{"report_id":"2c77dff3-7700-490f-af29-b8e9df661075","version":6,"status":"done","tags":["crypto","phishing"],"date":"2025-08-07T11:28:39Z","url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"title":"Green Crypto | GroveCoin"},"submit":{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-11T11:28:39Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":32798,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":0,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2025-08-07T03:21:26.620697Z","alert_count":0,"request_count":12,"received_data":7848969,"sent_data":6802,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":422202,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-08-02T09:16:45.809653Z","alert_count":0,"request_count":2,"received_data":815355,"sent_data":868,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"secure.grovetoken.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-11-20","domain_rank":0,"first_seen":"2023-04-10T18:07:01Z","last_seen":"2023-04-10T18:07:01Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1048,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.embr.org","ip":{"addr":"3.98.226.217","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"domain_registered":"2018-06-01","domain_rank":0,"first_seen":"2022-11-03T12:57:13Z","last_seen":"2023-05-23T18:46:55Z","alert_count":0,"request_count":2,"received_data":1312,"sent_data":1108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.foxycart.com","ip":{"addr":"3.167.2.67","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2006-06-11","domain_rank":45249,"first_seen":"2017-10-26T06:44:02Z","last_seen":"2025-08-02T12:09:37.47993Z","alert_count":0,"request_count":2,"received_data":701645,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-08-07T11:28:42.002886Z","last_seen":"2025-08-07T11:28:42.002886Z","alert_count":79,"request_count":139,"received_data":6213408,"sent_data":70531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":18,"received_data":711954,"sent_data":10188,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-22T19:28:46.37338Z","times_seen":50228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webflow.5b5ea6fd.c26cd0a998149593.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff522c9c55c430addecf845ffbfd2d1","sha1":"aa071195303592628d9a786f7ec934d2c3db45e9","sha256":"427fc781524009e8a8a1b6421dc1f19d85dac545fc3f45d931f6f1bb9dd86624","sha512":"5438e4d49ec01e4caa9947067e27cb97acd2ae9ea82aa31210726f5173a66c33b377edbc393c36253c59a2d4c0361438da4db2d618606c227251f53c70aa81aa","ssdeep":"","tlshash":"6c41d8983994f5b906a750c41a3f8046f3276576217df4e0e322ccf964a069b4073f73","size":2351,"data":"","first_seen":"2025-08-07T11:28:59.656482Z","last_seen":"2025-08-07T11:28:59.656482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.foxycart.com/secure.grovetoken.com/foxycart.jsonp.sidecart.min.1752850871.js","fqdn":"cdn.foxycart.com","domain":"foxycart.com","tld":"com"},"ip":{"addr":"3.167.2.67","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d8b8736707b4a6d53a2afc416d4a8e","sha1":"e4851c41c0ff40833d5a3ca8757c073829717b89","sha256":"8cd180b03b9b38f487692d3201ec78adf46b5f778a79e472e8d9c76a643116a4","sha512":"cebf65f0ba5e53aa7a13d37b8312b7d8b46a3c58c95cf30cb75aa1cf57624bc65c5939e91cd7520d379d55755d209231db4f4dff8f98e6eb16a719b2f98219eb","ssdeep":"3072:awtAkztSKXsx/BbyrGsPh/TG71f/EtWkeMh/U044bFBUpFHIYmqsaGNbHD2t17Va:awtAkztGceMh/U048FBUp0qeN43OO0","tlshash":"92842a066da4103286fb05a454273e061b3865d226c42b50fbeccbec17f9d98f177bae","size":385568,"data":"","first_seen":"2025-08-07T11:28:59.806352Z","last_seen":"2025-08-07T11:28:59.806352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/utils/disable-devtool.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e12fedc7e315e996fa3cbee1c5ade178","sha1":"ef1e6d083fc24f4fabf59b63d86a703b5af4b7aa","sha256":"6ec537d8fa199eb276afac7ea46845f4192c7707958617fb0cced4503e730216","sha512":"21f07e0be4cd073c33ec1961f1651bfb2df94b2a75c2c2b553261e60dca0f210a955556fda67c4f7cdfa6ca1a2f27f8a7456b4476bd72eb46d139b2a8a5d8fd7","ssdeep":"","tlshash":"eb11c209b920b49761ab52ba811f100fb23094b7d99d54e026349cf5aef54ad05c7f0d","size":1000,"data":"","first_seen":"2024-08-20T17:58:44.771226Z","last_seen":"2026-05-16T20:53:33.555649Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/loader.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8ac2f9801886ad2622cf8a59f33f71b","sha1":"137b68cc85532778501c494084e80bb3972ffd6d","sha256":"acc5a73799621990e87558273c5dcb45313ece8ffd2573de602339c99f130cce","sha512":"cb5c683aa704988a9bbfe1a41401dd50ad20193ac267c76618a45d989ab4728d50024ee46e69e244b7269384d0ef7c6f20e91aeca6b211206e58540dfba437b2","ssdeep":"","tlshash":"ea11ce3e1c12d23c48b8b54df56bffd835a037136934e4879059cc6da504ee3d46aae9","size":1016,"data":"","first_seen":"2025-08-07T11:28:59.773302Z","last_seen":"2025-08-07T11:28:59.773302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34a41de8cebefa73b1552c7f766fc182","sha1":"90d0bab4f506bf3f58b71bcfdf7e84a34d559be8","sha256":"6ec104492e3d6d7b6f34afbbc3121b01b7610b608ecd0414eb9439b9b9382d56","sha512":"8a18aaed712fcdec09e86bde4d888cf116047abd4d6929adbdc155c472ab09c6070d915a7e9705692c3f53bf26db08e5cc4602e39daa4d7b251d7d09c9300fee","ssdeep":"","tlshash":"b2d012451c6d44a211534c24f71fb19dd0014ef73b55684039ccc21b1fb8cc8015910d","size":252,"data":"","first_seen":"2025-08-07T11:28:59.916645Z","last_seen":"2026-03-25T22:21:40.820944Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webfont.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a03c2a7cdd91ff4f38e0d643b354e87","sha1":"4dc377dc1222e2998d9dd359e900a773eb1d90f3","sha256":"d073aa662156a87c292431a2736866f5a3254c2640ce7dcfe36bd767d145cd6d","sha512":"afef7a4c46fd09a9d007356dbd4b1c1a14889cad5602814917258072bbcc97fd59b0bb027f7d8be02dfc04d157ed79993298b49cf064bc732251c75c0a1c3d8a","ssdeep":"","tlshash":"0e1121bdbe80717787c051f67f2fe0cf922ee58d344e46545401c1e5083a15a81ede64","size":1000,"data":"","first_seen":"2023-06-04T15:17:11Z","last_seen":"2026-06-07T01:31:19.1394Z","times_seen":967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/foxycart.jsonp.sidecart.min.1752850871.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d8b8736707b4a6d53a2afc416d4a8e","sha1":"e4851c41c0ff40833d5a3ca8757c073829717b89","sha256":"8cd180b03b9b38f487692d3201ec78adf46b5f778a79e472e8d9c76a643116a4","sha512":"cebf65f0ba5e53aa7a13d37b8312b7d8b46a3c58c95cf30cb75aa1cf57624bc65c5939e91cd7520d379d55755d209231db4f4dff8f98e6eb16a719b2f98219eb","ssdeep":"3072:awtAkztSKXsx/BbyrGsPh/TG71f/EtWkeMh/U044bFBUpFHIYmqsaGNbHD2t17Va:awtAkztGceMh/U048FBUp0qeN43OO0","tlshash":"92842a066da4103286fb05a454273e061b3865d226c42b50fbeccbec17f9d98f177bae","size":385568,"data":"","first_seen":"2025-08-07T11:28:59.806352Z","last_seen":"2025-08-07T11:28:59.806352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6662dd096d04b3e74cf5135ad974966","sha1":"1c18264bebda318c740e6d47904f5606b509c1a3","sha256":"f0bf885e018809719d566099c6cb04f59e8f553a0720fa82f925b97007789c4e","sha512":"385827093a8e8e96fdad94c4c522f575d46e4a2127c58178f2332542b67caf86a9e27c5836b7b24f067090a3475df56fee15bbbb7b1a1dcdfd2ed3c3fdff34ef","ssdeep":"","tlshash":"bbe02e3b20c1142808032a113b2fb8063e46904f2810a400fd6e03806f878aa2931e9e","size":294,"data":"","first_seen":"2023-03-09T02:55:30Z","last_seen":"2026-06-06T05:29:29.221833Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/particles.min.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23364,"data":"","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-08-22T18:45:43.100048Z","times_seen":5617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/vision.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/vision.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 14223\r\ncf-ray: 96b66dc6ab9256a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7f089d858ea39b471309f039c2f847ec\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B7IL6PhwIdn7lsKfM2oHUqWMK2EfpqlPN5N2DHE2YfhMkMuFE%2BmkdJnHNV6wDd5kSubhYP0898H3zax0mPTqkym15PtPybT%2Bl32aceNtxAMvhuMNzNBT3bXEhwDlVk2x5U6yOBWxA0%2FvgzBmxAzl%2F3e233TmBQCeWNtoFw3vV1gn3uN57g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2385\u0026min_rtt=789\u0026rtt_var=1138\u0026sent=2685\u0026recv=221\u0026lost=0\u0026retrans=0\u0026sent_bytes=2971521\u0026recv_bytes=48318\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2343\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14223,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"7a3f8604d0180dce60d9116ef41bda25","sha1":"ba358d85cab3fdf2838ef6268cc173977cf9b9ec","sha256":"5926a4242b7d02774774b2ff085188fb310605768226c32976c26cd280c6feb1","sha512":"5326355fb82169a9904158f6b848d2ab44c905d85b98d2e1d005e60de5abe587899e0d56867c8cf3bce60f984510c8881517e7158d95fe67eebb0ab4d5b07d81","ssdeep":"192:qOZhvU+VbjZXgPzCsIovrzwMMgdNdubQw34/D0CEaAipN6U3UGuKV:qOZVTjQnnr0MPBA3QDDEaFpkmbuQ","tlshash":"a652bf17bd0be107b247d93a4715305873261a0418466aaf5ca42dfff16d0ddaec7931","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.067545Z","times_seen":624,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/kyberswap.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/kyberswap.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9463\r\ncf-ray: 96b66dc6dbd456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"447f74eec7bf47796dcffcbef284634d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d93GIuvDEixyOMgqaZw18Tl3pzxNqxvGSnHsW46Iw21z33KdfwvhZTZBDhcYrNJXv2fUteKMlIxH2dxPh%2BzbETOESyMt6ivKPWjri8u%2F3Bu6nNCwrOj7AesJhco%2BrjSXw9U6t2D9h3RE6oLfVZ%2BfGhplBve%2BYjBNJkSonilgjyhbPS4pDw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1960\u0026min_rtt=789\u0026rtt_var=930\u0026sent=2474\u0026recv=218\u0026lost=0\u0026retrans=0\u0026sent_bytes=2730764\u0026recv_bytes=48180\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2314\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9463,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"84d8feebe781731aa6e08cdbdd7308a8","sha1":"4f38c77471524f83bae8137726c6d75f36b223fa","sha256":"5bba75448c46b95dffb78394b2e3597c94fa6e546d2eda6d8a81546ac77aebf6","sha512":"cb9e23f8d712bf6bd06726efb33b91ab03a751e5cf97bf2f440b11621e0ad749c12b5803bb0afe8bfc3b59516711372de0f700d4b86f48babbe9af212c2a6866","ssdeep":"192:vNvMPUwwVnAgDUb+5SboY9pm8myGZuyG+hDD9dfIP:hJwwSgD++wboY9p9D86KdC","tlshash":"2712afbeb703899eeb1cd1fc98b73016e3c3dd1b439c678f0da390298422a17561d995","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.768781Z","times_seen":568,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/grove-token-eccea4e802541d9a99f642dd156.webflow.shared.3c1e7f710.css","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/grove-token-eccea4e802541d9a99f642dd156.webflow.shared.3c1e7f710.css HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"969a4d91ab29fa296086e02c177856c2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pj5P6ckE49YIqoxTDHfDtYtVYpJlM0vOy2tBz0kN3XALVAH3RpUHxKiTTugHAl%2BQK9%2BTlbai8OeoDek3J%2Bd4alqLC%2FiXHfvXd0vnM1vC18UhWXKSukU0aujbF%2F7szlGZ2yqUicngNQ%2BjpM%2FauTMvKK1LQj4F2V%2BxFtBXui6zo9wV2cyXEg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaca1556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4172\u0026min_rtt=1677\u0026rtt_var=1935\u0026sent=121\u0026recv=29\u0026lost=0\u0026retrans=0\u0026sent_bytes=108033\u0026recv_bytes=7077\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=329\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258905,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"3c1e7f710cf64d9c5f70e3ffb246b93f","sha1":"78c82e19abefdb512285812ca570327e743de09d","sha256":"709efe0bbec08c11894da46534e513b796aa342d9bf9248ff72efd8b1ac6e1d4","sha512":"81e27e4f149583b20f13273f9bd5dec815eb9bf1cfb9c9ab7d6c5e2a6e18ddb0e6f19c1aede4e86f5ca5439446b3c203b23ab5610dfc513dc5bc18ad6137a6b7","ssdeep":"6144:1yP4cPynZZQ1CSp2OyJv6HR1IzQH03FX3uEFoa:1yP4cPyZZQ1CSp2OyJv6HnIzQH03ca","tlshash":"7e4475972bb16508751ba4f8adeab740733a9083c64eceb57ae1305cdf891c52473b9c","first_seen":"2025-08-07T11:28:59.650463Z","last_seen":"2025-08-07T11:28:59.650463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/embeddables.es.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/embeddables.es.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"864b64baa489ae9f2caee80d9749b951\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zqKkXJ6RIJLvaK%2B%2FeMnwiLCJfprlaKabZN05VENP9OZ1l4IZUZPFSbh4P437Ax4XiXUwAzt1ItwdKoFJ%2FH1VRqVYlj3ZDDylXUP%2FvH3iMfxbEzW%2FmGZCmUHsfTp2FI3PSvm1UPoMooQPFftYPihm2GHXAGU8q%2BR8XsKIRDa8ug0h5LPuAw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaca2756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3656\u0026min_rtt=1677\u0026rtt_var=2000\u0026sent=158\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=146155\u0026recv_bytes=7172\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1153410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45466)","md5":"86dcec45238acfaf81c46a8957ae4be2","sha1":"39f5996693f19cea269bcfe6560ad6c1fd96befe","sha256":"319330e18b9ae5bd31f34a82a9b7ddbdc6e84c7f1c6d9e9774ba79cc124ac932","sha512":"925909c55d10359131dc3bf13e7feaa2092257063fd32d95221fba41a37f2038abefda412ab0f1694109f70fceff9c14ee35f1f46a519f3e0ffec5221320b387","ssdeep":"12288:xhTUWya5UOQpHGYKNEyCXJIAFMuhcM9yIDSVkh3qj07EP1/Up:xhAWya5c8ELFMQfDSnW","tlshash":"bd255bc472b6b066479665e404bb1007f23a782d644d8078f25ce8fb7eb8889857bf7d","first_seen":"2025-08-07T11:28:59.65228Z","last_seen":"2025-08-07T11:28:59.65228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webflow.5b5ea6fd.c26cd0a998149593.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/webflow.5b5ea6fd.c26cd0a998149593.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"a4f2d0cd79554ed3c08ce44e5be1e4ea\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CGH8aBOpyRkvzk%2BsgbBm7KcTsuN%2FLji4vHKreKycHjeQh5lyssRBJzkOuhxuR%2Fq3dCeNeu%2BGPknwkF5ov7gywetwhgIgsLZCg%2FiYJGu0jKa5Qfkvo%2FKTNI%2BUvvajqbGN3RCAbcoD8K88hHmbbW2XQXqpyRp78wOUp3ZpPd0TjSI4wk8blg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada4c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4307\u0026min_rtt=1677\u0026rtt_var=2219\u0026sent=120\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=107270\u0026recv_bytes=7029\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=328\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2351,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2351), with no line terminators","md5":"5ff522c9c55c430addecf845ffbfd2d1","sha1":"aa071195303592628d9a786f7ec934d2c3db45e9","sha256":"427fc781524009e8a8a1b6421dc1f19d85dac545fc3f45d931f6f1bb9dd86624","sha512":"5438e4d49ec01e4caa9947067e27cb97acd2ae9ea82aa31210726f5173a66c33b377edbc393c36253c59a2d4c0361438da4db2d618606c227251f53c70aa81aa","ssdeep":"","tlshash":"6c41d8983994f5b906a750c41a3f8046f3276576217df4e0e322ccf964a069b4073f73","first_seen":"2025-08-07T11:28:59.656482Z","last_seen":"2025-08-07T11:28:59.656482Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/coolwallets.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/coolwallets.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7236\r\ncf-ray: 96b66dc65af956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"19ba7a8ff15fc742fb65d3f27d7b0dac\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VkJD458OP3m19hOsbB4BKAvHIcxkVyweCVESBMDnkO7xZ5Zg1E9az3EgrIafku2Fy525Iq1hBqD1t29IB1DlAI1smxWFnKg2sGZvUTf3E1Su%2BExUjTEzimqbWSgjVc1M4IaMyyOr1cdej%2BPGMUPn4NTK0H97ABY%2F7xkCB1bBnndC8EK4uA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1690\u0026min_rtt=789\u0026rtt_var=470\u0026sent=2318\u0026recv=209\u0026lost=0\u0026retrans=0\u0026sent_bytes=2561106\u0026recv_bytes=47769\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2277\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7236,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"97c7f6191718e13dd0297ac906b7b7c3","sha1":"72e2dc617e184515ae50cce89e3e1dc2f30e098d","sha256":"9d1eac67b14b71ed6228ee2e1f621461c2d886cece4de6d7f01d9863b736138f","sha512":"7cf15038d2cdf2560895c3ad89cee1026290950e2f82f8b90bec45aeb759760f48d01886e5865ab3951f07932b91bc541b21d8f172e81da4d3340940ca7692f7","ssdeep":"192:6AZZ6CJD6w66klLshDYu/7scdBUAlY4TvJ6ElfpLRdpfnORj:6AjbAgn77Y4TkE3Rd1ORj","tlshash":"62e19f4936f52e23eb0afbf47543e9960f52955178bf0c0f74912960223a7a2f448a5c","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.738613Z","times_seen":591,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/roninwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/roninwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3436\r\ncf-ray: 96b66dc67b1f56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4bafaac8b19bddfbf1fd8ff4018d591a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=svM6uRoNB7pqc9VXtuwlny3y1cp5gSlgf3slLBXgRLuoOQnmeBzfam2CjeP8cBj%2B%2BtwrqWbd4P0NvAXJE%2FDL3KevD2Y%2BOqPlaRE3GU%2FC7GELuQ2DMyr%2BuBIMLM7sqjc8J3ZU3Ayfj9IwFU1MvxTa3p9aZbtAUTCoeWl8QcQ5JWrLbI772w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1981\u0026min_rtt=789\u0026rtt_var=738\u0026sent=2081\u0026recv=196\u0026lost=0\u0026retrans=0\u0026sent_bytes=2296625\u0026recv_bytes=47157\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2210\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 259 x 194, 8-bit colormap, non-interlaced","md5":"5898dda6e586d76b03f4eb05a2133791","sha1":"0f9d0a9aa6c39881469e191186e9dbd2905e0b68","sha256":"c6952e2334938695353116bdaa07cd0de56bacfbed892e407ad57266c432d593","sha512":"1a765d4ad11816f52c62653eeba26136fdf0be85bfd16650327eb0b5b533d80453bd726420fcb4bc2cee6ddeab9ede29e3c0f34aa9246a5ba6403fdcee3aa6e9","ssdeep":"","tlshash":"d6616ec39c6ae43cd7bb269c9088c7c476245877a7b5cc4a4e8f4430d0ad25d0e5cdd1","first_seen":"2025-02-26T16:32:21.421702Z","last_seen":"2026-08-06T10:01:23.828488Z","times_seen":28,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/1inchwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/1inchwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 17962\r\ncf-ray: 96b66dc64ade56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"860c04ce5dfd7996c7b7fce703b12db1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=19QK7cwdM4edX8WEuOpYylEkJtXdMObZ%2BZvoEbgWQDnLVkq4XVfvj2ThUWQYkY2xxpVEGItuCzH%2BzKQuM%2FheySCOM5TBZoqcsnWWIAZCyeAFFvOP%2FfcfgSJKxyiUVkOplrRZFxtRcaDHABUYx33d8DZ5kmfZC5HKrSOPEjKFF126BAvKmA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1952\u0026min_rtt=789\u0026rtt_var=907\u0026sent=2053\u0026recv=195\u0026lost=0\u0026retrans=0\u0026sent_bytes=2263757\u0026recv_bytes=47112\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2207\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17962,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"33980d05709d80b3caa512c95943cdc6","sha1":"243d8d4f8c578e16df5192cfe512664e864da473","sha256":"b494e732168825a8daae0c748a215053c536842ee7a9b0b7aba94067a757289e","sha512":"1357faac77af996c6dbd63842276e78f6fc7816ce3441e940a88dd374a517364bd6f00d331d935f0787d79536c383e3cc4d2c0bde3a996014f04641b9d6f1b8d","ssdeep":"384:0BpkSgIpA5O770veolRsxVa66crZl5FqjGkPNQB6ai:wpkK+xlExVr6cLGxPqri","tlshash":"ff82bfcafc4828d96e9ec1b7008350066ae985356fbbfa2c1957fed9f138e4c8584748","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.862572Z","times_seen":846,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/infinitywallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/infinitywallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12971\r\ncf-ray: 96b66dc68b5456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"250eba6d2f2ce7561c123034c769eba0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F0eAwAU9wyHxqTqNFLO8gLWBrLCwGZ49tdQ%2FmkbR7jWKjP6W04tHoRMu%2BK76PtknpiP0cOOIAmL2k8y6o1Uxjn1H7q1zHfXFV6OB3UzgPwnPojKpWXl3wUO66C3KV200vuQq4uoq7lVB05AUAqgKCbbermU8bjqSl6rpPD1pr0ejtdo0Pg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1743\u0026min_rtt=789\u0026rtt_var=700\u0026sent=2409\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=2659162\u0026recv_bytes=48088\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2302\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12971,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"340d9d8c59bb8e054ed894fa94d0e5cc","sha1":"60e94abce90f3502cb6f25191b5a78155d82f2a2","sha256":"1e885055bc6f59e17d4efb79402712c35c6c93752529552664e21835dbb6873c","sha512":"6dbb301e1ee852b81493c1d66ec04cd45bc7a0b09edb7dcfaa6aa32fd66c68d3b2fef5c41aab388f93db6416815239825bba933b13e632d5a239166f2894860c","ssdeep":"192:2We0XfqmrFODg7iUr1nfMtRbUzhbw586gGKt6i9lTAAfzZ0Fn2qHboyPV71:jymrCg2eJfMtqzhbm876ifAOzOnbZ/","tlshash":"3242a059f1b50230e20dd5398dec29f7f0542bd451a6eb6ebc1739fb67285a07b42c06","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.767704Z","times_seen":388,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:07.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 07 Aug 2025 11:28:07 GMT\r\ndate: Thu, 07 Aug 2025 11:28:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32112,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"08ac1371019bfbdfd61c7569beca467f","sha1":"627c619bff84397e660ba4c6f12ba6c547917c0e","sha256":"27f7dae751fd300dcb094ddb79a392fa914b82c130a40689a3f6c7ecebdf8ab7","sha512":"bc88bcb372eba1c86bee0844b39520c770a42d6a2ed02b9093c81a51a8cc1af0767034fd0182104a56a6ef917e5c3acb5d4724cbf2052ccdf985d99cf55238c1","ssdeep":"384:A3pw3qF3H3b31wwVFGGwLwQFplHKwTFgAi1wWFL/58wBFqqEHw8FdprGwfF00WRa:0q6X7YRS6EA","tlshash":"29e2af911427a600a7472dca23cf3d36ce4e62667495c43abbfd2c98bde5d261361b3c","first_seen":"2025-06-01T11:19:41.404999Z","last_seen":"2025-08-13T12:51:36.47271Z","times_seen":49,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":133,"dns":1,"connect":20,"send":0,"wait":36,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/uniswapwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/uniswapwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 119463\r\ncf-ray: 96b66dc5b9d656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8269aa07242922df839c3dab2724b9be\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e6lxv12fLtCm27SB4qlvZF0De8fJYhr7kfFB7iz%2F38s5i%2F0qZV%2FCCDbY9dhZu%2FEWYxMJQgffgt29h%2FjyLpt2%2Bmz6Ohw3glyaC3x0v8u%2FHhrooHQnz0wP0x2Imx1i%2FNSc4hAMoSkR6Cb6z5E2vfFvPl9vEJt9hZ3%2Fazt5TWzvpwA5e2iW%2Fw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2161\u0026min_rtt=789\u0026rtt_var=1819\u0026sent=1030\u0026recv=109\u0026lost=0\u0026retrans=0\u0026sent_bytes=1104369\u0026recv_bytes=19098\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2037\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2302 x 2302, 8-bit/color RGBA, non-interlaced","md5":"d4f8acef0bc39dc0366bfbf98a961541","sha1":"526e6497aa727f167cc974c4ab9e9e4fc3563e37","sha256":"b78caf0b7c7782c871a95b0ebe49a4f772f48b1b9099878aec478e4994821640","sha512":"cbcd7c5d3e340f7c122b4c4848fcaaa7736a563d6525881c5e91b2d9a228d628dc6b74f207148c96f488a3284e6d66ef1ffd7a9fd7bededdc7acc160c4ecbfed","ssdeep":"1536:cPkQpRVtA4Uf87htHJIFz35pla20r13Qqai6Kq7Ji0ujd076iBfYynMN7mbiVw1s:A113QNiCd5uB+fYiMVmb06yeGAalj","tlshash":"bcc3f131ce436ed5e48522f784c8478623661098b7e16ba637f08c4dc5d9bfa1463ded","first_seen":"2023-05-21T19:30:55Z","last_seen":"2026-08-18T12:42:33.954066Z","times_seen":316,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/zerionwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/zerionwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 16319\r\ncf-ray: 96b66dc5ea2056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0d2d411eeb20fa0cf382dba1d2c2db79\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Srn8qHxpfPMuKvWk1ESBPzIoxiTiEVU%2FaS%2B%2F4T94NsFHPA0ZG62MIC3jtoLm3qKY69mg6M96TxjsHlQBrt%2FgYgK8btkVWbGg8oRkInto1pqx1JMuOmorKKBs5g2EDRPGAqt%2Fuj1pfHYW%2FiS24fkL1XJDuKy4xm7VJiNLYAnCwi%2FImtDoIg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2109\u0026min_rtt=789\u0026rtt_var=892\u0026sent=1189\u0026recv=133\u0026lost=0\u0026retrans=0\u0026sent_bytes=1281529\u0026recv_bytes=29106\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2078\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"74c95856e877b30243eb316231c7eda4","sha1":"dc9eff1ed72393094835e67fd66f159d5761085b","sha256":"0c9d93c088bb9264f7b42aecab44fd3e2fa8a68105a8b551744b05210aa3ba54","sha512":"7485d71e5eedc283e23a2de9bec0080c797aebfa06372bab71e429e88fff93c17b97ef9464ddcbb43a8078eb818da010026bb9336baacd3b47056a0169a2286c","ssdeep":"384:AWoeYJLQyNuJ6csJIM1lQE8arGsutnZHoPFytVcXPRPMLpJuugbm:AWe9UBoIqlQ1arGsutnZHsyt8PQJIm","tlshash":"d4728e54ab50838308798d49db934cb58eb3cbc74d7f61f9785d7b090b48ba0ab59ac2","first_seen":"2024-08-19T13:46:23.487579Z","last_seen":"2026-08-06T10:01:23.760272Z","times_seen":35,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/walleth.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/walleth.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7225\r\ncf-ray: 96b66dc64ad956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"78dec95de23dcc2da0b35faa4c7b6860\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cYhKOu0z72Iolc%2Flx1R6YDxp9ha7YeK8WDRTPgZwbfBloB2ceAYo1maQ3jNkznS550oNHQ3KqhC1a1HHczAuINKEwJfkfvbKuuCdQVGPNJ99stbiv8Uj%2FXI1bd6nOWkLrJxFyRoFUL5IRErr%2BRaLpeU0YrmvKeGoFAIHjpjaOe9wDdDnHA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2433\u0026min_rtt=789\u0026rtt_var=1399\u0026sent=1963\u0026recv=180\u0026lost=0\u0026retrans=0\u0026sent_bytes=2169637\u0026recv_bytes=43287\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2175\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7225,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"eb31718dfcaa184c92939eeb80409f0c","sha1":"abc5e316aada45ab95fd22320588031aa5b7083c","sha256":"5b17b2831da88db4aba84e58cd502092d778a6cce1eebfaf508096fcbd58b1ab","sha512":"d6dc3751424e3eb3372cad73fd34d090e4c7791885210e4eee7d0f69c45b8f81f8c3b3c572307405360bea92eef25bb50d033b2b63ec15f9b5ab14324c2c0457","ssdeep":"96:XXypRMGsaaguUYpsNxKDqehtmBEeeEV2/SGOvCEdKPh6rdoUHT4WON+MscXK:HuG5ZiSD1vBee82/SpaYmgoUH5OY","tlshash":"90e18e0abe0eab15c65dc6f06d902f74bff1062a40f48f1d0f14ed7461b92e64a608d7","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.061482Z","times_seen":721,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/dharma.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/dharma.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9289\r\ncf-ray: 96b66dc64adb56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"721f564805dc5de485a7ed174d783265\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F1hLumK%2BLH0PNe4VcOpSgoFNxnLj5N%2FLBdk8ah6WNmENRQwQeYX%2FLl8F1zNxdNDZHTRUADcKiQajLbqduKXgBSHjZMXnpMdU5SGuWPG%2FFRJzCa9QbPfM0IXmbNO7jzD6xqIjWGgkWCeE0IQz92rq2OP%2BHSU81YeTpXkjzUrqHfXIqCsfPg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2144\u0026min_rtt=789\u0026rtt_var=799\u0026sent=1834\u0026recv=178\u0026lost=0\u0026retrans=0\u0026sent_bytes=2021187\u0026recv_bytes=43195\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2166\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9289,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"2ba13682688e9661fb00bba1532a79b0","sha1":"d4f19a59aa974dc8929cda52640f98d8609b4fd8","sha256":"61a6c2e2f76f17b486ccb727517f45f106325ad7102683d223d3ad984f7b55d5","sha512":"c66f5b0f5171dc9e98473ed22a1e9c541b56f3de437555e138d41f67bf7f8e5d426830fd2de2a4a44b3341e1df5dca83cc89b6578177c096db3f207ec0dd5eb5","ssdeep":"192:P+Kc+tkDKRwgrafW1XZ2hwPkcDLtpMCDVjwb0DVnj5AX8jAS:Dz+8rv1XjLL8CDdwoDVn1AX8j/","tlshash":"6412bfd97ba3b25fc082873f3035b221a4a3d815a5f87bad9a6df0c7ca181b9447d449","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.803765Z","times_seen":768,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d201715283755_GreehouseShort-transcode.webm","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d201715283755_GreehouseShort-transcode.webm HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 07 Aug 2025 11:28:10 GMT\r\ncontent-type: video/webm\r\ncontent-length: 3091096\r\ncf-ray: 96b66dd31b330b55-OSL\r\nx-amz-id-2: +I98etOWy4A4yica5/XzOGnnTF+VdESuKc61c0p/NILORWKPLPYCSeo1vO5Xm7k3tRvgZgSDMws=\r\nx-amz-request-id: BMC7HCKQ20KB5X1F\r\nlast-modified: Wed, 09 Jul 2025 01:37:21 GMT\r\netag: \"7766dd226153d39cdf20596ff627ea73\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: qjbrBeebhtj53JIo6tspYi.7huH3IHQD\r\ncf-cache-status: REVALIDATED\r\ncontent-range: bytes 0-3091095/3091096\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3091096,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"2fb2eb0b1e62402cb691e99981febc7f","sha1":"947c8677d344f95a320b68c2ef6547bb5a6fcb5e","sha256":"cd07fa9093345843961e98cef0f4568f31adbba4b266eeb1188dde8b4415d343","sha512":"1e0fc3abe4a49e6cc71fe39130b7b5f8f0181082b55173e818c41b7de3d6bec8c9fe69e22e29c3749d310d0769d9124f20cce0f771b9faf932c9ae1e58ebbff7","ssdeep":"24576:K218XHaTcAgV/u4ZS9SfuqWQPmx10B/t0bS617XaNZ:Z18X6QAgNuwSstyQabScq/","tlshash":"09253362476b1743eb63b0bad62898251ce6752f73bf2b750cd03ff05d2a096601e798","first_seen":"2025-08-07T11:28:59.675391Z","last_seen":"2025-08-07T11:28:59.675391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d2017152837bb_G%20Tree%20Semi%20Opaq.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d2017152837bb_G%20Tree%20Semi%20Opaq.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 446443\r\ncf-ray: 96b66dc41a10b503-OSL\r\nx-amz-id-2: Hn/tP1fpWpr7gTPSAlw4u25lnQg+wAH+Gv4ZE0/dD3oKFcP6ULFLH1qIgfq4RrAFdAEVo99gLtU=\r\nx-amz-request-id: 2053BS5TJFHZQD42\r\nlast-modified: Wed, 09 Jul 2025 01:37:22 GMT\r\netag: \"f2cc48ccb87b9b11784e87be60419843\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: VVepfG1lWAXOZJBFV7rxVXw_hEIyohFV\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 976, 8-bit colormap, non-interlaced","md5":"f2cc48ccb87b9b11784e87be60419843","sha1":"0c0b65107ee26a23ff3dbbc4767e2d7706f8987e","sha256":"008197927f3419d7f70fc39e6bab3fe0075c00674e2779e26e344eeec2448f41","sha512":"2fa3e0d7653680eaf1ca6fabc3fbc083e7d4d935e8f8bd1bc5380ff5b8ca0f66131814ce80d196ecf83fcc3b418198777efcf39413268b0825dffd6183681e3e","ssdeep":"12288:g+ljJkHUuYr3NGA3XxLLxdQUDjmAs1rhnz9Hj8:g+FkHUuYrfXxfbQUvmdBZzZj8","tlshash":"c6942301b97a94f2d77351bb48509c401c80ed22cac2e1fa1e7bb73a93d1288dadf957","first_seen":"2025-08-07T11:28:59.678317Z","last_seen":"2025-08-07T11:28:59.678317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":81,"dns":2,"connect":6,"send":0,"wait":85,"receive":58,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d2017152837f6_abstract-world-digital-circle-hologram-money-transfer-defi-decentralized-finance-blockchain%203416.jpg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d2017152837f6_abstract-world-digital-circle-hologram-money-transfer-defi-decentralized-finance-blockchain%203416.jpg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 160052\r\ncf-ray: 96b66dc42a19b503-OSL\r\ncache-control: max-age=31536000, must-revalidate\r\ncf-bgj: h2pri\r\netag: \"bb35ab592198dcca0263dc878dc3bb36\"\r\nlast-modified: Wed, 09 Jul 2025 01:37:23 GMT\r\nx-amz-id-2: eB2MJwAM1dNYqb/q0y7L6AaHup5wSg4hLfgZTIGzR4aKbx4K3IjB+P5kipetDHDRGSsXnpxjPFo=\r\nx-amz-request-id: 20507R69AWZKG2H6\r\nx-amz-server-side-encryption: AES256\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-version-id: 2s4y1t8djVjcQ4ce8UejVjwt4Ahotf.H\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":160052,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3333, bps=0, PhotometricInterpretation=RGB, description=Abstract world Digital circle Hologram Money transfer DeFi Decentralized Finance Blockchain, cryptocurrency and bitcoin, online, orientation=upper-left, width=5833], progressive, precision 8, 1400x800, components 3","md5":"bb35ab592198dcca0263dc878dc3bb36","sha1":"880a968c5abded8e68ff07af5f34e5db5e20d565","sha256":"a0a9a722b7308102f5c374718fe046ea176676ad42c46e942b94b49d885a372c","sha512":"8715d869179d9bc16e5425a462361b397726ae3dabffcbf6fea193274efb5c2b3c0b69b90d9c592b3e855cfafc1b378c6c1874638ec6d302dbbc1aa0aff4643e","ssdeep":"3072:aS1hwizpgpId2RTryIGNDEk3i/NHMDebL75w4vymLEfC05mzy/BjG/M:b2GpgG6TrwykK/bf5wCdLE6Emzy/xZ","tlshash":"6ff3d001b7b2ae50d6d97af8a2eed2110bb7dfc8da9155807acdca001f815bccdc61d6","first_seen":"2025-08-07T11:28:59.680134Z","last_seen":"2025-08-07T11:28:59.680134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":77,"dns":9,"connect":12,"send":0,"wait":144,"receive":4,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/onto.