{"report_id":"25d7a5a6-d33d-4260-981c-2b4729553fdc","version":0,"status":"done","tags":[],"date":"2026-06-10T20:45:06Z","url":{"schema":"http","addr":"app-getrxusd.xyz","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"39afbe5e569269bef9ae91c5a1afd7e6","sha1":"76f9640070386adf295695d97d99229dd39fc8cf","sha256":"a11342f6fdd9a411e6a8b10aefc96aef75bda0030cb089837b48758641662766","sha512":"e56a030a4451d767448f555a10465beaa9dfafe291e81ccfb0bdbb8dcd686c2ed6e30899bed378ab9cc246522d8a94062aadecbecba8d295faa23d20c5871b74","ssdeep":"96:DJFs1Bx13gb61j1l0q7gx10UFZV4jl22D+i8kDNLeOl:H61rpOmULV4jM2D+z0sI","tlshash":"809161a544f1663b18a386a9e9d07f47af81760bce8d29417baf40e31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app-getrxusd.xyz","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T20:45:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"app-getrxusd.xyz","ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-06-10T20:40:47.60103Z","last_seen":"2026-06-10T20:40:49.471697Z","alert_count":0,"request_count":4,"received_data":7461363,"sent_data":1852,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-06-06T23:21:57.898219Z","alert_count":0,"request_count":3,"received_data":3044770,"sent_data":1492,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"meowrpc-mainnet.com","ip":{"addr":"172.67.152.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-08","domain_rank":0,"first_seen":"2026-04-01T13:58:11.866207Z","last_seen":"2026-06-05T04:23:23.273098Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1265,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-06-05T04:23:23.759659Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1256,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-06-05T04:23:22.773124Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-06-05T04:23:23.050857Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":645,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-06-06T15:58:13.781415Z","alert_count":0,"request_count":1,"received_data":249,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":3,"received_data":606652,"sent_data":1439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-06-05T04:23:23.358662Z","alert_count":0,"request_count":3,"received_data":2950659,"sent_data":1421,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"198.13.133.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-06-05T04:23:21.973305Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":649,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52b67e899609ef76feb9b304908f6e86","sha1":"3a91454ec2db719727e8eb84597a695a37c0e6de","sha256":"d92d53155cd441321ddc818c6c335ded0da3af6a3894e9c7ea46ad6cdf232308","sha512":"cd41c7228a4c353c74a52afc0b0cb7161432ae4f8fd6aaf1f61de350fe630b94f76cc16757607950b2a07c4c03a865ea5b1f6970daa4ab9d0ef2b29635f312ae","ssdeep":"6144:VRMvk59jx48/taojdhOV3E9B3snP9BqWdw7wFBSzWb3ckXQF/91uqjk2:V2M/l48wIrjByzGy83","tlshash":"1c35a1e78799dd3f885e85298e3c6d9c40b62c73096da19ef453b258c4fc2524bc7b88","size":1150545,"data":"","first_seen":"2026-06-02T08:49:54.164781Z","last_seen":"2026-06-21T05:28:15.966002Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b4020bebf4d53ae3bdbe908114b38fd","sha1":"be27935df3138e5d531b745cc5a728b4a7c20dd6","sha256":"4d363f44eea8055c88910fad06d90036bd97662a886644a7ea2624c89ac6de67","sha512":"6ffac162ee647b39e2167d434d1d23912fad3c8259cd26c2f2a6aa3e28e54206365838bad412f470c76fc1c2666be1f05a711384dad94058bfaa3cf2be2d8b00","ssdeep":"3072:Lz0Usp3z0UsfKJvtwkH5E40EisJFItE2SjTEZSo/e1h07lcJhB9jmGJbTWA5rNUi:v5SvEZPsnpJT9","tlshash":"609443f8a2c7550fc7cf05c6bdf289c8d871487ed305263aaa03e695ecacce158d2995","size":418610,"data":"","first_seen":"2026-05-12T17:14:33.828157Z","last_seen":"2026-06-21T05:28:15.965309Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33286ff94f986f04221b64404ceb6782","sha1":"cf7598dec50b861e625e19d7473ed2df9152b300","sha256":"c81402569b6fd2536c584d3c88d1bb5e9081d8ce8d499d8a26c0dc70ca6144cc","sha512":"e9790418a63c51047798573ea4d9bfff60a00ff7e1bef6b42e51bc8cb989b2ef53752600ac97f7eb7c6770b4372fd0c436ae3da8ea9dd6ba72a033ecf549d353","ssdeep":"","tlshash":"bd015927222233707cd9d5dca8b6d98e39bb500ae40a0090a08e844c1834bc544f7bdc","size":843,"data":"","first_seen":"2026-06-08T13:08:16.104529Z","last_seen":"2026-06-21T05:24:35.340314Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e436498cf294ed570360ac0c80af611f","sha1":"09949734b32ed4b2d30073835d169e7ff8bb7726","sha256":"71c7e4ac839dd4872d87d82c8a5d29111e973c8f026a9f422cb493a1ec749e46","sha512":"1620edb284960712f531cd2d39a9ebcb2fd871bc1023ddf3a8c64069de6527e81d576eaf39a822b58fee1e891539191b85003578f6128ea299eeaa9c472dbe1a","ssdeep":"","tlshash":"82019e1e25a236318ab3e57c874bbe01292540838408d920396e8a439fc55e80ef48d9","size":679,"data":"","first_seen":"2026-06-09T16:17:33.807117Z","last_seen":"2026-06-11T07:31:32.893406Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75451a37a7b8f9c2558aca4152a5e107","sha1":"bb734834de6eb19095fdfbb19eeb62bcb06be688","sha256":"2723a4ad7240c7bee853d4d4ef5d7eaae882c4d6b5358e86d337cf726be1e80f","sha512":"7383392c5a4320c0f151ff1b88f98f5e1136ec96d6cf82b5b75f632a5ad0ca2fdf7c346e1d57457963ae76cae89b00da3d5b5dbe749b26ab8d13d88a37a2b180","ssdeep":"6144:UK1Ttbhyjg7laKnyNY4ZVnF+5+SONx5TxpVQzGH+nqJoCFLSBC9YUJfdXBgvuRUf:UKJl807l/4yEPa","tlshash":"6b94acb80ff3d8aaca5df4046fb07189d6b97d223e782c44bd77230656fe18112d691a","size":445343,"data":"","first_seen":"2026-06-02T08:49:54.161415Z","last_seen":"2026-06-21T05:28:15.967809Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"340d91dcf13b076921b75300ec47f83a","sha1":"c890f2491c91c557a44ba929c67e08b5944d53ba","sha256":"4463ac697265105c186e84801bbd5bad264f59470d34ff3ec348367d6f2e6f67","sha512":"bf78f6567574d468f2e4255befb3eda23d84676cae1c3da368fbd8763c723eac5e8bbb01f772db90a140a95ae88fde992ebf4105575fe08502e64aedc780658a","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGPQXp91gGT8b:QQqJr/0SVwZmzHCP2aIW","tlshash":"ff55b0e70ac1c92da4afd921ce3c0c7c40f656622d79218be553e9dae6cc3754f8ab44","size":1320082,"data":"","first_seen":"2026-06-02T08:49:54.163198Z","last_seen":"2026-06-21T05:28:15.96723Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3ebeq329.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9ad3d733a2b0250eb50ce4d97ee3807","sha1":"1c481c15dc74b0d51f7bffca3ae4d8ccfc374da7","sha256":"87dbeb7dbdd39c106377e0ca6903e0ed6ade1899fb1dc0c35f37985a59f62879","sha512":"05d2f3536d69b428abf96ef768033f210485b477728ff170591499c29252584ae3e5cab225fcd97595ee19866ee6df7e0f46f439b176e26692a973c973a256dd","ssdeep":"12288:kHhEvcEWE2wBkjtole49j/eodRZ+tNg6d1AWrYiqwnKE7do:kBEvchrpOZhzRZJ6d1AWrYiqwnKE7do","tlshash":"f03533e54593eb99cf50bc43989409eb7c169ae48c4b4825fb23fb51eb85e26cdc3630","size":1135085,"data":"","first_seen":"2026-06-02T08:49:54.159769Z","last_seen":"2026-06-20T20:26:45.111775Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69916dd58afc7cf352911d30199db30","sha1":"71ca913263ab12e32ff882582d474dd37417532f","sha256":"7f73d92880d8649e98f9a825f853cb8656fef7b67e0054f4545b891ec8f78663","sha512":"73342ca7345bf3880f3de4525f6cd31ece8cf983927e695032ead3af3480e81ddf44fcce0c0491aea89807951c0e258a58a2f2e1f8dc984670c5e2e98e00f6cd","ssdeep":"6144:VCfpddNOjw711wgmlnW3ZtnFW5ESuN55LxfVyziH2nuJOC/LeBO9QUJ5dFBEvsRQ:VCBP0k7WWG2ZE","tlshash":"90a4a9790ff3c4a9ca5df404afb07d98d6b57d213e782c41bd76e30696be28016c2a19","size":492622,"data":"","first_seen":"2026-06-02T08:49:54.13099Z","last_seen":"2026-06-21T05:28:15.963029Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dacdecf5c480afb8ba5cbcf85ec1be73","sha1":"5bc58331a27b5ab348811f587c58b2eaadaa1753","sha256":"395dba29ea2cb6c07342fe93644b72b5d4b663d0f931f07289ac5ae109ecfb2e","sha512":"ab0848429cc70b3c376cb543639aae333f2413ac7a802520fcdda281b06abf19f389513c00376f2a3049211edfc44d044563aba104ae8a52f28814b212e68d99","ssdeep":"12288:9pjc8EGkWVeLQpKGpFFsKvl1ytNy6dV+u9YiqSnWsR1X:9Jc8DiGLPzl1T6dV+u9YiqSnWsR1X","tlshash":"c2351de04193ff99cf50bd47589446eb3d16a9f4884f8854fa237b10ab9ae26cec3531","size":1066623,"data":"","first_seen":"2026-06-02T08:49:54.167612Z","last_seen":"2026-06-20T20:26:45.103795Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-22T02:37:20.189128Z","times_seen":4547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/bpY5h09KFT.js","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","size":440892,"data":"","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-06-21T05:28:15.939707Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-06-21T05:28:15.943462Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-06-21T05:28:15.940241Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"613164cb908a94fef66965cf482fc91f","sha1":"5155a6675511f52103a9f532a604e5fc1c9d10ab","sha256":"d0e80072637e0036a4d7ca72afc26f1ef83a3a8ac7418928afeb81194f8d6bdc","sha512":"da93fc262d848da92164b7157ae7da72654c71d8c6f44f8a5d22dcf1c77a31777bf86a7b4fcf70500b59f5def94be5d969a43ec5eeeec6f3796cb14eadfd1bfd","ssdeep":"49152:Cieh7jQTrNtZXp+mO2Z2WqDpffzyyAPBFgXN098iEUaf97B5TDLCbOELesjAxojW:vHNApfmyqbgXN09JLPs","tlshash":"92d55ca0725964ac4fa355d4446f2002f234ac93608dc099f79ceaf76fe58c589bbb3d","size":2873022,"data":"","first_seen":"2026-05-12T17:14:33.831236Z","last_seen":"2026-06-20T20:09:47.301463Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v2.7","filename":"https://fonts-css2-sans.b-cdn.net/index-3ebeq329.js