9E:6E:CD:D7:37:CF:86:B0:9D:F4"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: openclaw.actor\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://openclaw.actor/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 35\r\nserver: cloudflare\r\ncf-ray: 9cdb693b2fbf783d-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: trpc-accept, Accept-Encoding\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"66bbd4885819692adc970633d13ebcc4","sha1":"4b257f0f5fce8e35a9a4bd1efea7d2dfe27b8525","sha256":"6578578485e8b3efa9586df2647cea5d7eb0e7fec6a0ae9be8002f1b86b36556","sha512":"7d20659c1a98395cb3fc5dff298da69a5331da589b2c6c2ace3a7f6d7d485569e65cdbd8518491af239a2993719d5996b257587c1bb66d6aa4f3574dabcb7f00","ssdeep":"","tlshash":"19800088bcc003080e28ce8aec00808283083a2a02288e2a00883a0082c803c3ab8a20","first_seen":"2023-06-03T07:14:51Z","last_seen":"2026-07-22T11:59:11.953063Z","times_seen":344,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:43.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://openclaw.actor/\r\nContent-Type: application/json\r\nContent-Length: 238\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:43 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODhKSGkf7miN4r5tWT%2BcMfrqq%2FDaFLxQOKecozlmzdq8CkbmaA7EoVyxzzQ3Hi4LPdbwFBKsKLv1UL684u9a%2FHoPZBShZRYbzGZ8afJGYu3iSjk%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb693c8f98b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d154d546560e7737fd59e62c6ca495c","sha1":"50c4f2af13c340f9f78cce774d9c1413d299c12a","sha256":"5c33f7df2276583289f1ae80da184e5f3fd20084eff8176f47dda5e568ac0c0c","sha512":"dc679d119966d8e5b3adfae9e22398b20f9baa2e93ecec927b77f38cbba1f3ce17a305b147eb9e3c5db460c8772cee4a84ab0cf8e406315c2ffacb8db2642b61","ssdeep":"","tlshash":"98e0a39a05171ead7522af415c053982071930e20ee0109d81e55698ce297939a9e265","first_seen":"2026-02-14T09:07:11.854123Z","last_seen":"2026-02-14T09:07:11.854123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/assets/index-BRVPZamE.js","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:41.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openclaw.actor","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 09:31:36 GMT","end":"Fri, 01 May 2026 10:31:28 GMT"},"fingerprint":{"sha1":"76:22:D9:EF:8E:8C:CA:E2:A7:D1:8F:89:DD:7C:6E:4B:53:75:AF:C5","sha256":"8D:3C:8A:7D:16:55:29:3E:C9:5C:CF:30:1D:AD:C4:DA:D2:E9:62:A4:5C:A9:9E:6E:CD:D7:37:CF:86:B0:9D:F4"}}},"request":{"raw":"GET /assets/index-BRVPZamE.js HTTP/1.1\r\nHost: openclaw.actor\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cdb692f7e00783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2383175,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36011)","md5":"b355802f08d2bb3e215b02a03c68d0db","sha1":"19db927711b2e1e7bdda395531e4fc7d9cd22682","sha256":"ffab42600ce4d2c785ee411000828b15de755c83ea5718a42245df74bcd55aa1","sha512":"ed0d62d7d3d050caad737d5fe50b7c031a1e98202af7f1549dc5f912d11b72ecae9158a680e79e314b27439e421c04fa5dc560daca08e9d288b94de791f400c2","ssdeep":"24576:DDZgjJxM+iG5dtA/t/fAsvPuZUTc6m3XQmWOKiLsmBYeEwYAmhO6eZxQVLclWj:DFwJxM+iG5dGl/fAsvPeUTc6m3XQmWOu","tlshash":"75257dd472a560268aa785e6543f0003b3383416740dc46cb91cedeb7ab5989b1fbfbd","first_seen":"2026-02-14T09:07:11.856597Z","last_seen":"2026-02-14T09:07:11.856597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:41.