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/onto.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7828\r\ncf-ray: 96b66dc63abf56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5450cf9a45fa5532eb73521b8b79d37d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hya4CFbFVMfIFOovQbxesirC03zQsDdqrXhLMYcDssnxPsSMSqGLJNM1Yb4l0P%2Fg6AhyQI0GdhL7Z%2F0XTw3%2BEYhe3qOaQZZvVGfVBnSDgKBBC%2FS3JlbWefrnZAsKVwPMtD5M1pRkHo%2FcIVCMnNhWa19OeouMbtrcUh5Te5w4n%2FNBznWjSA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2144\u0026min_rtt=789\u0026rtt_var=799\u0026sent=1834\u0026recv=178\u0026lost=0\u0026retrans=0\u0026sent_bytes=2021187\u0026recv_bytes=43195\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2166\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7828,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"e382634b03048e214612be131e264736","sha1":"d9f34fc40d678823237cc7e561446a9b1c0bffdf","sha256":"16badf3b6a1f78e6df1b19e8684a6778a4e3dac2334ef0856ed382f41771f874","sha512":"2c7141810e0e6ab8767e787a4bd2a3bb6f85c86a6446004e05099de77139cf197b5fde7afaf4c8c0847b1210d7849c8dabf2a13443a08364543695819b8ce3c8","ssdeep":"96:zGO1Y2AEWfduJRPuwm1ED2gwvXPIqsvmzIDRzjXMA++klJwUkR0uH+w48baWYvo3:zD5ruwmPgwv0nI+06RhGWYvo3","tlshash":"85f17d6d79202491e72ae5bf2b85b0a1731ab600ffc7524f2041c0725453792bad3c7d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.014065Z","times_seen":743,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/atomic.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/atomic.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12526\r\ncf-ray: 96b66dc65aee56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f5505aa1db9b4388f9d3ec34a8fcae56\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A6S50QhRoIdxxo6RpVB3%2F6qLd%2Bhl27GamLyYlBFjSLvSZYIsaG6WwLO8XuwcjKqFEg9q8wzmVI7GWS5vt9i1Nx7URikF60XltiuDeW8Aztuc62S3Y7mvce2aLtEeGQy2kv95DUdtXTFpv%2BBA1JeBUFJ8qgdBvrnvJct2qlSjGw7E0rBXog%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2433\u0026min_rtt=789\u0026rtt_var=1399\u0026sent=1971\u0026recv=180\u0026lost=0\u0026retrans=0\u0026sent_bytes=2177829\u0026recv_bytes=43287\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2176\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12526,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"480248df94d2b0e11d18d8c2c594d695","sha1":"f7247cd551510a4661a04fc21bc4ff792397791f","sha256":"e3a1988e50124aef7c65a07ce80c3fb8327a94274c026c0b47b978c5f6f9d4da","sha512":"dcae5e86f125775e3b5ccdced2a54d4d7e9e514175400104920c5b797d76a024363c65a494625fa173302ae0e2f64606350e39a5de4ed3679103ccdb62c7ef2f","ssdeep":"192:xEsvzGFQE5XauHNUXR9mMLj1wTY+K7rQi32Q5TCSimRgZh6POZB5UfDhEO1cjk/:xYrHQfj1wTnGrQc1iogZh0EUfyO6C","tlshash":"7442bff6744e6be2d61ef4b7c1f40909ac9c1f70aa029b6cf6231189cd77b66369c019","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.033471Z","times_seen":869,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/dokwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/dokwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7738\r\ncf-ray: 96b66dc6bba256a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f524cba85aa085e71fa6e07b748b58a5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xlvv5PMId73XPHY8yXRiQa9uC0ng3r8qsZSHS0LIZLYxHUSvZcBbBeByhy8pCha%2F7dyshra08ae1AAbWG4GwYnWCdSQG1snTKpJYmM2wyQIShnhnACcHaCwJvzKfdEpeTl1y8IOp0ElA1A9RwVl3MNh6ngHm7O1sAykWY9gUHU%2BFl3za2g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2246\u0026min_rtt=789\u0026rtt_var=1269\u0026sent=2513\u0026recv=219\u0026lost=0\u0026retrans=0\u0026sent_bytes=2774533\u0026recv_bytes=48226\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2317\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7738,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"228691a2d60656d05507fb1b3b033494","sha1":"c2162d22f053049a5a22eda04c2118f5fb8542d2","sha256":"2c43d50ce18477d5b45372d1122854882e74220a8fdd4dacb38a198fb30accc1","sha512":"7e3b2bd8f78a419a7dc48819d324b5825ddae140b33e77931b4c3c6b06b192ef3c23c96776d4ae7b6cfaaa607f18b6af81a823e6a434555b260510a16e39c76e","ssdeep":"192:q/72YjtcBBqfE6K3DCz5X5vKkniikL0+1kPlknPs14x:qTmqfE3DCurib7Plu","tlshash":"4ef18d6b7d00ae11c92dc27e122d6f8aae68a520c8d765ef42de1b87048c90bbd44e52","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.057289Z","times_seen":675,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webfont.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/webfont.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"7f3658462391a37242d0bdca0496e159\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QuJdgsgYC7%2Fo62s2Aqrse3B71SxFjroeGnxFZ0fbf24edPk6v68HRraXry9aVSSuxj84BXHBgGu28IW1s%2BGBHEBSIzeDAOTR6Fz7qCBlLQNkJsTQw5HjtAlOH5I6cQ2NnKagyWt6Wth6pkVWJcyAvYvrSW4%2B1U57UlAdCdZ4%2FZHs%2BmsuZQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaca2156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5182\u0026min_rtt=1677\u0026rtt_var=3369\u0026sent=46\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=30848\u0026recv_bytes=6846\u0026delivery_rate=2943334\u0026cwnd=26400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=311\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13188,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-08-22T19:16:40.574648Z","times_seen":67734,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/keyringpro.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/keyringpro.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9425\r\ncf-ray: 96b66dc6dbcb56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"25290866f527744fbe15b269ba9b2e5f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bDHFuyW60UkpSvL3Ew03axfGgY1tfuJkkFBsCtUPjlXbHSHh3%2FY2hMTSni9AumOMOinXFaX%2FWjaWWRH%2BWEUHdVAdttJLTdcwLmcw0qmi50rpD6cCzNRoPOTdAmLolj33Jj0MieW9ovcb6FUOWKLqreGPr3eVzYrQ0FKAMC4RS2iiYrXHhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2205\u0026min_rtt=789\u0026rtt_var=1036\u0026sent=2626\u0026recv=220\u0026lost=0\u0026retrans=0\u0026sent_bytes=2904385\u0026recv_bytes=48272\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9425,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"5f3cf20d5755aaaf8c7001986b7742da","sha1":"8c60c012bfe373c8ed5cddaeaae6a61a85b16a99","sha256":"504c9a359cc43d40ec0096c5f64aa51440a31389684e7d80436f64edc1deda6c","sha512":"d14b7f15b8c3ce81c65aa9125f9e1f94d46cb1d5312123a6451aededb8000b588ebcc7ab932b5d264c31b5dc7dffba8f961fb8f140928852336375e5fca98655","ssdeep":"192:gI5VpjXFj1FKvLrHS6fdpDM0gAQULSqMc8:g+dDkPHS6fdBM0GULSb5","tlshash":"0c129e213c34c2cee1b6d97a4e9750e18eceed24b60f7bae516935d686393224ece440","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.828715Z","times_seen":431,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/plasmapay.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/plasmapay.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12210\r\ncf-ray: 96b66dc70c0856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"328de59ca6ce5d8ec4c95b9483e97914\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5kkeVKjqMLXKtlqPhJl0SKVpsWy4GTttuJFf4Bk0wzLocQAGRv2TeOrEoBnJ8jbax9myk2dnT656ksHP%2BDiPidtXUn3cxdOQ%2FSfHiLaj2znulqzaoQ11x%2FkcoHCmFrrWQ0I9VwoNwcU48a7PdNafAqCt8MMfSmSFeN3e7y7K%2BlVI07RS3A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2385\u0026min_rtt=789\u0026rtt_var=1138\u0026sent=2689\u0026recv=221\u0026lost=0\u0026retrans=0\u0026sent_bytes=2976049\u0026recv_bytes=48318\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2343\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12210,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"f54c916fdd25d7d018cc6476ed44cf2a","sha1":"cd650cdd741ed3777d5a620ce4e0b7242536180a","sha256":"22f4e24b77d61acd7bdd8b87371bf7c65539032dca69288d1d5f58624ef973f8","sha512":"c4b2671e2468d2d5c04cfc1c312f50e0682b950b3352612b954732fe96cac30817dec0a8371247241fa8875058d24a95e8ed8e57685a3689f2f6d43b59906ea7","ssdeep":"192:sYGwQJPI6eqAsObjENItMcxi0MyJELs+1aa/hEHKSEpZQbsoxJKdB2:ywQ5I6eqjOPEKLDMyOLsDa/W2BKyE","tlshash":"b842a0c9fd5044e8e8a2ea3845dc0b22f2d817447835dafd354ac13d586682a3d6facb","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.75279Z","times_seen":741,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/easypocket.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/easypocket.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6077\r\ncf-ray: 96b66dc69b6956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ba82d813cd3d07623cb80d71f5ed38a7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8Uwg9OwjR8JP8bPBHnmuT1Mig02tNHv%2FU7WouOoBrr9LdBa%2BaLDm2zWI8qHCSyo0Ua08cLsdqTM2ExvqhDL0agDWqeM2rJ3Y%2FqqVlmZpGv%2BhLzGbpstAkb8qoVRN6i82RAVuP5vXWwetDOiw8BmGuxiWsytv%2FlJpx2RMKoAnCF4mxpzMFA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1667\u0026min_rtt=789\u0026rtt_var=549\u0026sent=2371\u0026recv=212\u0026lost=0\u0026retrans=0\u0026sent_bytes=2618725\u0026recv_bytes=47906\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2291\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6077,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"68dcb1da71ecb585c52aa44ee3dcccc2","sha1":"8c702a4f8d1c68bba1dc8ba1ee165f9958ef708a","sha256":"97fd6f72e2ffccc20b821c4b8f0a1ab9644df31860bc236dc17390e83328aced","sha512":"c436c37758e9094362772efd93367ef493084329a8739ac7e781ff3f8e297eaec27ccda3fb352111fb70594c858a38b405eac88ffaef47c31cbde69d1de02dfd","ssdeep":"96:Z6oFdipXHSLJ2X9oLF1bKkovt2uokMLjmBpLoO8IPwTHsYAy7p5joa3:Z6oFdiZHSv1GbsRmB2IPqsYp59","tlshash":"f8c18e59f0899294d4dedc34f5e03832822d55f3db4c3e4e27072864b13d0aaaf9a0cb","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-06T10:01:23.815118Z","times_seen":731,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0d2f10dc66fa6608db7885d7d7595be7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CcFcDTUF2US%2BpmxdTSCKCg2DHeqni0vtX7%2B0Pj7XJXdeMBeJ5fQW%2FvENUH7j0K93V14Y2K9TLCPbrR7Niy3NS24GpL2dGGdcn6SH90h0TWDzsGJxrBna1XterRYz2SOXAq7SPzf0QibYFi1yefhWgzSmzpJpiPDR4qRbreRgFcrSVNNr3A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada4456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5934\u0026min_rtt=2059\u0026rtt_var=3540\u0026sent=23\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=5784\u0026recv_bytes=6760\u0026delivery_rate=400479\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=307\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-22T19:16:40.596924Z","times_seen":268231,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/walletconnect.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/walletconnect.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 11582\r\ncf-ray: 96b66dc5696056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6fe0ea510a2f0e91fb9f558e8a8d2523\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iSpXYoZgINIakD%2BxBXaRxexpVaPmYI2PbWsgVPgqMlPAxnlWgEZex1O%2FQ03F8cP3IkOkJJa9XKIe8EVlEGG8A%2BDPs7ZTJOgogPzHz4I%2BwaKEwD90Ab3HK4Dh3%2F3N5TNVi3yx2o8QmX9x9VpmKefTH0hvEbe46Fyk268zQliNMIpgV6CQkw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1263\u0026min_rtt=789\u0026rtt_var=451\u0026sent=1006\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=1085804\u0026recv_bytes=12005\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=1982\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"817bd73dcb1a9d1ac0f26dd1c672dd49","sha1":"4f2c71edbb5feed3eaae50995fd29306bb73bea9","sha256":"49fba6cdb38ceebd048843de8caf5e47008cfea89514f3d6ab396d20184680a6","sha512":"e1a4836d5479c063d9102ccc545e1daff79e8683a7531b5991e40f9d426340a05e657b2b8b4df9f60ab8e902190016bb427b373d20381edbad8ea28a27cbcebf","ssdeep":"192:HZAGvt5f3o4iQApfs9HNEH80q+2t5bmF4sT9oz8/PPrr3GC5O7vdLzFPdMq/MR0Q:uGF5g4izuCZ2WF4gozE3XGV77jU0YL","tlshash":"f432c05366d88db0fff534611d21895f92facfd82da710a0cc02fb266771892db91921","first_seen":"2023-05-09T01:47:42Z","last_seen":"2026-05-03T10:03:53.536061Z","times_seen":31,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/mykey.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/mykey.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9261\r\ncf-ray: 96b66dc65ae556a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"17346991e74984fe653944354aebe313\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z9SvQ4ra%2F8qM0Hi25okAvEl1hjWwqopgx9%2BTd%2BsFe2NeGyYwwVSEFCheDj95UUY4qg9QkjDbwLkgYbTMCRrLQhywS3K3QAi6Q%2FmOYmZNC%2FsI1zYHFttu%2BMM25wZ7R%2Fa6ciD2L7eMhYjgqUCrYxMfDs8JlXol9xfPW2bfT4V%2FZuLEsay0Cg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2146\u0026min_rtt=789\u0026rtt_var=1013\u0026sent=2033\u0026recv=193\u0026lost=0\u0026retrans=0\u0026sent_bytes=2242554\u0026recv_bytes=47023\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2203\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9261,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"c2353b70342893978beccfa3cdafd816","sha1":"a8ed10fb8f871d606a0e340f7c2a274f2eed916c","sha256":"65a2e3a384d8412917b5b2917eb222577222ed747ba05538178741a9b6ca928d","sha512":"e74a2c66bacaf5141a88ddb718ef074fbb3cae253507b09179e0f69af6ed043edb41d58b6cf4842fd920e599dade1a88569f5ccd850c881586f3b51112bbeb9a","ssdeep":"192:EMYhdl0dK1Mx/vjKdB7xvnBNECglMpR5bK7QIW5f+swJjs1Xr:ExXSK1GDKdznBO1Bc+LB2r","tlshash":"ac127df03d814663e646f83045fe0a183766a99aeb9bcf1e5851f163412fbe81a25a04","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-06T10:01:23.805442Z","times_seen":735,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/loopringwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/loopringwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5965\r\ncf-ray: 96b66dc65ae756a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3800499b47640d321ab91eca12132eee\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AidmULQ9j4AbrTCSMgOM6WUrzZf7BfIlKZaAYu7mF3FjLlQR%2BcMYLL5chmOnxlILd86fJQUsJhM1ZOUaloGwuIOm87451RlHe0kzClr1clEYMfF09%2B31%2BpTd04yiHav%2FoIlXOgtiSq6Y3DZe%2FvF59h7qxpJOm7Lt92%2F5nenIZbfYsm2UhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1921\u0026min_rtt=789\u0026rtt_var=674\u0026sent=2236\u0026recv=197\u0026lost=0\u0026retrans=0\u0026sent_bytes=2479144\u0026recv_bytes=47203\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2224\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5965,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"9604f9826ce692bcc4afde9c631aa345","sha1":"dd7b0c4f286379345941bc671a52739a0d7e3c52","sha256":"731c57bcdd773ca1373353a82e66b2b031be492a157a4f3c6a00199d8e885dc1","sha512":"40b6f4df72e726391fda0c638153462b6cf5ad9be895a97ced61d6293ab8ea837eaeb20b083ab06088752df51eaade78df8d23bbd683fa8959b0488ff4144cac","ssdeep":"96:E8Gu+2/uoYvSwEmfXHuUfzWmYf1w/RYdEUInyUokVg+m:E8Gu+auvvYmf+G7Ye/RcInbokVhm","tlshash":"28c14cd7b645876dd4e8f8bdc2a175312799bbbbea17d62cc316428005030a06ba9d8a","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.771101Z","times_seen":388,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/novawallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/novawallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9944\r\ncf-ray: 96b66dc66b1256a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"35bff74289729465c1cfa977e97b4070\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BQyrmkAH0x9BGI8XzsfmoupF5tf1G60D3YrJuesyd%2FmfKopdYdy%2B6VW9VNWfMX4unCGqbYEhArfUlDnnR67alTDrK7CYNpzuAV577fhvXAzmX3IoWwHAKSngRqR4cYXTRkyYIHaN8gmMhZqRZc3BmSarQ%2FEYyAHBl3vxDCoyeZ4U9CxQyA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1833\u0026min_rtt=789\u0026rtt_var=731\u0026sent=2267\u0026recv=202\u0026lost=0\u0026retrans=0\u0026sent_bytes=2510231\u0026recv_bytes=47438\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2245\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9944,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"25a1ea20c5928d8cfa8c250233e03689","sha1":"2cc636144ead607f8721192487bb344919de58d9","sha256":"685daa2c3e35315c8903500c1ec89c454936a2acf9f3a4b0fab25e2a9c7a9c4e","sha512":"b28b983747f38778af4e76bcd20a1612e5c9642c8ec55e33706f7d8041c345bd615faa6f41284cb7fde4535197f29731b21ecf63fff272d4f4b72c705fa546c2","ssdeep":"192:sm5hOii/L9GnesSLDh85scZGGReLp+Mqkp/7iZoMloplz0/BxZWlKH:sm5hOFjQndSLDONAGRg+M3pzOVopS/r1","tlshash":"42227cae2f320e08f2ed0b724c85ff9dd728a22049cfb29fc5946a155b051d09ab148b","first_seen":"2023-05-23T20:35:00Z","last_seen":"2026-08-06T10:01:23.810099Z","times_seen":39,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webflow.schunk.444c195dc0902bba.