line 1 \u003e Function","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj82 class:HTMLDivElement contentDomReference:map[browsingContextId:10 id:0.37648003441752564] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj83 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.781124275182e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj84 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj146 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj147 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj148 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj149 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj150 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj151 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj152 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj153 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj154 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj155 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj156 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj172 class:HTMLDivElement contentDomReference:map[browsingContextId:10 id:0.37648003441752564] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj173 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.781124275182e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj174 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj236 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj237 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj238 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj239 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj240 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj241 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj242 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj243 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj244 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj245 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj246 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj257 class:HTMLDivElement contentDomReference:map[browsingContextId:10 id:0.37648003441752564] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj258 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.781124275182e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj259 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj321 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj322 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj323 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj324 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj325 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj326 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj327 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj328 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj329 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj330 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj331 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj393 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj394 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj395 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj396 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj397 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj398 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj399 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj400 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj401 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj402 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj403 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj465 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj466 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj467 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj468 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj469 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj470 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj471 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj472 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj473 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj474 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj475 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T20:44:26.348Z","timestamp":1781124266348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-getrxusd.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 17:15:17 GMT","end":"Tue, 08 Sep 2026 18:13:37 GMT"},"fingerprint":{"sha1":"E0:7A:95:3D:53:3F:B9:A7:57:F1:08:FB:21:5F:AC:A6:97:04:64:7E","sha256":"C5:0E:FA:9A:E3:D3:3E:79:51:07:3A:29:B0:BB:D8:52:5A:A2:F9:5F:27:02:3A:0C:88:EC:FB:BA:79:58:F0:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-getrxusd.