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqMCE5hiXyT548qBnItW0Bx1agx2f7njKxJp1i6xFYnydC2whYvpi2SywZlz7qLOZ11r02tcfrnfz3%2BmNkTax%2BNv1O1EsgZXZjF6x%2BSq8gRwiaQ%3D\"}]}\r\ncf-ray: 9cdb692fe9a990fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-07-24T08:55:35.396515Z","times_seen":688,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":56,"dns":22,"connect":8,"send":0,"wait":129,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://openclaw.actor/\r\nContent-Type: text/plain\r\nContent-Length: 125\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://openclaw.actor/\",\"d\":\"manus.space\",\"r\":null,\"p\":{\"domain\":\"openclaw.actor\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJQRsEZesN6fi90-KAiO\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/14/2026 09:06:42\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: e8c92d9a25a52f22a6609624c7e280e9\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-24T10:50:02.839855Z","times_seen":441602,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":12,"dns":0,"connect":4,"send":0,"wait":31,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://openclaw.actor/\r\nContent-Type: text/plain\r\nContent-Length: 93\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://openclaw.actor/\",\"d\":\"manus.space\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJQRsEZRVmnyrqdLLLQE\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/14/2026 09:06:42\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: c38c6aff95335edb15f99f479e348ef9\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-24T10:50:02.839855Z","times_seen":441602,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":32,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/geist@1.2.0/dist/fonts/geist-sans/Geist-Bold.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/geist@1.2.0/dist/fonts/geist-sans/Geist-Bold.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.2.0\r\nx-jsd-version-type: version\r\netag: W/\"a2a8-+p8kWtaY1akR9KjBupdAR609//0\"\r\naccept-ranges: bytes\r\nage: 1837162\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\nx-served-by: cache-fra-eddf8230105-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 41640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41640, version 1.0","md5":"943d9ba8c41fcbf2b0a7a1c6319d8f93","sha1":"fa9f245ad698d5a911f4a8c1ba974047ad3dfffd","sha256":"df796d230a4d4f51536ab0b28cb83757623082a5b0d0cfa1cbb7a12f77492c81","sha512":"be82fb445ff367f70aa67b29211d694f1ff59781509199a79fdaff60c8211ffa4b25011e967023354cd90748925cb930a31c94e973a8fe14038ceb22922f7ae7","ssdeep":"768:MhjLDl4APsxDXHCItdKWa0+oP9fmAgwj6ejEXsyupLYV/xdP1qsodVxD:eTlzYDSIPKW3PgVwG7XslcV5d9tOH","tlshash":"8e13f165560b2c5f83e9f477c01720bfdaadcae2cda4fc090a99e717a3a446ca4c3152","first_seen":"2024-08-20T08:20:14.255384Z","last_seen":"2026-05-31T00:27:05.226216Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openclaw.actor/","fqdn":"openclaw.actor","domain":"openclaw.actor","tld":"actor"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:06:40.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openclaw.actor","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 09:31:36 GMT","end":"Fri, 01 May 2026 10:31:28 GMT"},"fingerprint":{"sha1":"76:22:D9:EF:8E:8C:CA:E2:A7:D1:8F:89:DD:7C:6E:4B:53:75:AF:C5","sha256":"8D:3C:8A:7D:16:55:29:3E:C9:5C:CF:30:1D:AD:C4:DA:D2:E9:62:A4:5C:A9:9E:6E:CD:D7:37:CF:86:B0:9D:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: openclaw.actor\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cdb6928ae48783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34386)","md5":"85cff6e4fbc9767a038e03d73180c416","sha1":"518c8cadab63e87df6b74391d12e876080eac434","sha256":"bcd0a09123dfc8ddee29a56f25110a9a9abcb7ee172a4b99f87abd191fe8d23e","sha512":"d624fea850b9b4db9f08de02ec03330ee9ab7267a923a7a31e9e13eab75461bf7c18639cf69e9e4c6b235a410302b5be0cabcdb829a3244a182353768eef2388","ssdeep":"6144:f+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt0:3rnxPOvyJZYL8","tlshash":"b0748e98327915796ea302e6a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-14T09:07:11.863135Z","last_seen":"2026-02-14T09:07:11.863135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":62,"dns":41,"connect":1,"send":0,"wait":832,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"openclaw.actor","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:41.