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/webflow.schunk.444c195dc0902bba.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:07 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"e254c7851ad5ee391e22ada953749a50\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sgHap3nnnuiYFNRsFVGuU%2BghJUr7UqoZcN0JFfz3ksg6Dy4Pv%2BqbgyIU5zuBhstLqWZP8ZdRzOMcYAxfshea6wx7rpZSXXhaqQysfFIVhuJTEK3ekvA1syCO4j04XAVSK1o%2F%2F6IvBmns%2BJGp0YE8qaGqeNYrTStpiQe2FYd4RoJXtbnMbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada4656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1418\u0026min_rtt=830\u0026rtt_var=487\u0026sent=677\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=726269\u0026recv_bytes=8394\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=403\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30282)","md5":"207b8609fe76ef3e4cff986fb63e6d48","sha1":"24064a0b128b4565b57c645b50774e623a6d15b6","sha256":"deb88e0b191a366f2bc4649ac7792ff5812ea6f801d5fea700e8602cd7ab8c93","sha512":"1a32aa23f7ebee170e24a616b32cf5bb9911fef9caf90e6921f2348cf0f4bb78ea6630ba26dbbac71cb47d65ee7a3536bf7dd23633a82b4fbad6de431799c157","ssdeep":"12288:JVFaQCq8pWpnpIl+TARp+fODpyPTslGM2ASpEY0vGGyY0WfY:bFaQCqBpbmp+fOD8bslGM2AwEY0O","tlshash":"3d3529483142b7118682b0a7d43f2985e73ed519640e84dcbf28e2f76cb5b99d63af34","first_seen":"2025-08-07T11:28:59.698508Z","last_seen":"2025-08-07T11:28:59.698508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/rainbow.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/rainbow.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 11047\r\ncf-ray: 96b66dc62a9a56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"59c7937cc73652d8882444ad284b1ee7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RMbLnxvqJz8CdpKCSTN6tjdT2dd7yeir5NnrIx%2BWqXqbFlHLsYUg%2BG2YLr2hSM6LpXby2POa6dH%2FsoYqwLVmRYDJjnMcsEzquaCQq8iGoP6N2aXCqLHmSQjEA4cL6opL4SIFEcWezAUFOBTYk8gwgFKtguONlIx6m2kpmaxo5zrQFeOPRQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2370\u0026min_rtt=789\u0026rtt_var=1197\u0026sent=1998\u0026recv=187\u0026lost=0\u0026retrans=0\u0026sent_bytes=2205205\u0026recv_bytes=45025\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2188\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11047,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"6d76ead5b79aa76658cdd1845fc42d04","sha1":"0faa072f36879a7d1c26a5e655942c47dd468803","sha256":"85900214a912e9987e82575686a8e2f4cb705802c768ea6d9ea88b845224d451","sha512":"22fe17f984dc5b4d91f3bb35ce06bbeb09c7ee80dd2c918bcd8d576789815a904975aca528d74374e3cd6f0806d6f00de7991e2eb0e63f1d594605b1c44eee8c","ssdeep":"192:cINLESg7lIt0EPcjZo9++CxEF/eu1c3zMvMgluc6Xp5M7yNQgZgU+mw28D5AEr9s:cINLEt7lnqw+o4/O3Afup5M7yGxU+puf","tlshash":"3c32be70fbee4b82de6eed38a9906a0934a7db7dea50400df101864e90b73b80d0d815","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.757263Z","times_seen":589,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bitversewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bitversewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 16180\r\ncf-ray: 96b66dc68b5856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f5feb5ff7b2adb63925172b2eec1e7d8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fc3bcfHNwTTFbNW7U0Id%2BAILlrWAW9GNZ7%2BUnNzGo7fLceSbBrRwn9isXOjpkMibB0noNZLCt3SoSzT%2Fi6XBj0ez59feTtvsOgI2T3xOhhJdTeytw6YY%2BB8%2FPuaky0o%2FPp5S9V94oQC0JJPdYGaf%2BnFTNEk1MB2NMR7F%2BYh1%2Fq7Igf7Seg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2205\u0026min_rtt=789\u0026rtt_var=1036\u0026sent=2635\u0026recv=220\u0026lost=0\u0026retrans=0\u0026sent_bytes=2914803\u0026recv_bytes=48272\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2334\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0927e70c5484663d6ce5f2736278b943","sha1":"cc5654ad2c26de82b74e6b330c94371681006a3b","sha256":"f9609b282c1da0b142607be4905a521d318e09f1270776313756d8a2ba76da56","sha512":"8e2c8fa8ebd45d0a2002776a55b5ffdbce8cf485a09cb162708d449999e853388a61dd6f3fbb7d5c79f18c4b5b24dbe65965e962aa49188556e2e53b1db326d5","ssdeep":"384:SN8Ea8UqkLIUZCtTRHukTkWR//c2qIiavEfHiwzIBM2TZ:2a88knXnnc6w4LZ","tlshash":"05729e2bd7c18d6fd38d0669079b8d464f80328be794938e11e86cddbbc46d43e20b22","first_seen":"2025-02-26T16:32:21.428916Z","last_seen":"2026-08-06T10:01:23.808736Z","times_seen":28,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d201715283755_GreehouseShort-transcode.mp4","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d201715283755_GreehouseShort-transcode.mp4 HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 07 Aug 2025 11:28:10 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4623521\r\ncf-ray: 96b66dcdfcaa0b55-OSL\r\nx-amz-id-2: XONx+reTRchSLNWgp6nLQhkPCqohtoeiyHZbH0QQO87BT956u09TcUAVm7cl+LUJi8lKHwodZiY=\r\nx-amz-request-id: 9Q54EK15ADRXNZXW\r\nlast-modified: Wed, 09 Jul 2025 01:37:21 GMT\r\netag: \"c3cd20a2dde1099548c6a6d6fd654b72\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: AJnFGIEONUyUZm3lVs1CxGRElkDnqsRR\r\ncf-cache-status: HIT\r\ncontent-range: bytes 0-4623520/4623521\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3555389,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"625fd5781b2d6f1db6ebc28412369beb","sha1":"571c120f011846a88e1f7f6946ed6f49d57a700b","sha256":"95dad9a2a46292e85dfdd1603b6bb5e9104c7c1b951dba25b81c5d45b8bdffb5","sha512":"05c68ed8bd9ee45720f0e95105f6f24ecb0f4f32db04987dad644755ccc8698d1919226916794ca2570877f77554087b78b274723e66765b016c3a2ab243be9a","ssdeep":"24576:djFN81HJaoxzfD0iatR1vpIOYD+IXzOjQK75:LNWNzDctYXOEe5","tlshash":"2c253385c76727ebc8695db444d13b7182b3973026027fd7e3a621de673a0e602a730d","first_seen":"2025-08-07T11:28:59.705086Z","last_seen":"2025-08-07T11:28:59.705086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":626,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/huobiwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/huobiwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8163\r\ncf-ray: 96b66dc64ae056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ef1267cb7fab4480247c93609fd6a0c3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qDzbfzZ8NDID8C7q6aKrRhUBMnUyzbWsaW1hXxcA9XYP6sEYBPhq3VLbfwKtU3LPW8yly0cRXD3k4RHj0HnJGez1C6NmpbAhC5MlEndOeUkibbulvJWpfoz5m%2FKBqs9RdQ971HQi%2FHGB3g1d2fv1csuK7tdhRKe6T1MgpiJ2JQqUDM9LEA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1921\u0026min_rtt=789\u0026rtt_var=674\u0026sent=2215\u0026recv=197\u0026lost=0\u0026retrans=0\u0026sent_bytes=2455551\u0026recv_bytes=47203\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2217\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8163,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8889adc3b016ba70946e7f291c6828b2","sha1":"0181da136b5229d07374501217be5d7e3faadf15","sha256":"e52893600547ae340a528bfa7400e5b94536e5153f66a2f966898a3a441ced47","sha512":"bb3c28d2d8f99edf068d9494329fc119bd15b20688980f6ff44d6a39122b65e195a7002a5c7f41f8e491619ea16921bddaa87f0360b4c77fc36e540d83142d48","ssdeep":"192:FBJsqB5Ib6H408BAthFUg34I/mzvePO9SxfmY4GUJxK:FBJsqbYbBtg3jdu1HK","tlshash":"b0f1ae3e7ba4bf02d156fd304eb193aef53d006ab725732e905450b651b613e604fe98","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.747868Z","times_seen":651,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/keplrwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/keplrwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 52866\r\ncf-ray: 96b66dc66b1556a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e92f96aa8d2505aba098f844f9bfd92c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9NzkAQ7l27DsdeaBpmQrZiCggBf7vbtPgOO37qiC5u%2BIdutXxKbnsz%2BFV02R%2BB6l%2FSgQF3a4dHgREdgexnlQTrP8n23Czzymgf9jdk0m6KRhUgJisnipYmVkK2mz6otc358DMcLpNHneuzPf6b0o%2BNl%2FbXadN7Goe2VgLYodydqhFP%2B11g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2246\u0026min_rtt=789\u0026rtt_var=1269\u0026sent=2578\u0026recv=219\u0026lost=0\u0026retrans=0\u0026sent_bytes=2849360\u0026recv_bytes=48226\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2320\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"e1c1b8808492dd9c818637a2bac55692","sha1":"492e55ba5dfbbe0f6a86a80a92b80927c1722646","sha256":"76a331bc3439ddf76b12bd95911b0121e6c7a0d96d42282dace8711ab89d88b2","sha512":"f29b2c34abfb7a30765d5117ac7a54070665cd5119ee6e28e964ba248bf1aaaf275240a5e6da43f6aafa3f20d702cceaf3b16b48b5ac029d6b38783bb740fb42","ssdeep":"1536:L3hRt+iwL3IYOLS8KKTenLcpazg7RcLpYH:LRRt+JLYlm8KRaazg7RcLpYH","tlshash":"f43302d2538633eaa0a393763992b3738a7e6321092fa443489af7adde308ec9545011","first_seen":"2023-08-05T11:19:00Z","last_seen":"2026-08-06T10:01:23.832223Z","times_seen":211,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/cybavowallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/cybavowallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12328\r\ncf-ray: 96b66dc68b3b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1d08beb7921dd55b3b47540e8bd92481\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zI%2FRefY9Olpdameq%2BNjWaR7fYBQYl4DcGGrF9DQSh0J6lxqtcVTQxpSjUWyKuU58q5eyhmbfrxFPleADh5DQtiJrcjJMKSv6BL9UjRZG%2Fu%2Fi4e7MiIUf4gS1o3F3NUW1fYYDTQMJcbaspDbePrGclCGQwk%2BvMIYhezLt%2Bd5Q0ztSOKwZCw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2246\u0026min_rtt=789\u0026rtt_var=1269\u0026sent=2509\u0026recv=219\u0026lost=0\u0026retrans=0\u0026sent_bytes=2769980\u0026recv_bytes=48226\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2317\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12328,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"196c221ed97367f55b518d2b5f757354","sha1":"91941152d252c87270d6097cbb9f32b1c3ac8b8c","sha256":"252b8f878ed37a9570559f869f82dcb74a2afa402d59abbe34d0ee34931be3f8","sha512":"f6cb6b6757cf54343737a7145329d4b674eedae6f1a1950ae93af8180805d2367ef4a7b1d70b49c88236c841bc915bc6f870ef7ef5cf4e2ce1fbef4d5952c6a4","ssdeep":"192:Urt/XYxZNTBTWTNaD2oEu0W/JLVh6Z+JpIP0V8CC5ImBReWlDy4P8TB:Urt/kJB0NYZ1/JLVh7LIP0eCpAhlhPIB","tlshash":"c342cf1efb1ec1aec541faf24c464367bb251268ad0e0d1ff40aa124be60db51f886f5","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.064071Z","times_seen":670,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/polkadotwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/polkadotwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12367\r\ncf-ray: 96b66dc5c9f956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7df09de7338dd9632a3dabf07df99091\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xWdwlVPw1gTHJSpXf21u0nfKNhKXz7%2BfYfAonqK8pS6hT69%2BCyp3BoKbLRGr9TcNMmHrPNC2rBZmpOAM%2FzH379zG9nhFNP7EOvDJ3t5MoGmpJPT2o2V%2FPNC%2FHgpNehHQiYpNctvjfaoqgy2M80hl7HhXr%2BAmSsey5jimENMXo7sncXUJ3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2310\u0026min_rtt=789\u0026rtt_var=1394\u0026sent=1164\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=1257809\u0026recv_bytes=24876\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2066\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"1aa636a7ddf87ad50da8fc53b6812212","sha1":"245a0568b49ee1f47142abb9dc000b4746524be3","sha256":"aec99d302f41a8b95818aa6dc8a80e98ef0230b10a607d517307678935d6ca87","sha512":"62afea29fc29544ba5ed53bf1507244de4fd333122ccae3b5b86eb58ffb8929cc559ec2ea65fd0d7c9b1aaaba593d1bcdebb86b352da562d8f239948b0665cfd","ssdeep":"384:RxXI5ufACaRKFGrj8CNbtOmJdRHo7/QXca2KSYF:jXIsJ4Jj8CJrHo7/PaJSYF","tlshash":"ac42b0a253d8fa82c04091bea4a170fb4dafa3bdf54da4dc18f09cad5bde9909153134","first_seen":"2023-08-12T21:52:13Z","last_seen":"2026-08-06T10:01:23.7544Z","times_seen":33,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/okxwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/okxwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3361\r\ncf-ray: 96b66dc5ea2156a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c98fa69d6473f16ea998704449b357f5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NSB9i9Q3v1IqlEgpMrFMGMw4XtUUy2KSe%2Bb4uMd2%2B4Hd2HcBWqWQqSDNNm7C46L79Cld8s2LguSIcK1Pdqp473vLfs7lY1zDoWWojiogP%2ByWPaUvATFEvlIHsv51Wj9teKyxLjfJSDsCBZok3T%2BV%2BPs%2F8b%2BK%2BYpk%2BtF0jcV%2FnLjc15gUNA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1736\u0026min_rtt=789\u0026rtt_var=782\u0026sent=1237\u0026recv=143\u0026lost=0\u0026retrans=0\u0026sent_bytes=1330103\u0026recv_bytes=31553\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2092\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 513, 8-bit/color RGBA, non-interlaced","md5":"cc0ab71eb1041db14722953ac09461a5","sha1":"a071bb7c1cd2dda9b8acc4944f8cf73189d56f9b","sha256":"8e37dfb6ca45c46616e555d518399ec4b0ab7fac45ba33c0115531949eeffc78","sha512":"15f30f092b38313408b3b6bc772f165c88c50fe3e86cdd2ffa1931c515efae7bc13ddfe0d6258c8ccee06898fe2f023ec9d5c50b00df61b98d845a1ddd62fc3c","ssdeep":"","tlshash":"9b613d8d975427d7657d9c49cb431ca49ef69bc71abf8aa8280c6349508cf21ba0cf90","first_seen":"2024-01-08T00:36:03Z","last_seen":"2026-08-20T19:34:32.798216Z","times_seen":45,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/coinbasewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/coinbasewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 11761\r\ncf-ray: 96b66dc60a5256a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c677849844f4f83f31ba6e2b52f83079\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vh6RyitIIHXdpMb31ZTBNDowSfYE6aRvC6Ol%2FSL8cE2OVoZOowxrsC0%2Bt8i9QPSJTpFiJ2t%2B3iWQkqnc10i6Pq64sFEXd%2B0H3cWPyhY6cCwkM34yEZPmvPh5igr5syr%2BOeBMAxwlbtZQ4ryQBkVL%2B2nlqjdHEs0yyFb5SfYvRzs9zaM3DQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1946\u0026min_rtt=789\u0026rtt_var=953\u0026sent=1356\u0026recv=159\u0026lost=0\u0026retrans=0\u0026sent_bytes=1465087\u0026recv_bytes=36268\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2116\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b49c045ac4907824fd630aa1588b75d1","sha1":"d7464e67f9a770e1ddde9009e47b37d30450cf0f","sha256":"8f377c0043411d38996d071032cd9b5b29449130dac9ed2b649414da1f433aff","sha512":"953a82ba137574fd360c1f7370371c96a8355ccd04a52f85650e6d05bd73489cdea50454ee6dfe32fb5d6fd22c23d7277ebf8e0eae80fa5168eb51a3a8cae4dc","ssdeep":"192:m9/Qv58vZsxwV/1ZHKOVc00PQGqoJLdVf9JEuWKsqMxWLMC96a9mKI+PSvp82I9W:6NvZmuvqyKGELdVf/EuWjCM06a9mKI+A","tlshash":"7732df7b0910c49b908b8b29743a12eb92032e6f7bbe0075046d3efc575a35face6453","first_seen":"2024-10-06T09:21:38.502281Z","last_seen":"2026-08-06T10:01:23.830791Z","times_seen":30,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/saitaprowallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/saitaprowallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 57895\r\ncf-ray: 96b66dc60a7456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"64d0e0ffad6a15d617dce71a309bb83b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6i5Vm6fwbeb2roX9%2F7aWIVEm0NH%2BnI53WfxBR15iLqTd%2BixfzujYZLNxwflS0R2uKSXligLWLSUDGyj5pUFAWzyGY2vRliuGOvEgfV3P8HDtTldGPBpcqjB21gSZ3wnm5Q0plvRwkeFkQj%2B1d4cljKBOAbut1tgWI3D4lr1Sx20resa09g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1927\u0026min_rtt=789\u0026rtt_var=747\u0026sent=1566\u0026recv=169\u0026lost=0\u0026retrans=0\u0026sent_bytes=1712117\u0026recv_bytes=39010\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2137\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"000e4c3421b3bdeedb1e077b8b6770d6","sha1":"65c1d9a3d0cae9d0d6f522a58763ce01ea9fa932","sha256":"fdd1cf6a21d4cb2c49831c6a22ce91a360997b5b6ecebb8194efcd13d7d822a7","sha512":"188cca6cbc9553f1b0756afaa1cc3ef5ac537102ba2bae35ddbb5d8f0468a729e2df69d273acdfb99e8e8a816c1edfc19e3bc5c051a4dab6846d582f383f7e87","ssdeep":"1536:PaCQOVSQdztPZrQrB9Hz/mRgzsJ3dzQ83HaTFuE5Hfj:P7ptPZ8THbmRgzsVd5HaTFh5r","tlshash":"b843f122e7c2dd1c753cdb3af2559c45d9f2e85a634192323a4fe53c4c629a62b42ecc","first_seen":"2023-05-22T09:15:56Z","last_seen":"2026-08-06T10:01:23.764985Z","times_seen":36,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bitpay.