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 20:44:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Mon, 08 Jun 2026 09:58:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kK9fDArOXdlRNgAwxtDGx4EY5oot65juA9oQOfD%2BT55eNrCmzJkzhf20t%2B%2FDc660djuDog97%2FFvsriDd%2Fuczij8DgWtpSVzcakQXsfCh1TrgmBKPILd3qdoXPfA49myqW%2Bs%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a09b36c8d8d3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2339253,"size_decoded":374949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65441)","md5":"976e584dced056663dfe6eeb74a89cfc","sha1":"1b8a84333486093fc7110622812a3627fc987533","sha256":"04e2b493351795228af96b545f847da8223923bbc4e1d858969671ebd57d1c95","sha512":"c597837b1babe8598800729a99c242e4d5bda666ae17759c5f7973cccd5e641d552ec0dd56072ba210e9999e1c30bba00c6546367473fb11afe651011ec336ae","ssdeep":"12288:xJlPoyVyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AxO:xoePwEeW5AMZFEeW5AOPmEeW5A8","tlshash":"782523b5146d1d9f18998d91d1543b2adfbd3fa3e900c2ee2fc909d266dcc08d922e8d","first_seen":"2026-06-09T16:17:33.804485Z","last_seen":"2026-06-11T07:31:32.88589Z","times_seen":12,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":98,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.619Z","timestamp":1781124274619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-b637b742.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014dba-2bd6be\"\r\nlast-modified: Mon, 11 May 2026 03:32:10 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0b1bde699f8fa863ac20fb5995382a99\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2873022,"size_decoded":779435,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"849741a6bc846f187893ca06e5bcbadf","sha1":"9d42a22be7be2916c34b8b19aff4cef68ce0f07b","sha256":"49c14d0463110a058d5b3cfeff7525dcbd034e0795222b9ede522fee7caa2ef6","sha512":"f39a2f14d7020dd230ef5528ebd21b435f8ef56d8dd7c2adccff3a8fda0f703484b3f20a2558754773871dc2e246236fe44a125d32a3a5914dd8887b4426e30c","ssdeep":"24576:Cieh7jQTrNzRZT7p+mO2Z2iVPxQDpf4YzCLyAPBFT:Cieh7jQTrNtZXp+mO2Z2WqDpffzyyAPf","tlshash":"3d256c9472a5b07543e755d8502b1102f138ac51700d80e8f7acedfb6eb988a86bff79","first_seen":"2026-05-12T17:14:33.795822Z","last_seen":"2026-06-21T05:28:15.938723Z","times_seen":119,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":27,"connect":2,"send":0,"wait":3,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=bda9efcc42bffe7700495dd4dbaf5bb7\u0026st=appkit\u0026sv=react-wagmi-1.8.7","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:37.376Z","timestamp":1781124277376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /batch?projectId=bda9efcc42bffe7700495dd4dbaf5bb7\u0026st=appkit\u0026sv=react-wagmi-1.8.7 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1904\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 202 \r\ndate: Wed, 10 Jun 2026 20:44:37 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a09b370dcd261a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2755,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":10,"connect":11,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meowrpc-mainnet.com/","fqdn":"meowrpc-mainnet.com","domain":"meowrpc-mainnet.com","tld":"com"},"ip":{"addr":"172.67.152.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:35.288Z","timestamp":1781124275288,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: meowrpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Client-Transaction-ID: Snudx4PjGkLnmDBgS9izf9utPZ64JHjUTmdirNTmNoWc0MhF8wFPvjhgtmNvNVl5LkleaIgVAxpLnqBST2eE1LfbY/0=\r\nX-HMAC-Signature: 1781124275S=c\r\nX-Nonce: kcl2kWq8xJr/n92m\r\nX-Payload-Hash: siteVisit\r\nContent-Type: application/json\r\nReferer: https://app-getrxusd.xyz/\r\nContent-Length: 2260\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.435Z","timestamp":1781124274435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 20:44:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 