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:06:41 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 11:48:12\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 3077138f194d89a97dd88ac529514ea0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-07-19T03:33:28.665953Z","times_seen":434,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":37,"dns":34,"connect":1,"send":0,"wait":3,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/geist@1.2.0/dist/fonts/geist-sans/Geist-Regular.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:41.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/geist@1.2.0/dist/fonts/geist-sans/Geist-Regular.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.2.0\r\nx-jsd-version-type: version\r\netag: W/\"9c50-fmgcvoo7Pvi75XN7wkBOp5g4i4s\"\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 09:06:41 GMT\r\nage: 1818220\r\nx-served-by: cache-fra-eddf8230021-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40016\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 40016, version 1.0","md5":"793c44c57a90b6343a22d5cbcb4fcc66","sha1":"7e681cbe8a3b3ef8bbe5737bc2404ea798388b8b","sha256":"0240fbeb2a166a3284cc44166ac33f18bc309002d266f67090d9ad3719db5709","sha512":"c75c955419c15be791ed959d27d50e125fcd7a5cbb9416b3713cf0554e94e3757bcc8834b40467ef8beee56e15fb3760dd8d646d3c1589dd46877fcced4c4116","ssdeep":"768:pBHLCHgN2gQLt6lT5ZxeHwFe8+7O0sbEM2wzr1Rz772wW2mOwnbyrx:p9u42Ht6FDxe0+hs9TzvvO2mOaS","tlshash":"b603f10f6574fe864f02e95bb867a7438116c7e03e1a789715c5804ef3acd3b58229af","first_seen":"2024-08-20T08:20:14.243641Z","last_seen":"2026-07-06T02:53:12.077015Z","times_seen":69,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":56,"dns":20,"connect":13,"send":0,"wait":49,"receive":20,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/geist@1.2.0/dist/fonts/geist-sans/Geist-Medium.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:42.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/geist@1.2.0/dist/fonts/geist-sans/Geist-Medium.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://openclaw.actor/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.2.0\r\nx-jsd-version-type: version\r\netag: W/\"a08c-dN/qH0c4qjo3RGmYZnJk+nwKtT0\"\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 09:06:42 GMT\r\nage: 1654891\r\nx-served-by: cache-fra-etou8220073-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 41100\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41100,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41100, version 1.0","md5":"5c409487e34b8738fcdcd8a011b838ad","sha1":"74dfea1f4738aa3a37446998667264fa7c0ab53d","sha256":"07e38ae4662b862ba270526394f1c8d6ce4d2da49fd4921e7f6c339691e9dc02","sha512":"7093c363190c7452cfbd99026f1ac58a054c82044da869be7272ff9d79687b758f1cc230296a44dd92539f3389b77d797381995e0c5fe3a4b980195f597336ac","ssdeep":"768:PNokqv1yKoUZzHTDbCgPQbpTvLvJo0O99tC0BYXUbPgRTQtFyQxSADwe1S:+T8KoUTPCgIbpTvDJe9tJB/bPgR8VLI","tlshash":"6903f11653b07e4498e56f731cfd7d71d05118f32a26c1c63a89494aa7cae790ba3817","first_seen":"2024-03-05T14:25:03Z","last_seen":"2026-07-06T02:53:12.152488Z","times_seen":54,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://openclaw.actor/","date":"2026-02-14T09:06:43.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://openclaw.actor/\r\nOrigin: https://openclaw.actor\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 14 Feb 2026 09:06:43 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8s2lmNEFMN4Pl%2BaDU%2BI1iLhV7Q0evkl9ltSPZA1xXaHlWOsS8MtGL8IFWOMGSYKVzSRSzv3LivyXOtLqOBQCSUbJZOk0mSK%2BmWCHLzkZ51nCvls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb693b9f57b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T10:50:44.833269Z","times_seen":17500087,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":55,"dns":28,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}