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bitpay.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9881\r\ncf-ray: 96b66dc64ad856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b8360ee62259b8139a593d096c385750\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F%2BwDqbO3snO2wYMT1bZ5PmUviTPacOCHzCDo7N3di2nKyge3%2BG1qSdEPBPpgkAjEHkDAL%2Fjj1MR3YKPm9%2BpLf3u2xRPZ1u02UCj0VAB48SMHx%2F%2BVFjDl9gBveHgkP9%2BexohqDOIYvbdklmT%2BeH92DAjcENQP2%2Ba5s9Ae3rJlajc7k4uXXQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2146\u0026min_rtt=789\u0026rtt_var=1013\u0026sent=2037\u0026recv=193\u0026lost=0\u0026retrans=0\u0026sent_bytes=2247081\u0026recv_bytes=47023\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2203\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9881,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"88d61453f2e52906f883152a427a347a","sha1":"76968e9244016ea6dce500f7bb2cbca9716626c7","sha256":"f0940359bc638a7aea636ae706611c0b3a5b80ec360c2bb9421b5f7b351151b1","sha512":"738bae1af9f36d4077178cb5f7b315dbdfefd7f641afca59d920dd718c5b95e433bd03092d66df3e5f7ff8ef3a50b6789a9ac9f6435be52b27f2d2e6e01e6516","ssdeep":"192:A/+cJuCZHFludGFrUvedGjQctRK+abLDPH0LAB7w77w29a11f:MzJu+FQhvwZctIzPDsLAB7wBi","tlshash":"36128e1d333942c6cf18dfb088e909f1fbb6396cad269f5d4eca84865e9c26443c909d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.937066Z","times_seen":837,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/61afdd1ecc1aaf78e3b2393c/61afdd1fcc1aaf1ac6b23969_menu-nav.json","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /61afdd1ecc1aaf78e3b2393c/61afdd1fcc1aaf1ac6b23969_menu-nav.json HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\nx-amz-id-2: vMXYgqEerLWlRay1btc0fcMfOrBCFdQE1PcOAL0Ljb0cuwC0XsvSsP7mZDfFnD8MoWqyHwNgphY=\r\nx-amz-request-id: QM4KJQWZN6ZX5X20\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 07 Dec 2021 22:16:00 GMT\r\netag: W/\"62283913c195cf3bcf50860dd1bcb8b0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: CN0SSieBHZaScP9N_YP2v7KW7Myu3mRo\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96b66dcd782f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7621,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62283913c195cf3bcf50860dd1bcb8b0","sha1":"a46e7ef226b796bd68044735bfb81ae2268fa054","sha256":"07526484281d3d0f81f439fe386563a1782196975c45bffd65d3e29a609331be","sha512":"8652efc4f4e3ccad460e60c3eaa6407b1682bb16a6d3fa064ac49e5cbf58480458c94063bfeb59a20e1943156a34d436c23c7b21382d76f085e1b95be25a1db8","ssdeep":"192:Ok5FtYNv+Z7u5FtYNv+S5FCvhCvEor/Dx5FCvhCvEu:jwKQyh1QyB","tlshash":"61f17bd60a7142ecda1578809bc374d2cfd489856fc609b7aeb76c254fd57ae2302f22","first_seen":"2025-01-22T02:10:12.588762Z","last_seen":"2026-05-05T13:32:52.850734Z","times_seen":13,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584103\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":1484,"timings":{"blocked":693,"dns":1,"connect":16,"send":0,"wait":32,"receive":2,"ssl":721},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/torus.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/torus.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5103\r\ncf-ray: 96b66dc68b3e56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"43b839cfb67572329247013b093269a7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NI%2FfFJ6TUu5habg%2B1LUmPqN6eLIjro%2Fp5g0%2BnUMKnpnOt8m%2BfRzgkDMXtDkHuByTKiRbv5P6U3f1aCkWXzAyn5Ijmhm00iHaTdMmIkIEc1fjuGN7nfw%2F8xcZ5wxd1sjrruQVVBx%2FJ6hLOxL9pV6527UrmlkolbpG%2FqMKKptcTlVLbBNssQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1971\u0026min_rtt=789\u0026rtt_var=893\u0026sent=2252\u0026recv=200\u0026lost=0\u0026retrans=0\u0026sent_bytes=2495062\u0026recv_bytes=47343\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2237\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5103,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"24c1ed468f9eaec20ecb377ec193ef00","sha1":"213959f9d67095125336ebf269214b79c256f67e","sha256":"3b5ee9935d24bf1375a312f6aa71a15826e991e033e6d31d8f376432f738c1f2","sha512":"3531c122c9d683ab86a2a5fc9087dc17ec52c3535a1d945cda5402a49f2f5ca4dc4029f9ec9f86591e0cb1e954c9f3eb67a9da51fd29eba78097e5bafaa9d967","ssdeep":"96:lHHBNdlRrUTCFJ6kLVMNakC/957VEA0WSisnPh+Q8cvggUf8F4hKTp3lAc7:Vdlm2FhLVGaR1H1BvsnZ+QZYbfLhsVB","tlshash":"9cb16c79fbea8139e5d2fd798ee1281d50d12135621e670f1608c55f909b17adfdb0c0","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.070929Z","times_seen":279,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/ownbit.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/ownbit.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9959\r\ncf-ray: 96b66dc69b6656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"74735679d86285f9ed434591d1a78998\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1PO5%2BM5gGg7w0PttArN2jeudzvvpGeLkEJLFDIeiWsq3pnulsD5SQ0v3MfMEMiCZSQ1syXW%2Fgb6raHU57%2BXnGlfDrb2sz8bxKa75FPAyZk1bObk0aueQEE53i%2Bb%2FI1GJ%2FyS%2BwJsWBqmIj1V%2BMYNYJbYG4nabuk56N%2BC%2B9JDeHqYZB%2FN22A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1960\u0026min_rtt=789\u0026rtt_var=930\u0026sent=2474\u0026recv=218\u0026lost=0\u0026retrans=0\u0026sent_bytes=2730764\u0026recv_bytes=48180\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2314\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9959,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"541bb2e5e029df0653025ebe623f30d2","sha1":"651cc837b8f896bf73a4306e1b0151ed077c622b","sha256":"0773eeb40c38eca3d0c636bccb0bae0ab94f213fe0b76bc29c0eb5eab1792e8e","sha512":"0eccdfa002330242cdd0aaaed51f889bff918d0adc1715bfcc0e585010df50d25c62243391c4c336e92e050e989413c8241f31db3b317d65768fdfc19bf3fae3","ssdeep":"192:Us89TlzqT/hd/jo83HbbRz9JluVGfr9q2ZBbJxIxeSda:Us8PGT/z/j53PR57uV8q6JOeSda","tlshash":"07229e4f3a39660cc931e87d189f147f34961fad498246ac6433c7d2e85a0ea8985a1e","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.053339Z","times_seen":673,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/exodus.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/exodus.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 18500\r\ncf-ray: 96b66dc70c1f56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"485d7628ea09ee0df571ac3db7c003b2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QflCugw%2FXefSL6Qupk7l47RAgF7gMlsjZRu9lqG76I%2BeXto15fwi3P6kh3QZcEMf%2BiExCaaWR1qnLJv2ldGMb9OqDp8WHS3Ofcc6oQkPo2loFTJyyUeb5%2BdBs64VMQlqpAoV%2B%2FIr%2FOUKSZu6cUTcIoulR2BOTxKVOyLE%2F1g4iFw5QL%2B4dw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2205\u0026min_rtt=789\u0026rtt_var=1036\u0026sent=2626\u0026recv=220\u0026lost=0\u0026retrans=0\u0026sent_bytes=2904385\u0026recv_bytes=48272\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6cb228d26dfbc07c00fea8be0b13936f","sha1":"42d61fb0e23bf2afe1ae5e52b94dabb55276c2f8","sha256":"1214228f2fa0c3e84f2de1fe2e4045e5175a17ef56678ff7fd834b64d2d1ae2e","sha512":"2b716925fae7b801fb2e6d1b66a75b45b0f4257bed6128f72fe399b8b51b9e253a8cab1c249ea49952548701ff8612c9871760d2e448ae55f9e215df2e0d9f93","ssdeep":"384:+gUgZbTdMkgQMHpY9SPwk9k947SuRl2snGP/x0oWR4I:ZRMkgQMHpSJJaghRWRF","tlshash":"c482c0cbc63296e0e81253c98f8d6791a5d0dc5d4354287e30bda59c34f0aca472b6b6","first_seen":"2023-05-19T03:24:11Z","last_seen":"2026-08-06T10:01:23.751261Z","times_seen":203,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/utils/disable-devtool.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /utils/disable-devtool.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"19ffe4a184c76cb25c54a58041cd7673\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qf9OmY1Mj3vsAMuTA%2Fdp0Qd7Qz33J%2FGciUPUF8xu1BZJhjBBwepPXlyPBwuL5dEKF5oGKpAlk4O5E0oKGfCi6hT%2Bk7t5m8sqadx6XrS6BqRJcN8UVxIpm5gkQW7MvjS%2B3eXW4XsGnV%2FqV3ykcumFGzqlrPRfBMz%2FEcyzOsBGGM0XqT3yBw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada3856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4272\u0026min_rtt=1677\u0026rtt_var=2867\u0026sent=109\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=96878\u0026recv_bytes=6982\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=323\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-07-22T11:05:53.226108Z","times_seen":1630,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d2017152837fb_cartoon-landscape-summer-green-fields-view-spring-lawn-hill-blue-sky-2.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d2017152837fb_cartoon-landscape-summer-green-fields-view-spring-lawn-hill-blue-sky-2.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 39235\r\ncf-ray: 96b66dc409f6b503-OSL\r\nx-amz-id-2: z/g7ll3h0Am7CLYnIzIDzBR2ZdicZXYTHbac7CbJ0n6TPZelDrfhJ8Yv7fpRF+zSbIBAofszZ4I=\r\nx-amz-request-id: 2058E9T7NP3FEHGJ\r\nlast-modified: Wed, 09 Jul 2025 01:37:23 GMT\r\netag: \"1f5253ba1821d3f398a57cbcf311854e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: nz75PfH7LxOamgFv87ZPLANDyhylbujo\r\ncf-cache-status: HIT\r\nage: 1071636\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4000 x 226, 8-bit/color RGBA, non-interlaced","md5":"1f5253ba1821d3f398a57cbcf311854e","sha1":"f307530c2080d98421f08fd7397c610f2d04a410","sha256":"b38b23d4a9a0eee5bd5e8ba93be6e3f260f1f0b9689ae77589cbf846d6806638","sha512":"308b45010f2c126461f0bc6d71114eda863b32f79e56a8d098de3b67bab0543eee3760f640f08dd071cfab3995939016013eb1ce024019b8f967db477ed1abff","ssdeep":"768:OJnep4r4P1f7WlH79DGJxBB4O2/WUDmM+r59Al+eywYm227baXu:8nep4ru1f7WtInBaT/WUa159K+z9m22f","tlshash":"d503e00dae01874bc64fa237526b0633713e1fc289b6655badf1ac7054ed4f36f4a464","first_seen":"2025-08-07T11:28:59.73045Z","last_seen":"2025-08-07T11:28:59.73045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":72,"dns":5,"connect":2,"send":0,"wait":48,"receive":6,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584103\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":1555,"timings":{"blocked":739,"dns":0,"connect":19,"send":0,"wait":15,"receive":5,"ssl":770},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/meet.one.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/meet.one.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 22100\r\ncf-ray: 96b66dc63aa856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"75142530f4557fe8df7bbac60bdf8320\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KA9SSJfesGPYwnwNp6etx5eH8WfAmtAZ5V0ld6NBBP3kU92EqJiX5cxPh%2BdQq%2FLFFsk22VMGZcTV2u9EuSYaeFXYRxF02%2FrZWiJaR628vI0pzPPZWkj1dXIK9qYS6vF9EsLArMAWRZljyYMtH%2Flf5nmad8Jsp5IqOaBx7j1tWwuKW3dKDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1981\u0026min_rtt=789\u0026rtt_var=738\u0026sent=2082\u0026recv=196\u0026lost=0\u0026retrans=0\u0026sent_bytes=2297393\u0026recv_bytes=47157\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2211\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22100,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"01093db7d99e3e6cf5cca68b616f8255","sha1":"4ee6ef9a4a4d10ebdee3257382e696fc6f152c48","sha256":"141ce6ed4e42543ae843b0559095b24896ea4fe9ef3e22b8b90233d26377731c","sha512":"a2cb8086881562ce1e279925d513da39974f00823c1d75c0fe6c59ec45e65d3e15c16ed39da8dbd47b903263bf958ece2055c3aeb966dc7f900e4706a75e234a","ssdeep":"384:sxlZ5D+fLqZHrv+GXj9Lf9raeytaAwuNBo91K8LcpeGALqqj0UunTU:UZ5Eedv+GXJf9rzLAwau91KX6LUTU","tlshash":"5ea2d1ecb3702b82f57dd57e0d5ca440036c6625aa9583a7f071433b838ea65e6991ce","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.818743Z","times_seen":241,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/authereum.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/authereum.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12604\r\ncf-ray: 96b66dc64ada56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"af461ccb3b0834c23c4eed3ad5c60d02\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8ZuW2%2BwGvilwV0qJp7NEYHNFqEBoFI5jZpzzURlXXmbE%2BZNxCukYMP4MTIyUDw%2FYwzrxbfGCa6SuQ%2FRUjpDkC%2FYv13bj1G9iUjdPutmUFyHq%2B0d7y52nosSE6zv%2FETtUoby8ZEOnfi8oplwzx%2BRPVvBqm1rweEnhju7t2p2UECOzEP8icA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2433\u0026min_rtt=789\u0026rtt_var=1399\u0026sent=1983\u0026recv=180\u0026lost=0\u0026retrans=0\u0026sent_bytes=2191432\u0026recv_bytes=43287\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2178\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12604,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"7ddc5ba26ef611fa3d9b266cf9699e6f","sha1":"2044dde2fa21f45da39f73be1289609b91878710","sha256":"7c23f5d02ab4100e9788e2c01e923ff0799a996c25c954c223c8d808ce0654e7","sha512":"d21eca0d633fce10f73ae553d215ffef5f0b9fc398aedfa5a66ee69887f7a476b87610fc404065994db0c0aefeb70a0fe96896fb6e22b8cc18c8168ad002486f","ssdeep":"384:b0tK/5F4LNqKBpzKHV9fAgQeMYmZXhYQ9cTceJpUYBWA:QC2/BwPvMYmleJ2A","tlshash":"8342cff7b935e5eded00d87639df7374a0062c6b26010a6f99d23a22691fe51311d27c","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.070362Z","times_seen":680,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:07.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 04:42:37 GMT","end":"Sun, 26 Oct 2025 05:42:34 GMT"},"fingerprint":{"sha1":"A9:2C:36:C2:5B:79:EB:33:93:88:54:08:DE:EC:77:65:7B:80:68:B3","sha256":"18:96:B7:DD:E9:B4:31:CC:9A:C7:1C:44:AF:F5:7E:C1:6C:25:F1:75:D6:6E:9A:7E:86:AC:B9:F8:49:97:6D:B4"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:07 GMT\r\ncontent-type: text/javascript\r\nage: 441991\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::zvz6l-1754124094801-12f1fa5055bf\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 02 Aug 2025 08:41:35 GMT\r\nvary: accept-encoding\r\ncf-ray: 96b66dbc1de2568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-22T19:28:46.37338Z","times_seen":50228,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/imtoken.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/imtoken.