2372737\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oS2z2sNQydpvXSAipVKHit3%2FGseQ7EY1ylFJtxaAbkzAwOZjKk1LhR9ABuSGwFl9qAv5qPNHbRQahbud6F51SbY9WjOpaedjx6dHOQl0YKf4dETN7X1yhv%2F1mawReP7LDsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a09b36fb3a0eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63432,"size_decoded":24470,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-06-21T05:28:15.943462Z","times_seen":391,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.615Z","timestamp":1781124274615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0042-142492\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a8d24506d4e9deda422323b2e1a41e5d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1320082,"size_decoded":282438,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a06dcf0ae36eb0d74fafb9d09c6033d","sha1":"1960604fc7fc992a758d80ee2873c12fb0ff3848","sha256":"80242312c3b0d9ea60b6832c3fbc11b201dd03ffeecd83166eb6eb92f77530d9","sha512":"c5bc4dbeaae92111099a1d44e55f9e596c5f10e451cadb0cec44d9e2f2613990e1b79c01e55d013862f847eac6b65ff16e400de43867a066004b4694e981cd76","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGD:QQqJr/0SVwZmzHCD","tlshash":"22255deb0bd1892db4afd951de3c4c7c40f686622d69218be613e9cbd68c3744f49b48","first_seen":"2026-06-02T08:49:54.145531Z","last_seen":"2026-06-21T05:28:15.948752Z","times_seen":82,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:33.915Z","timestamp":1781124273915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-getrxusd.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: AGYTkeuVaFBZYdWExHfA4g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 10 Jun 2026 20:44:34 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: mliZfqoPji6jgav6H1E0roxjIS4=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":87,"connect":102,"send":0,"wait":26,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.112Z","timestamp":1781124274112,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-getrxusd.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IqNE2RcjGYceWK+xDuqWyg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 10 Jun 2026 20:44:34 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6niO0ce6IJq0U1NioIFnInPKik0=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":24,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:26.810Z","timestamp":1781124266810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-getrxusd.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 17:15:17 GMT","end":"Tue, 08 Sep 2026 18:13:37 GMT"},"fingerprint":{"sha1":"E0:7A:95:3D:53:3F:B9:A7:57:F1:08:FB:21:5F:AC:A6:97:04:64:7E","sha256":"C5:0E:FA:9A:E3:D3:3E:79:51:07:3A:29:B0:BB:D8:52:5A:A2:F9:5F:27:02:3A:0C:88:EC:FB:BA:79:58:F0:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-getrxusd.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 20:44:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 08 Jun 2026 09:58:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2anoqK2%2FjFREqqUkrwx57xZTM0pUOnVsaescMJAu9l9S6bBxMoowmbzQ8U0RsDPC5LEAQte9vd7QcNQLDcLnGIZ%2FROkuR%2BXjwCiYaagiCQoNLHoOj9xtbu0wAzcN831uttp2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a09b36cb9923783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2339253,"size_decoded":375077,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65441)","md5":"976e584dced056663dfe6eeb74a89cfc","sha1":"1b8a84333486093fc7110622812a3627fc987533","sha256":"04e2b493351795228af96b545f847da8223923bbc4e1d858969671ebd57d1c95","sha512":"c597837b1babe8598800729a99c242e4d5bda666ae17759c5f7973cccd5e641d552ec0dd56072ba210e9999e1c30bba00c6546367473fb11afe651011ec336ae","ssdeep":"12288:xJlPoyVyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AxO:xoePwEeW5AMZFEeW5AOPmEeW5A8","tlshash":"782523b5146d1d9f18998d91d1543b2adfbd3fa3e900c2ee2fc909d266dcc08d922e8d","first_seen":"2026-06-09T16:17:33.804485Z","last_seen":"2026-06-11T07:31:32.88589Z","times_seen":12,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/bpY5h09KFT.js","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:26.812Z","timestamp":1781124266812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-getrxusd.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 17:15:17 GMT","end":"Tue, 08 Sep 2026 18:13:37 GMT"},"fingerprint":{"sha1":"E0:7A:95:3D:53:3F:B9:A7:57:F1:08:FB:21:5F:AC:A6:97:04:64:7E","sha256":"C5:0E:FA:9A:E3:D3:3E:79:51:07:3A:29:B0:BB:D8:52:5A:A2:F9:5F:27:02:3A:0C:88:EC:FB:BA:79:58:F0:CB"}}},"request":{"raw":"GET /bpY5h09KFT.js HTTP/1.1\r\nHost: app-getrxusd.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 20:44:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 07 Jun 2026 14:29:10 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a258036-6ba3c\"\r\ncontent-encoding: gzip\r\nage: 252\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=97IYmGz2iwsVSNVysb7qFU7bp0zeFQ11HwoW3QWdnbEW86CpkbryXScU0INdjsKMZsTCeHY7X%2Bq%2Bi8MIMPS%2BcPHGWI3FlPIHQVW%2FW1za9WIc3d%2BFVTdQqRiAsRnV9vZn2IJM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a09b36cb9924783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440892,"size_decoded":118513,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-06-21T05:28:15.939707Z","times_seen":202,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:33.906Z","timestamp":1781124273906,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 14:28:17 GMT","end":"Mon, 20 Jul 2026 15:28:14 GMT"},"fingerprint":{"sha1":"B9:16:06:AD:D9:EA:77:D9:27:01:80:37:57:87:F9:F6:9C:CB:04:68","sha256":"D3:0F:2B:8F:1A:2E:4F:3E:B0:28:48:27:E6:4C:F4:1A:54:C1:76:67:CC:39:98:16:65:25:1D:75:69:A8:3E:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-getrxusd.