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7423\r\ncf-ray: 96b66dc63abe56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"780eecef5b25f054fc0440909ac0c994\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VoTt6D9JTyHy4rJhIvrRqu6r%2FjWxsaB%2BAbHurshT7fBVL8NHSx3%2Bi385cWjjHpoEI7c5e%2F0DKADigYfaJAC7ZFXT0b2qGHKpGJ1FJIHlzVqszGq%2F%2FeyISJrLAVK8KB5cwg1j5dJo011cNY9EsSYkceQ5uBH7Gg8BiaQTV3t4TCwNtqJ%2F5w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2154\u0026min_rtt=789\u0026rtt_var=1040\u0026sent=1792\u0026recv=174\u0026lost=0\u0026retrans=0\u0026sent_bytes=1975991\u0026recv_bytes=40395\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2154\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7423,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"e178ae94e21e6f38e4ee29a0778822e1","sha1":"1a1ce5a9bb337522c7e67a8761c2ea6bbf79a652","sha256":"b2b3f3d4557f701560a3d6039a5c6401d05fe9dec68c71a0ba699606b565f5df","sha512":"2d52db69f05b7628b36b037f8e2c89a49b7c136dc2350bf45d935eec03f23c3d00f5f23359e8750ae13d59fa10b80bcf66edbd2981b8c70af0122c06a5a7e800","ssdeep":"192:oRKLceCfVl2dCb6Y8lrZEKWN0e+11+sFYEKqYeoYT:Tcj2d9SpiA+KqDT","tlshash":"f8e18e497d952b39c281e37815f84b636b6f49a7b278916ef70570880124eb24b4304e","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.041034Z","times_seen":751,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/coinomi.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/coinomi.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 17507\r\ncf-ray: 96b66dc68b3656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"364082d8eaa61c607f50900f877e8b1b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LHtrUJzcq4US%2FSPBT0z1MksLuMgbTywH1Gs0NP446JyK3QtlcsUOc5K8Abu8dg4Q58IIoS8hggpEzaKt1GUt8dEMBRpPnclhYeTe0gy2HeUJGBD9MrH7%2BKTflO%2BuEEqjDxks4IPDRGIvWo2M9EFjr0M0ClaasDcf7rkzZ1se0nWeqnfLiw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2021\u0026min_rtt=789\u0026rtt_var=1080\u0026sent=2452\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=2706368\u0026recv_bytes=48134\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2308\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17507,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8bec00af795032b272969d8604dea45f","sha1":"6fc98a9dcfd3ed4f6d2f4daf4076aa366b755ea5","sha256":"cee38ba709752168c77e15fa9fbb7fc075d5cf73f06224aadd745b0094364408","sha512":"86866fc18a72436b8eaac6901f600744980a18d02d5061d06836396aa9449fa6b86bb7ccacb041d9996aa75501f628a7f0282fb2acd2cd8324a5deaa5a9d3c2b","ssdeep":"384:MM8i91ZGte7UkcvKKXBOtLXSvdXPL8HPwCYDkYu9Ev1a2Bl8:38i91ZGsbsBOtLXSJz64NQG1aw8","tlshash":"da72c0d1786c0d4445bf9ff48d03e2366a86c2924dc9fd1cae6568a4db04fefd2c6184","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.802404Z","times_seen":748,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/gridplus.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/gridplus.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12007\r\ncf-ray: 96b66dc68b3856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1a8d67fdfa73292fd732dfa269427fbb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RBcCF34VomHH%2BhlnX4n4qM0Pjx4H2ZSmOng6ERM9buyYeX2a9Yq%2FiqoFF4XIogZFw5TuLo5UjJipbaH0PuXOkbxNkKVYBW1ryEdKYD1FV35ffwQiq75X43afDXMlwwKNm0rDd%2BrRif12Ur6XabYqDY%2FD92BjTBzWVoRriOhsZZihEnRuQQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1567\u0026min_rtt=789\u0026rtt_var=465\u0026sent=2327\u0026recv=211\u0026lost=0\u0026retrans=0\u0026sent_bytes=2569332\u0026recv_bytes=47860\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2282\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12007,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"b370860671d254fa45fd1fb36ea88257","sha1":"7a638f30aff95cf63c8e61733112087712f79a22","sha256":"4853dd9d590e22630ff3b98a8c5a544cb7a27235676c6557b9a3134bc5eda6ef","sha512":"08e83af12f96d71e02f61ffe5121799c81315f71250ee0f2449f78402143a4eed0c62c47bf66bb92eefb5fe6c1610d031d6f2c58c1d93d8befe8a172e3d49a18","ssdeep":"192:0bbgXObk0URlbqiTdzV94C9uXRZdPSU6s1eM8LwxVL+D83HIoWf7i/ktNv3TTbsh:3yk0Ul1V9lGZdPgwbwwjLnXIoWf7i/kY","tlshash":"f2427b8b7293a033a1abd4314c967558264796a101e31b2c796d7f7fb33e98f1e83c25","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.038517Z","times_seen":866,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"secure.grovetoken.com/cart?cart=get\u0026callback=jQuery35105628756794251105_1754566088554\u0026output=json\u0026_=1754566088555","fqdn":"secure.grovetoken.com","domain":"grovetoken.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:11.276Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cart?cart=get\u0026callback=jQuery35105628756794251105_1754566088554\u0026output=json\u0026_=1754566088555 HTTP/1.1\r\nHost: secure.grovetoken.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/grovewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/grovewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 27039\r\ncf-ray: 96b66dc60a6e56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fdf4eba4027af6ff0d5cfdc5d2bd1004\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RbryRnmbS71%2Fw92OsvpOMz%2F4uX%2F97yXj7Rok1sTQ93OjHPRGQBBJNIxTOgKp8Cm%2Fsa9AZJal48R51gNaJR1W1K9%2F5wZjfejeaeaRkrDlpVDwJmAuFzBqEXi7jcK0o6BRI5UXByTDjmKT13BYdp0n2WIDaTuOld4oK3X0VLw6vkq9AaIV5A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1946\u0026min_rtt=789\u0026rtt_var=953\u0026sent=1356\u0026recv=159\u0026lost=0\u0026retrans=0\u0026sent_bytes=1465087\u0026recv_bytes=36268\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2116\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f356c8de89acff339240a11e7dc746df","sha1":"9bf92c4ca54cfaf8e66587e1136bab6f15bd8ae7","sha256":"1b605a839fec95af036a48154081fb170438b632aa37b79bf37ac11e586c2a6c","sha512":"af6b3b0a5f247f2a2b53169927c40a220933a0e6f107ea05878675c437ed19f694fed41ac1354faa8d49bab3a758b21c052700a25d4cf08c5cb4149ffa813c27","ssdeep":"768:N9P12avlN6GXKgA1LRKxgJbmlFBt5PqLwV0yJdXTqBxCQJvyKq:N9tLv6I/A1LRug1mlFBWLg0yJdjqBxC3","tlshash":"0dc2f117b442cadbf5de318b5679fdb988c8d0a77f8a16ef0d685940d0350b311ae4c6","first_seen":"2024-10-06T09:21:38.458208Z","last_seen":"2026-08-06T10:01:23.799147Z","times_seen":30,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/safemoonwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/safemoonwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 156772\r\ncf-ray: 96b66dc60a7056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3e388a3170a4d0a7f8697ff605424fb4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sHsDaXBF2kdaIyxsiRty1xmpgvyKlboML2LutSYK48NEThcJjA2rU0wrYOxSW6no%2B7mmjCvmrr0fcI0jVI22fcHeuZIOruhNoPjgftfnyJh%2BLhUztEu0WpW%2FgM7SIWcx4qJIgYDgKMjZw6kIe%2B6GVDzILMZ15nL3DVRaQEhykNHTbhMPsA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1799\u0026min_rtt=789\u0026rtt_var=655\u0026sent=1497\u0026recv=165\u0026lost=0\u0026retrans=0\u0026sent_bytes=1629994\u0026recv_bytes=37393\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2130\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2010 x 2010, 8-bit/color RGBA, non-interlaced","md5":"efca8183a383934870ae1a75a767dceb","sha1":"4433a8293d54432273d0a0c47e0766081af4ad40","sha256":"2f60ec5480df31e9ba7435d29467aa543b824979f3bca21fe6444f852a3a5812","sha512":"ccc52262f544f8041df96812ae6bcc1bdddb53a22a1c8cb5b2c896ebf8676c019639216d3191598803c607ec26bbdbc834b8f5d8b1af340e5c3fb69483f2a526","ssdeep":"3072:NoqiKekQdzT+7jtpBqZCZi9SsIh6mP9nd3mezEexTd6sxP7NrOWNyQLe8Kv:viKedRTKZpgolhAmP9nd2ezJxRCksd","tlshash":"54e312711a68d4789829fdcc22b779513666bb2e0b11997f27f054363fae3f7a008858","first_seen":"2023-05-31T13:32:45Z","last_seen":"2026-08-06T10:01:23.816526Z","times_seen":35,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/wallet.io.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/wallet.io.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12842\r\ncf-ray: 96b66dc68b5156a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f62075475b545ecd78e1408cd04900a4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qDs3KO9d9kruQd%2FjqwV3TbHfro3KrDBAR2cdGAgP8gLS55RD8%2BoVFfoS54zofowOuVjqqpv9xhn3jS71XX27jNgx1S8S4fVSt%2F7sVPiC2cacdKnOTWzCh3qmDrFdV5L7LcOGDlie%2FsYenp7aN%2Bd3r%2FNK%2BX62BaKa5Gn5tGHD3Y%2BxqegwjA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1567\u0026min_rtt=789\u0026rtt_var=465\u0026sent=2337\u0026recv=211\u0026lost=0\u0026retrans=0\u0026sent_bytes=2581332\u0026recv_bytes=47860\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2285\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12842,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"3b94a722de722a8972c8883eb2eabcf4","sha1":"42976f0e9169db09f109656e0450e6cdaff73281","sha256":"7ab4f55e993789177b55f53551ecdffc97ed6fb42300be796487f145e4f128d4","sha512":"fb5cf1b83498f888e659e08a4fa2ac1e43fd673be4113d66d82d4d684d7a477a6e8b3d60b93c12a37d3ea745807f615035e0a4e3b96b80947cfe81696aaa7dc3","ssdeep":"384:s9uMe8401VAxH6tMTTNpH5E3XN5XPch1NQ:hqp1aHlT5eXN5Si","tlshash":"e742b03d717d629ef004ce3451b3d0c9b71224689da3ac5d5c17bb690c92e332ba6ba3","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.039509Z","times_seen":709,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/halodefiwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/halodefiwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6941\r\ncf-ray: 96b66dc6bba056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1f1ae811552a651815e8748e6f8d8563\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WhIsIvkawtdKCCzJDZlDdlAn0JWDJHwVZ%2FxrnyDcbHqdyMBJdaUoBnrKVuqkdphwio0V9K3p0uYTrGQMLdn3T4sPXl6XOOuoRj2ih2tFgoAzWjZR72X9L61ikbDR0t4iqCEqFIfdgVG%2BjSaYUTL268cOO3p5w9r5WrKrYv7x2je2n4EFag%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1743\u0026min_rtt=789\u0026rtt_var=700\u0026sent=2402\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=2651285\u0026recv_bytes=48088\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2298\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6941,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"b7b86cf653072d036c6ce25b21075ffd","sha1":"d1848f773e4ab91de17efa57c286d21bd38b3633","sha256":"3edd13023131a27bda3e49b23184bee8a7b8c0ab7d283bad63612eb7b339e7d8","sha512":"59c08978f0293fb0ae99fb4ad1ca0448164f1bab16797d4d5d8431cb572c7014df0d62270ba5c37a6f34ef3ec5e3e7b7cd0b00eb582c230bdcb1af41aea48780","ssdeep":"96:d58SnLFHGQDnbElAnKO5vMgiiuYqp29G1JEo5nzeJqNesGs2rdWANdb:/BFHGQ8gv/iSUJEmyJy6rdWANdb","tlshash":"43e1af4633240d1ee52efebb79f25031cd173554e64a864e98b948a60bbc07805ae285","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-06T10:01:23.795306Z","times_seen":574,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/47e964ecdcb6c59e56ba5de5a6b61c30.html","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/47e964ecdcb6c59e56ba5de5a6b61c30.html HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-length: 0\r\ncf-ray: 96b66dce381c56a2-OSL\r\nlocation: /index_files/47e964ecdcb6c59e56ba5de5a6b61c30\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eDiXvVJvZGuIgopZckwhVCN8%2FVGDV1MRSk4y4RaCR%2Fnry0LpguVNGxpYqZYttF%2FFL6C3lSfjf2NuLiHt%2FRx4S8Z16LhiXHA%2FcRNVddj54E2iYLiRM3FBTpARwO4hjXHTnhFkgl1DyIzz7zRi5tR%2FU%2BZM%2FyV2FPrHsBHPZ%2FwX%2BB42zmR3kA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2251\u0026min_rtt=789\u0026rtt_var=1402\u0026sent=2839\u0026recv=238\u0026lost=0\u0026retrans=0\u0026sent_bytes=3126052\u0026recv_bytes=50727\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=3374\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":729,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (632)","md5":"d0680b59e0b13f18a571e98a3422fae3","sha1":"75765dece00eda157d1b3515db4840068d7479e2","sha256":"4757047de93fd7977d28f903e5c35268d2cdac5036227cfc499c78ef4ce921e4","sha512":"0b300976608fd689eb9d37308d162e72dc1f1874438a8065533f1528f72df57ab635c15d3747b23aaa5084458835b44206f7568f1fb3301336c81a091b99a2a9","ssdeep":"","tlshash":"b00165e91f1ab7492542a3a2a1edba081464c4458492cc501c6430e8d28c7dbe46f3c7","first_seen":"2025-08-07T11:28:59.746452Z","last_seen":"2025-08-07T11:28:59.746452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d20171528372b_Green%20Crypto%20Fav%20Icon%20256.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d20171528372b_Green%20Crypto%20Fav%20Icon%20256.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 110463\r\ncf-ray: 96b66dd20a290b55-OSL\r\nx-amz-id-2: ECtOPZ40V5yOrXCZ1sLY+gJR5tXcNdMWNOqY7gTjBtDEPYIUNOzerRj0oWGs9l83yYX9wOZr2RA=\r\nx-amz-request-id: 5ABE8S7BYERGZ1FR\r\nlast-modified: Wed, 09 Jul 2025 01:37:21 GMT\r\netag: \"681ed61068c5a2ae88169d40793ae538\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: oCZfKofpZ0.bblo0pbJ5acGdKvuMqqxa\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":110463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"681ed61068c5a2ae88169d40793ae538","sha1":"f6ae7e31e8bc1eb309b9a5299d78845bb3aa123d","sha256":"803b75d0b1c5f7914989fda66b8b809c159fd0f002cda7330bd60e92ceef16f8","sha512":"5b2c8b13349bb5a0faa96273888e70f48cbb230e5e3aebe566e5755b3b0dcb2acba104be84f30b42503fbe7362c2e2e88f46f7506b1f907de6aabfc2f4b8c5cf","ssdeep":"1536:C+0X/b2FSqGMfCUleHHbVAOac7xv3XAeDDEMcy5O6R8feWX7rrQ7uhR/RrVh5Ec5:g+SqOrbPN0MF5nR+b7NhR/3uK","tlshash":"bcb3126239241880f523274e7caf4cec6e5671ebad6cf3504eb6c35e794869c6b740c6","first_seen":"2025-08-07T11:28:59.748393Z","last_seen":"2025-08-07T11:28:59.748393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/fetch.aiwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/fetch.aiwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5868\r\ncf-ray: 96b66dc5ea1d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c4be090eced5dd183314cb9dcffceaa3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FBUZVrVGfTECy6%2FFD3w5oI59f8dP91uVTt3%2FWyYR6gEBYtCtxdgSr0C9%2B5CcYgQj1wCarautzRatQzB80duZkCiiyrdb4Cnzs6jhuA4zIdx0KRealxg9SPQ4piKXrIr0bOL3ZwEjE9oaIVqy8HmjWzjJfw8uXDPOWYHeXbtybqqX67YUeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2202\u0026min_rtt=789\u0026rtt_var=1261\u0026sent=1180\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=1274664\u0026recv_bytes=24922\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2069\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5868,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"2e035b45069b79e2249dc43abd3406c3","sha1":"4b834731852e670d6bcf995cb7a25d9363dacdbf","sha256":"701b7d46efec99a9ff357104c8bd227cc886f4ad48e108dcbc764d1308b56d15","sha512":"bfb2dce61e8e6578190a31b7e5d2f1798f8aa962f957d4f1faaeca6853d427213355dc82211970b41089b0b6cfc75eda3dae0290d3ced4ef9cb0ed3f93c60656","ssdeep":"96:A3dahxxGMY8GhAC4IDxShSIjCjRMvnJDULulKQSLy/Rux+QMi1WyjkULxm30NeO1:xhx5Yx6gShjCWxDULr2/S+QMi1P3xdeY","tlshash":"e3c19e436c5fe089c63bca3700c1a4cdce2a09c2b1713dba6439194da5b42e1b52fe8d","first_seen":"2025-04-27T11:02:02.402594Z","last_seen":"2026-05-03T10:03:53.565743Z","times_seen":20,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/phantomwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/phantomwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5628\r\ncf-ray: 96b66dc60a7756a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"34c4fb8e26854296dc81ffb301752ac5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=T4KIYBgFn36hIRYSmwa%2F1Vq6E%2B7B7%2BEGdyLr2SEYggKsXDLMuIvaPI5NnNPon44taYt1f5Sx1ykuQb%2BJQ3fY%2BZ4P3K9agg0gvi4miFSwq3zT7jWIIA5g%2Fc3S%2BsAPZXqo4ZEpbI%2Ff64xjskcT6CjGtuWEd0a55Qu8vipLrDTneQzGKglL1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1946\u0026min_rtt=789\u0026rtt_var=953\u0026sent=1356\u0026recv=159\u0026lost=0\u0026retrans=0\u0026sent_bytes=1465087\u0026recv_bytes=36268\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2116\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a6eee7c3be10e57e6094180ebae66127","sha1":"5f9e426a9a5fa2e3ae61e4402c24002fdcf9b43e","sha256":"0574b74ed6e46eab547f953027c685e09cf86a8325cd8089ac2d0e818d38daa6","sha512":"58f697c434fa7d23640194a1e446990fe10faf5ba6b36a876990eb868b76fa9632dc002e4e5fc99db73fb4f17ac9663782e82ef63bbc46e9e7f1d976675a4cb4","ssdeep":"96:vvLRQKSFDO5U4FBThHliz7uPt14+Z/lvHLYrjYAabeVSO3izgdih09EKfEcnDI:XFQKSFa3BThHli3u11htkXYA2Okh0TRI","tlshash":"1ec17ce3cc6a4805eedc0bf8b25b7144b0344796a7ce6eb58ab026443c5cf5b681f1e6","first_seen":"2024-10-06T09:21:38.450027Z","last_seen":"2026-08-06T10:01:23.808045Z","times_seen":28,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/blockchainwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/blockchainwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5840\r\ncf-ray: 96b66dc61a7d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"69df070f522300447b448572f8652fb5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PLrolNBXsp1kUO7WtcPdWEU4QCf06A%2BjTet0lnXmxLx2VIjq7Y9LlzOTIGcz%2FcJ07SgFid73LdIsj8pnPFeLlRGo5CJd23rYMs4eVmdnVXmujh8Xb6BGtA7irlNaQvYNF4z5NYD7wQgqoXVv1QCyNxnaGcAw2MCnUs51E%2BT6et%2BD3E75Kg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1879\u0026min_rtt=789\u0026rtt_var=655\u0026sent=1763\u0026recv=173\u0026lost=0\u0026retrans=0\u0026sent_bytes=1944945\u0026recv_bytes=40346\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2145\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"62b89a0cdd10136e021c11484c00d7de","sha1":"043a8201d154608ac19dd0b250bac7500ca111a0","sha256":"1f83201c4c70b56580697616c757ead1757a8d1b3f6e6f7fc5e792f057a031d5","sha512":"0c43fa727f1b0a80d28f3d5a17b99bc863941265cec494ece6f4011f4f75c4088590e8f78c788539d5013f38c6e26ac68df45e681636157fbfaa8b6fda91cbf8","ssdeep":"96:nSnC8xOxdIMtJUzc2P09tElcJY2unmNVISHxC6Of9oHvZsdEHb1HL5DN79FtxWEm:nSnC8UdBJgc9t61n4VBNW9oHvZPZr5Dq","tlshash":"8cc1d6e34e3c5269667cc0fad69386c89cf5c48791eb91b4e40e8f8828db5446f25b94","first_seen":"2023-11-22T14:10:38Z","last_seen":"2026-08-06T10:01:23.823609Z","times_seen":43,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/equal.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/equal.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9150\r\ncf-ray: 96b66dc62aa656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"79c861ca268afe0c0be5d4e71486529d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yJ3IbFiMcT2t%2FLj0zX63AF%2B3CmecUudVNNq9dVnXTkTBFwfa4ScmNEdo2mE2qOJdkyVLNBvByNozVIPhris9CpT8J%2B%2FfSWOnIYiKIKQV8jiiRm%2Favh%2FL5eWJzFhBV%2FWTfL%2F4MSC93pbgNmZrQzCCbAfkx7HJgFvTOqAzAEmo1TZLK0ePAw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1879\u0026min_rtt=789\u0026rtt_var=655\u0026sent=1769\u0026recv=173\u0026lost=0\u0026retrans=0\u0026sent_bytes=1951695\u0026recv_bytes=40346\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2146\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9150,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x350, components 3","md5":"afd575051825f392b4d9307de977a301","sha1":"c727fbb2f1fd7f6007903184631243db95e8d1c9","sha256":"b88d43944126f8ff60a4bf3e118326a45ce1e5ff089e70d15433e915f182da2e","sha512":"5d185fdc6cb4378d6986ab78f6628746d137abaae99e4b70a90bfce2f4b58676cf681772dba250d033cdae1ae0918583d5e5db8f3e35d57237c72c6d5b23ea43","ssdeep":"192:+ww+Dvt9GpY/9hhcc6s3hBF71/iPZGY5iOpTubuL8F:+wppmUhhcjQZwZZXpubuL8F","tlshash":"87128d077f0aa144e40d1b71eded4b28d66b9e214e96b367f6210e022bde0f111d03da","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.813126Z","times_seen":459,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/sparkpoint.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/sparkpoint.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8253\r\ncf-ray: 96b66dc6ab8656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"63403c9a05ec1f92d8ab7c62ac17b702\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7ZOPIEE6ydXmbBsezFJo3BZMGKo4pwDmVWJ2mVzQjQMghz2%2FVa4m3kuxS0PKBA%2Bv3xxBuVZBrPw%2FLvwl0N7gb6XbctL%2BPRqwo%2Fe1uLSdmSNOOBpHEocptO3W7Kf4m4awW%2BmL2ztPg5L70qGgYmymBwIU5Mpju1jDgA2Se6ucGtQzjPZpqw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2385\u0026min_rtt=789\u0026rtt_var=1138\u0026sent=2699\u0026recv=221\u0026lost=0\u0026retrans=0\u0026sent_bytes=2986883\u0026recv_bytes=48318\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2345\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8253,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"103c31261c3932b698967da37ea4aea5","sha1":"2e3a279b1671a76bc99fd5cac007ffa9408424a2","sha256":"f829d44d6a79c943dbd28798fda25a63cc8ea33fb6a5a59924f86f1048577438","sha512":"6d9bc985367f3602f05da022602e337a6564546b614bcb7bc8219ea482356a8f5d4dd5b2b7fb95f31e8d046fa99b910a71acc8a1b901eb763c7e0d7ca5756cca","ssdeep":"192:T9SM/Zs5Ezv5DhFT8bT+/pJ3ftZg2Gs/V1Z4I7UT4:JSqZDzxDjT8b6/pVvGqV1g8","tlshash":"74028dbf3779a546c792e3fd1aa45476b20e1b307f0755cf316137739586104a52b50c","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.035411Z","times_seen":481,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/particles.min.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/particles.min.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"36e33d11d289c4d336fb4f7633a735dd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iKNVei5Ozp99gBTCXGsxWgp%2FAf21J4PpyIXYOTzrg5yYN5OzcEv3RvO6%2F8TtxlR7brlJN9Tvag%2BTcHAVpKooby6yBf24kStXe4Jnf7I0Rq%2BNEMbulIPgU3dn6j7V7an3YSbcSqpxkhhQpB65m7Csy%2BEj3cXwa6XqSO3EsbQku74gqGQQuA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaea6256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4172\u0026min_rtt=1677\u0026rtt_var=1935\u0026sent=147\u0026recv=29\u0026lost=0\u0026retrans=0\u0026sent_bytes=134389\u0026recv_bytes=7077\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=332\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23364,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23002)","md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-08-22T18:45:43.100048Z","times_seen":5617,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d2017152837b2_rm373batch2-08-a1.jpg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d2017152837b2_rm373batch2-08-a1.jpg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77474\r\ncf-ray: 96b66dc43a3eb503-OSL\r\ncache-control: max-age=31536000, must-revalidate\r\ncf-bgj: h2pri\r\netag: \"a6713c18c97a2253c02a4cc3d698f73d\"\r\nlast-modified: Wed, 09 Jul 2025 01:37:22 GMT\r\nx-amz-id-2: ApQcjcPwtGitweS7AadKIV5fNBl2pk3sOdQqgJT0J/NsFYnLETKI/wDWHyL8vjuzLmtTf/d7bo0=\r\nx-amz-request-id: Q5FSGDY6Z0Q5WCH5\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: aFY9HVG7PrPpF0MsJ05KbSUm9py5gvZ5\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3334, bps=0, PhotometricInterpretation=RGB, description=5G networking technology background vector with blue digital line, orientation=upper-left, width=5001], progressive, precision 8, 1080x1620, components 3","md5":"a6713c18c97a2253c02a4cc3d698f73d","sha1":"a168721429c4f91c351ec8a91a3eab644144a7ae","sha256":"915f273fb1598ca5ce672ce7132210a32c90b56a5bb577ffec0cbb255836dc15","sha512":"5f5b99efa343344ae1899ba052d667432a4f39bcb995d1ec0eb22ade20d43bd2efe5544ba6179e2432dec7043ece28331ba5c145f29d85ae4cb84e70ae8067c9","ssdeep":"1536:NW/5JJfm+L4zQwpVcDbBlJu0sAzItZaP83cYRjD:85JJfmF5EFbuxAzItZIOD","tlshash":"b573d0157792e942e6e139b4e4efc2529bf38ed8ceb2584a7fdc46251f703985c89083","first_seen":"2025-08-07T11:28:59.758167Z","last_seen":"2025-08-07T11:28:59.758167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":80,"dns":10,"connect":8,"send":0,"wait":133,"receive":2,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/alice.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/alice.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5366\r\ncf-ray: 96b66dc66b0456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e017e186dfaf136b586c7ac734cadd88\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BrFm2tPd4JTlg2JOZGfYCszM4Ykb5Sie%2Bb4R1V%2FgHKlQchFQCc8nXGIxLk7c5vS5PmSPOPxybGw6eGTQDOeAdQMRacDqc9wmobJVWyEc6axfiGRq7OK%2FmT9CrkMbHnUtf%2FuWwI47IOJHcXxABCaPbH8uvOOoqiHDvmq7EKsmh5fqXpOWtQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2370\u0026min_rtt=789\u0026rtt_var=1197\u0026sent=1998\u0026recv=187\u0026lost=0\u0026retrans=0\u0026sent_bytes=2205205\u0026recv_bytes=45025\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2188\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5366,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8bc5a913dbf1c2654291e7c8dd79fcef","sha1":"fbab256c104e7bbd79e6091aab66569f305d9a0e","sha256":"738d8ca9ed27d8046f72f47ea4125316906730fa2013853f0dcbb72b60215e00","sha512":"c38eae7325fb911acf3fc66b2ca20956506c16a9101ec5c0c0de2d82c3a9738d4bb4ad341435a0209ccd74af0e8661315778c0fb8d9e47f4a2e919da17f4b01b","ssdeep":"96:rYxOccIo7qILIWLcByAeyn3oc7WHXEHFHBajvuYlXGPa12VHdlpCRtZg:8xiN9Geyp7WKJ4jvvGPVC7Zg","tlshash":"54b18eda3980976af636c5f85cfa59771af583ccdc6fe38d50d328843aac10319912d1","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.012622Z","times_seen":506,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"secure.grovetoken.com/cart?cart=get\u0026callback=jQuery35105628756794251105_1754566088554\u0026output=json\u0026_=1754566088556","fqdn":"secure.grovetoken.com","domain":"grovetoken.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:13.158Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cart?cart=get\u0026callback=jQuery35105628756794251105_1754566088554\u0026output=json\u0026_=1754566088556 HTTP/1.1\r\nHost: secure.grovetoken.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/brisewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/brisewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4641\r\ncf-ray: 96b66dc62a9556a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"177554c68e2375d1c63d14eefb8e436a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LgkMlf3%2FoHF03odEdtJ71yhe9xuGnUkMorDabKIe76sHjLDljJJ9PEXXAHdBFbN4rAtyimJsrYNNRdDp37bVSPrIZNuANBTl5v46Ic3TT2IBX5oEDdYrOb1nSAIbX1p1d%2Bin0HwgR%2BRsOppt%2BWWU1kb88yjqZ1%2Fa6Kw%2BonfqmXRnBtYSEg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1879\u0026min_rtt=789\u0026rtt_var=655\u0026sent=1778\u0026recv=173\u0026lost=0\u0026retrans=0\u0026sent_bytes=1961850\u0026recv_bytes=40346\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2148\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4641,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"bd0adeccb3ccc195a20e125aa8cf46e1","sha1":"bfb6c22db39e546b89e155a3d3335534b05d58b5","sha256":"2ab4e865067e2d7f68744d5fb4cf6f86c77fb77ea72c1b83a0f8aae7c39bbd75","sha512":"b724dbdb4f6b013abbf00856d773184f5326e143fb84ae7d1c5958ac5ab6c49f01aa6ea10e7d33a414ddd886ea04d65f23efadba0178253ef258e27c84fc122b","ssdeep":"96:/SOwiXBZxDvdj4/bH+MwL7bDC/9vlupAfuc/KmTo+/cj:KOwiXZvJmW7bDo32HnmsYs","tlshash":"e4a18d5fdcdba913c6d4f73dde6e4168955af2005ceb9649482b96f38a000d51c47ba0","first_seen":"2025-02-26T16:32:21.390574Z","last_seen":"2026-08-06T10:01:23.799892Z","times_seen":28,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bridgewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bridgewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7723\r\ncf-ray: 96b66dc69b6c56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c696f0b3471fff6f1cfcfde4ae14a6a7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F8jV1ux6cZ7jBYJhet9cy%2BdNG15AVcJrmdxZULxA5JWKiaFln1vFaS5kdiZsuddIrNYEcvv9qcUGfJNt%2FiCUuk6UJD1VSysLoYvgFYvwkzAtYmJuX8kF%2FjmcwsBQTpm3NMNyPrkdErPzKPDjgosbUX0GfLcxqyC4WKWuGr5RvLG%2Byyj%2Few%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1743\u0026min_rtt=789\u0026rtt_var=700\u0026sent=2421\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=2673209\u0026recv_bytes=48088\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2303\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7723,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"347c362cb102ada4b7d16da1f70d0951","sha1":"31a1f70768f1d78241e39406402f87130b8e2a2d","sha256":"6b803609b44c6c285f680931c98248ba3e089f93c1d32d8278006c42c7dc9493","sha512":"c152cd518aaa5ff3699cb59b00dcb1ffa175e1e704a43204562d36bf5b5104173038b92bc51ebbc0f95b36924077597399881a7b6b77bec8dc1e88738c2eccce","ssdeep":"192:V0sJHQXmCiwH3bngT0TEtC+lRZITAZhpFKOem6xrYEibGLdo1H:ZsmCbgyEtR3mADrpIw6Ldop","tlshash":"f1f18e737bbd2302d89ad73114ad4bbc0b2271719dd252fc3a9771935826b10ef271a9","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.020375Z","times_seen":668,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/viawallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/viawallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8024\r\ncf-ray: 96b66dc6ab8b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"572ae23e4f045d23484601ab12758a77\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BtOEr7UYxqd%2FjZgCtWlXC9WDD9kVq%2FvTKmnwEtH64ILzBSyrZ0qcisHlOiTPRUbASVz2EMxYWPiUNdrH3WiIoxei889B614h55vzCw2OrzuXEj7WuNDMbI4A5f%2F71kWcEEJF%2FDtcDxuesHd1ZJGtnC0%2FfFpr4S0Bu3nlVn%2BL2hERDA%2FDSQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2205\u0026min_rtt=789\u0026rtt_var=1036\u0026sent=2635\u0026recv=220\u0026lost=0\u0026retrans=0\u0026sent_bytes=2914803\u0026recv_bytes=48272\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2334\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8024,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"1b3b4abf57877c3b029aa9bd3c7f9c77","sha1":"a726fb89d2b09b7c1a1d7c3b3bc716ad73a11280","sha256":"ca134a16673ab82b382968b51004d66e636b6794d60195e8dd8f38d222a34bfc","sha512":"ea6dc5c1681a89c80e4db2377e8fcaf4c42bb9ba1ac4266d566ea5e66f841ac86084de8224882905cedb2013b8aca74e608b10bb310649e55b7b2ab1692ba1bf","ssdeep":"192:cgS1bypHHrUUz83y/5bmg877GRW9F8M1UjslUkoGpF:cghpHLKoIg8PG6CM1+sVb","tlshash":"82f17e3ff246aae9e269e87045c72ae4c5ff21d5ec35c79c9e05ae0c0c17809645263d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.060316Z","times_seen":794,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/flarewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/flarewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6667\r\ncf-ray: 96b66dc6dbd356a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"61e09a755450d14c5d397e1e96e3c329\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dmS7HxBgBAMrVYQ%2BMA1not340SdfD59a4Gv1MfcGWY9Zo%2FH9FSsvZCuWQlOOqJhaOw%2FZ0vg2Q4s93dxJ1713bz9g2N%2Fa1B1J3aBbxRbpd0UY%2Bi55d0ZOxepYi2%2FThN%2FWrxEpKbLw%2FShaNlQNtZD4HB3fny%2FCvJ%2FSYy9%2Fvt9UqcF79pLDOQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2418\u0026min_rtt=789\u0026rtt_var=919\u0026sent=2729\u0026recv=222\u0026lost=0\u0026retrans=0\u0026sent_bytes=3020048\u0026recv_bytes=48364\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2348\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6667,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8628295c6cfcbe2c37bab42b69ee414e","sha1":"2f24dea38389734f56eda191707ad6c62a026f8e","sha256":"6fa0b252dce3014cae4d9043162c934d76492b2b76ae283877aafc411d939c5c","sha512":"078430e084c9b4752963d6374ba226804f2d5838c59c8bf9872f3badd78915db3f6fd346df918a9c3351b5ca1c6df1b9512202757d6ca7169c4d61a0191c307a","ssdeep":"96:bRRqBqQCV+nbwKSpMi7Ho5HBvRXTJnTVssyDHwfm54WztuTgMwmQOCXxHBCO7c:b+LrTSzH4HBvRs5QfmjB5mvCBF7c","tlshash":"c1d19eff37982211d098f9324a48649a3f33032c519133ec2063612f6e6bc1c4a84f9d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.768057Z","times_seen":609,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/trusteewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/trusteewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9631\r\ncf-ray: 96b66dc70c1b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"08f4fb043b3e2940d59a12f035529d97\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ASvtt%2BNzNwKirdmvl7MWA3DWCs%2FQURjYJGDaO9cMFxfjP%2FXRAfjD9KzGkEmsvgrEDp9lA2P2vXJm6%2BMeaMkIQ1cP9xUlWim6TD3JJL9m83Gx8clXDNLKgdtugUx05ISGD4OdOL7I0urvktd2g9iTtKEAKCrrVxQZpQ%2BoQ8xU2c69a0Pgvw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2385\u0026min_rtt=789\u0026rtt_var=1138\u0026sent=2689\u0026recv=221\u0026lost=0\u0026retrans=0\u0026sent_bytes=2976049\u0026recv_bytes=48318\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2343\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9631,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"5053513633960d52b22b7ada35c2be77","sha1":"d489998cf55f2bd8a18e15625bde018ef93cbabd","sha256":"da100c8001271aa0673900ad8cb38791ca36fa5d8070a34168b23ccbbd02af25","sha512":"2238f5114c143b0099595070948d441e8e1511bfafee9bf61acf86d2e13c781f323938b85cb4c83d08ea74cae82a2e0ee762bea98380602961281b51ecdef0ac","ssdeep":"192:0OfUZWfn5zS9fNqMsEnumMntIFQ/o3MDr5UCYsPKGaGQjNo:7fUIG9V5uRntIC/o8nCSSGAy","tlshash":"33129e3c77aea57299c0ed3f2ec1d6c8f99095f81cd5202f23e60599e55032c3e59ad4","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.829648Z","times_seen":420,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/main-84348064.