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LRTN4QSDTZV+85mqUbsBmQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 10 Jun 2026 20:44:34 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: lG1SMg/RKbP9cyc6Vx8J9Myhkho=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWB9XZLeZusLMR; SameSite=None; Secure; path=/; expires=Wed, 10-Jun-26 21:44:34 GMT; HttpOnly\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a09b36f81ecd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":19,"connect":16,"send":0,"wait":333,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:27.272Z","timestamp":1781124267272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 570183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWXWDNndmSZSNlsfNEWtSkfgCqcYj%2BJGU%2BLloYYvPlAiYsUROs0j9Ce1RJ9VIxhMa2mOE6qXiSheEnKJjbrK1sSG0dnWOKIblMBHmmQVq4tcSnlt8MlKoOBUEC0KeOuwPdU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a09b36f6ccfc56c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522095,"size_decoded":159690,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-06-21T05:28:15.940241Z","times_seen":299,"resource_available":true,"data":null}},"time_used":6472,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":18,"receive":6,"ssl":6443},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:33.928Z","timestamp":1781124273928,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-getrxusd.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gKbthd0EgJNK4VN3ZzCmRA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: 3Qxac2JMRbXhHDTGEtXqMVukO8k=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":72,"connect":90,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.624Z","timestamp":1781124274624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 20:44:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230179-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 37915\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMvZSqCxNdCcE4n%2FbMCDQictkPg6tBrYo2r04ox%2BtUZ%2BUjJo84%2FjWBGXT3oF7IeepH4q%2BFuwo0ds4XpILXspgwkAE7eSXqtCODYhRk%2FxvSXT2DFsN0mujjCHDWSsPQYA%2B10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a09b36fc6dfdb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17684,"size_decoded":7775,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-22T02:37:20.189128Z","times_seen":4547,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"198.13.133.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:33.948Z","timestamp":1781124273948,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-getrxusd.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HumgRLtm3axXGTi260fh1Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: A2GsjtQA9Wr+4vFaNc1LEG7Q7HU=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":2028,"timings":{"blocked":0,"dns":689,"connect":892,"send":0,"wait":222,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.245Z","timestamp":1781124274245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-1aoGusm.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e004d-7844e\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:33 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d228760d55a6a419dd3ef271cf25388d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":492622,"size_decoded":110466,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f69916dd58afc7cf352911d30199db30","sha1":"71ca913263ab12e32ff882582d474dd37417532f","sha256":"7f73d92880d8649e98f9a825f853cb8656fef7b67e0054f4545b891ec8f78663","sha512":"73342ca7345bf3880f3de4525f6cd31ece8cf983927e695032ead3af3480e81ddf44fcce0c0491aea89807951c0e258a58a2f2e1f8dc984670c5e2e98e00f6cd","ssdeep":"6144:VCfpddNOjw711wgmlnW3ZtnFW5ESuN55LxfVyziH2nuJOC/LeBO9QUJ5dFBEvsRQ:VCBP0k7WWG2ZE","tlshash":"90a4a9790ff3c4a9ca5df404afb07d98d6b57d213e782c41bd76e30696be28016c2a19","first_seen":"2026-06-02T08:49:54.13099Z","last_seen":"2026-06-21T05:28:15.963029Z","times_seen":106,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":28,"connect":3,"send":0,"wait":2,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meowrpc-mainnet.com/","fqdn":"meowrpc-mainnet.com","domain":"meowrpc-mainnet.com","tld":"com"},"ip":{"addr":"172.67.152.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:35.291Z","timestamp":1781124275291,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: meowrpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-client-transaction-id,x-hmac-signature,x-nonce,x-payload-hash\r\nReferer: https://app-getrxusd.xyz/\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-getrxusd.xyz/","fqdn":"app-getrxusd.xyz","domain":"app-getrxusd.xyz","tld":"xyz"},"ip":{"addr":"172.67.206.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:26.804Z","timestamp":1781124266804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-getrxusd.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 17:15:17 GMT","end":"Tue, 08 Sep 2026 18:13:37 GMT"},"fingerprint":{"sha1":"E0:7A:95:3D:53:3F:B9:A7:57:F1:08:FB:21:5F:AC:A6:97:04:64:7E","sha256":"C5:0E:FA:9A:E3:D3:3E:79:51:07:3A:29:B0:BB:D8:52:5A:A2:F9:5F:27:02:3A:0C:88:EC:FB:BA:79:58:F0:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-getrxusd.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-getrxusd.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 20:44:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 08 Jun 2026 09:58:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JyIkVPhadIAIImCFBfUFGGa9Am8YdNWAULow%2Fe7ILNAIODwHbCqnjNMu7jOuqr87wIKvnIU8S0%2Boei96pfE6gSXAtKCtSAvIjbLy99VjfaB%2B0QXzdF30NDiDnpOvpRqiyqU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a09b36cb891f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2339253,"size_decoded":374809,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65441)","md5":"976e584dced056663dfe6eeb74a89cfc","sha1":"1b8a84333486093fc7110622812a3627fc987533","sha256":"04e2b493351795228af96b545f847da8223923bbc4e1d858969671ebd57d1c95","sha512":"c597837b1babe8598800729a99c242e4d5bda666ae17759c5f7973cccd5e641d552ec0dd56072ba210e9999e1c30bba00c6546367473fb11afe651011ec336ae","ssdeep":"12288:xJlPoyVyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AxO:xoePwEeW5AMZFEeW5AOPmEeW5A8","tlshash":"782523b5146d1d9f18998d91d1543b2adfbd3fa3e900c2ee2fc909d266dcc08d922e8d","first_seen":"2026-06-09T16:17:33.804485Z","last_seen":"2026-06-11T07:31:32.88589Z","times_seen":12,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/compat-2f292440.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:35.822Z","timestamp":1781124275822,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/compat-2f292440.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:35 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014da6-e9c\"\r\nlast-modified: Mon, 11 May 2026 03:31:50 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/28/2026 09:35:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a42ba1005893b2b27b1c3e87aa4f2365\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3ebeq329.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:34.622Z","timestamp":1781124274622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-3ebeq329.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0d01-1151ed\"\r\nlast-modified: Mon, 01 Jun 2026 22:51:45 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 097b76ea0bbb8f9b91d3c5759eff59e3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1135085,"size_decoded":226617,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"880fd4c4d2bd4d033c6769cf3c5836fb","sha1":"e0a781586235ac9386ccec979f60787e7bf59071","sha256":"52b1da2c53fbdd4b4ac9f3c65672bf4ddeb928dc967bdd062c4259c66c4b0385","sha512":"b1915fb019a27429f7396219e64d66852f7b22e88b071e0658df75009e798fc5072e5141181a425ae54eb78cbc4332084bbe3367afb194604fed4588441a11eb","ssdeep":"12288:kHhEvcEWE2wBkjtole49j/eodRZ+tNg6d1AWrYiqwnKE7l:kBEvchrpOZhzRZJ6d1AWrYiqwnKE7l","tlshash":"3e2553f54583bb99ca50fc439ca54eeb7c1599e4884b4825fa23fb50eb89e12cdc3631","first_seen":"2026-06-02T08:49:54.120665Z","last_seen":"2026-06-21T05:28:15.962434Z","times_seen":82,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-65381a41.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-getrxusd.xyz/","date":"2026-06-10T20:44:35.818Z","timestamp":1781124275818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-65381a41.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://app-getrxusd.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-getrxusd.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 20:44:35 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a014db6-293b1\"\r\nlast-modified: Mon, 11 May 2026 03:32:06 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:27\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3cf9a0e64260dc874b5acbac1f2a93d0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":168881,"size_decoded":53922,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T03:29:52.959884Z","times_seen":16625215,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}