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:07.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/main-84348064.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/checkout.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003chttps://fonts.googleapis.com/\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1ugAaD3zwqoDEGMizxfYnhZM3O2mwcuiWgw%2BjIR%2F5acM%2Fk2GIa3ywIXd46kieI2i6bSkVFxU5%2Ft99pG2AobISu7LGP3chSH1JhxRXnYKHnlqIvApKTy21BrxyjmdbREP88uSCJJ545%2FlHzzn7%2BS6UD6CesABx58V%2B7CJ1tPLF69kVR5%2FXQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbd4db856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1077\u0026min_rtt=830\u0026rtt_var=153\u0026sent=932\u0026recv=80\u0026lost=0\u0026retrans=0\u0026sent_bytes=1010472\u0026recv_bytes=9708\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=693\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bybitwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bybitwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5866\r\ncf-ray: 96b66dc60a6456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"06c3245b2e445dcd5b1733cafe7d0622\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8nzvAmAfZywT8%2BaJom4f9Z1x5PlUX9uwu2D0UP672McsVoZRHzuj1%2FOTwjekeu%2FYia5p7ppE%2FsqGqB4oq2f0F2Dh42kspPv%2FomEo%2FD%2FRHP%2FUit77hIGFIiYqqbvBxpMAeL0d6NPixTK4RQi29A0hnJvRsBjI9ThuwYJKRxVPpwuw6ez16w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2581\u0026min_rtt=789\u0026rtt_var=1472\u0026sent=1867\u0026recv=179\u0026lost=0\u0026retrans=0\u0026sent_bytes=2059689\u0026recv_bytes=43241\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2170\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7d6128f87f8bed8f34cc4be04666d9c7","sha1":"d1b0f373860ea60b65b0d2f8ad2ac935a2342a2b","sha256":"4dc96e76556293149b23c2f0682577bda47c6089c320096e2ea27b4aa4f845df","sha512":"a3025fb18bfccfcf69315f60c97021237c66ed6840f06947339d257fc07ba37b1803543c3817cbee17748d6f9359ac2bc6ecd57ee27acc30342d1350de754944","ssdeep":"96:nSi7Pa0MzgSOjU3oLqajx6SBSI++ncLVWGoVjViJ700dHDViD8O7:nSi7PlQgSOY2qaFBSancL6jVM7JdVIL7","tlshash":"f5c1e054374a12967fb9c6c990830ad669e1d987f7eac339610c020c46c5d8e3f27fe1","first_seen":"2025-02-26T16:32:21.380987Z","last_seen":"2026-08-06T10:01:23.752039Z","times_seen":42,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584104\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/checkout.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/checkout.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29\r\ncf-ray: 96b66dbaca2b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a5896dbd0e8e7925151d200afce2ad54\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lQFM1%2FBUS%2B7w5rziAXF9QKXstTND8JkUYtM20f3BxqojuWk8G%2Foru%2B%2BYe6i12pceWJmAlsVR%2BD0%2FpHeRQNeIQgwGdVBUjQzldW3p%2BMbP8ADAjrWdUdqsM7subtoNw9gX%2F7PX57kscnw1PhWNxLLuIUef6RKRTzp%2Fv2coTO%2BSe3LJCZ4AtA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4610\u0026min_rtt=1677\u0026rtt_var=2923\u0026sent=92\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=80860\u0026recv_bytes=6935\u0026delivery_rate=4694849\u0026cwnd=46800\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=317\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4bbf3fd8ed1ce25e7a637437da5f56b2","sha1":"ffd7aafe9725af029c154322a7b4a475107b91f7","sha256":"f4949c0843efec7ee5c97c3c95c451a69bd759659dfac61f8dc4959f7f8824cf","sha512":"f1e23ec7f658007d0c0aaf8c9fd112741971087e83770e9d352b7e482b5cd42af38929cf45c7f87cc347a07353438a2acf48a2f54537813e1f3a584d27a4e643","ssdeep":"","tlshash":"bf80003b82aa02280e288e8cb00ab88822320208abc00b008c200322f8000328080828","first_seen":"2025-08-07T11:28:59.771353Z","last_seen":"2025-08-07T11:28:59.771353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/loader.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/loader.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"b8f9a4b287674b3f4f071535597ab989\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4m%2F8zKQSVAc1F21BoI23nr7pNDRu73AJzvBTQHHjG6X6aEXV75DI3MBAdQDLg5idzJP33VamifLXhZL9tb%2BDjN1b5s8oLIqUj19jp%2BXiEzBqzwfuxd0BIXywmlhkYYE1YFxWUHuYMJMTD%2BHr40StuQHHCf9xQV0bA0pZSB6%2Fw3WbqOpGCQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaea5556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2566\u0026min_rtt=1265\u0026rtt_var=901\u0026sent=457\u0026recv=39\u0026lost=0\u0026retrans=0\u0026sent_bytes=480266\u0026recv_bytes=7575\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=348\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1016,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1016), with no line terminators","md5":"c8ac2f9801886ad2622cf8a59f33f71b","sha1":"137b68cc85532778501c494084e80bb3972ffd6d","sha256":"acc5a73799621990e87558273c5dcb45313ece8ffd2573de602339c99f130cce","sha512":"cb5c683aa704988a9bbfe1a41401dd50ad20193ac267c76618a45d989ab4728d50024ee46e69e244b7269384d0ef7c6f20e91aeca6b211206e58540dfba437b2","ssdeep":"","tlshash":"ea11ce3e1c12d23c48b8b54df56bffd835a037136934e4879059cc6da504ee3d46aae9","first_seen":"2025-08-07T11:28:59.773302Z","last_seen":"2025-08-07T11:28:59.773302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/d'centwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/d'centwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8416\r\ncf-ray: 96b66dc62a9856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1eb63581a7dc5bbe9c0df9b7f42e2d82\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LchV%2BZcPHFKoFOiI8tVSDKhyN%2FFo75%2B8Wds1JdCjzWQAauPdm3TEm0F%2BKHYzft1JoeLNZNm6%2BOF6l0g2i%2FchNJ7QyL2rV5ZA6eYlOrNDyNTk31FDptAK6evLBkg%2FGiPyjByYjV6ZNJr6WKKWrbS6i%2FBVuf%2BLir0gQU114CvJqrqHbavfaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1919\u0026min_rtt=789\u0026rtt_var=770\u0026sent=1368\u0026recv=163\u0026lost=0\u0026retrans=0\u0026sent_bytes=1479108\u0026recv_bytes=37301\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2120\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8416,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"56366be44f07057e0a6fe741d4149a81","sha1":"87b25f903cba5e29d0929c011cf19dce15f7d0f8","sha256":"597cd6041a61ed8aa90e33367d3c119e65c71081ed1725ca3934dcbd9e11dce4","sha512":"b979c7196d959238ea4e7ab8af96e4d9d1ca36a4762e43115b6379b2ecdf230474305e5b98bc981bd180bb8d71e94ea31fc88e4d9ecca33a7b896a4fe40ca450","ssdeep":"192:ucsEOsPSV4PT0VwT2z3CFduILGbfZS64Ev3:VsZKSV4Oz3qdnLE37/","tlshash":"f7028d5b7ea16f91fa9cdf3489c30296af905970b5a3651f0dc820584f38784b88b3b7","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.910138Z","times_seen":545,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/unstoppablewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/unstoppablewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6859\r\ncf-ray: 96b66dc6bb9e56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"cfe7d346cb0443b4496604d80a809cda\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5Ufmxn3pz1Pwje7yTEGiOJJkkoqv5rVG3nhOCsGirlUEckDDXvTwWqdiu9iCacGMp55uvCZ0zicKB6VTwgkQl4Qrw5oFAnza8NnooDRNjNJv6ZiF%2FwZQ41AA8IrtCQXmP32sajfs3iRF3%2FsKCTLE%2Bln4d0YopSgZMsya%2Fi%2BZ%2FPPW8KC9hg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1765\u0026min_rtt=789\u0026rtt_var=628\u0026sent=2309\u0026recv=207\u0026lost=0\u0026retrans=0\u0026sent_bytes=2553254\u0026recv_bytes=47675\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2267\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6859,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"73e8f4bb9a641d6c33e9610030b74a53","sha1":"8c09555af9ec61e077ad6304f780aefd40d469de","sha256":"f50a128c69596cbb101cec84c8c0c479af3f548c10fad011727f5d5f10ebb479","sha512":"9827f364780bf98a7486eb1b8f7d83b47925d5e1ee2870c17222da57991b3f0f73021ecb20dca73871599e1969465304b9eb7575233546783855c3b71df6f307","ssdeep":"192:wlqviSuns0AVZ/c6umyClei4AQbOSfBBVV:wl8izQV+tieipPSZXV","tlshash":"dfe19e47b6511949e89fe0fcfe3681459732a57449cf3e0e22f6985c7a1241db0e0e76","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.035932Z","times_seen":800,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 04:42:37 GMT","end":"Sun, 26 Oct 2025 05:42:34 GMT"},"fingerprint":{"sha1":"A9:2C:36:C2:5B:79:EB:33:93:88:54:08:DE:EC:77:65:7B:80:68:B3","sha256":"18:96:B7:DD:E9:B4:31:CC:9A:C7:1C:44:AF:F5:7E:C1:6C:25:F1:75:D6:6E:9A:7E:86:AC:B9:F8:49:97:6D:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\nage: 587\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::t922r-1754565499132-bfde7a2d4431\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 96b66dbaebe4568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/gnosissafemultisig.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/gnosissafemultisig.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7616\r\ncf-ray: 96b66dc62aa456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e6d67ad866c70ce2dbca0e5e809fc906\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FwWkwr4jEGommywuia6yx4WTfrMk3NHN8BMyIPlMqQLLZ73yfaAL9RjGCLJ%2Fpq8QH34izC8nBoiR7etyuRoi4dTrMcw1I8IKx8bx9lwN3v0cb7UoqtfpwzSh4l2l7Bhrmpt9bjc0BG9faH4K1mcy6dSqHgh%2F%2Fpw0lW63%2B1hGUhabWAYm7A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1879\u0026min_rtt=789\u0026rtt_var=655\u0026sent=1778\u0026recv=173\u0026lost=0\u0026retrans=0\u0026sent_bytes=1961850\u0026recv_bytes=40346\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2148\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7616,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"1f663d3c5f03aa83c9376c86372e7cd3","sha1":"0ed1a0fcaa19b904492a0a11a0c11f8f1653def7","sha256":"2089a0f960f82107c401f2889daad6620de4fd4e4bdc01295bbb2350953723bc","sha512":"f868c173267b230d854249fdb0cc4ef0a0e821e775f48a2e7a408ba4b39e13629f63b96a9e0c0eb78d161f9b38d30b68d1919bae7f1257746a588ac56eb3ba2d","ssdeep":"192:cjUBhceOZWCSNEYb9RaRuI+b+97TJKcZry:cjQmWCSGW9k1+cRKcs","tlshash":"88f19e8bf9d7284ae294f53b1c261891575314b1dc3548ef3acb1ba79a2e025fa99c04","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.758093Z","times_seen":401,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/aktionariat.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/aktionariat.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 31255\r\ncf-ray: 96b66dc6dbcd56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bf68e5ef3bbf8e40bbaf4cc1d998326b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0Jh5XF5vYuliHA79hpzk3v9Q06KkX54OCjWm2u77tlTUk1%2F3aQS7Bd5er%2BbZNUd9212Y%2BbV5eTtpRdKQktObvWGr6Pfl%2FInWLgC6amB%2FFONtGf3KFJ%2Bhoq6CAA5cr%2B3JFwK7UulI3AGzecSvkt5VzMDLP1Y5ug7aUg2NA4zUk85yUqgqPw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2246\u0026min_rtt=789\u0026rtt_var=1269\u0026sent=2531\u0026recv=219\u0026lost=0\u0026retrans=0\u0026sent_bytes=2795394\u0026recv_bytes=48226\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2319\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31255,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"b0dc5cf3cb203b6252bf7ab9b4358948","sha1":"6424d52a8f2bd7eeb7783b05afbb1e4bd6ea7b50","sha256":"8afc1c1288b017676b91561819f6b76a011a873aad592ee51cecab4ee36fac84","sha512":"53f4bd138b0bbd26df122ff82c0f408d2723cdd78d6f5431f302a83d5c29a6464a47aab58d10ae5478f0332ef08486d23564713ba516b5b9b17831ae30666cdd","ssdeep":"768:cotjkmcWCoWCYl6sCrrMAPSV3gwjynHGaCuJx:FtjPt/WCZjrMB7IGaCax","tlshash":"b9e2e1bf759c2809310bb128d4cf1f31d52472161eb81b2fb496f56c4a1688181bc63f","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.913208Z","times_seen":350,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/others.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/others.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 709\r\ncf-ray: 96b66dc70c2156a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"cd45c4d34ea24349e86f3a58a9dcac2d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GwZqCMuDx0jM0oomTy2rPLNmXOQZYTmR4tolI%2BwMkqAoCDPWRW2oIl5yCNAnImIKCFiafpG3RBhpDk8DaK2TQV0C1PatpdUpbwuGDSl%2FouFKCly4%2B2pL2ykfiSPzTNcIx3TIc3CpPZZ2n8VXgtwck5rR35nifRbrWxuNJ1FJVimngx5Gyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2400\u0026min_rtt=789\u0026rtt_var=512\u0026sent=2783\u0026recv=225\u0026lost=0\u0026retrans=0\u0026sent_bytes=3076362\u0026recv_bytes=48509\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2382\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"b525fcf7d8615339746653f833492206","sha1":"458cb61e00a631acd7c35052a728bb1d5ee87cb1","sha256":"4bbf63238a5bb2ae43b282b8d732ef53a1c34a47974ac0be7d7a2862b680e4fe","sha512":"814481ab80a455c0e16d29ae76526d5d317fdb318ec623a059625b4eb021b03dc8a201368067b2fca1a9b12d81ddc5451a275e7c2e3865cbb9cbde427a2a0c3a","ssdeep":"","tlshash":"240194da532975e1e8e62a62d1320074d57c669323024a7ac5f6187030fa8da3ff9682","first_seen":"2024-05-22T07:07:33Z","last_seen":"2026-08-06T10:01:23.830058Z","times_seen":37,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/venlywallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/venlywallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 30396\r\ncf-ray: 96b66dc63ab956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"be74280c6dab51d41f26a37f0d27ae9c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Tb%2FocgfSWmA%2FV1PTFOeL0tHtB89f2tfoMIpV2QyKxXtk%2FPiEx2USbJfw6qixehJxQ3%2BuKiu6nqfQ4jN%2B%2BRA2xt%2BzUCdVIJ9qdyvo2Zw3eXUo7XaDXB9o0u9GmKOZ0UBsu6UchkRHAaQqz6n5rB0vc%2FlDIqyu62fwMibWWtufKuLvRPn9Jg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1981\u0026min_rtt=789\u0026rtt_var=738\u0026sent=2184\u0026recv=196\u0026lost=0\u0026retrans=0\u0026sent_bytes=2419019\u0026recv_bytes=47157\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2216\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit/color RGBA, non-interlaced","md5":"97861cfeef2596ca05fb5d5095c6015e","sha1":"aec6bdf0141ab9f18c0c961687c7fa2d0e5d66da","sha256":"6919841349118f3568a780ede9df5e5ea4465b1da70b34bbecb3cbb8895d69be","sha512":"0bf2dde016a0684e7eb70d97f62ae69e8227593113e2805b9493eb14e63312f96667dce96a966b9fabafd55bcc9df25c4f501629633ba4b5dfc71a6e100f2fc1","ssdeep":"768:wqIufiyB8Z+oqmkktZLkiOwwXNkBCuKGh7vgM5+T:wqIgBwumkC4+cNk8Whrgr","tlshash":"b2d2e1c08948befef584a9f0b2284ddba43a9c3b3b167c2899830e5f49781d55c5165f","first_seen":"2025-02-26T16:32:21.400416Z","last_seen":"2026-08-06T10:01:23.785583Z","times_seen":28,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bitkeep.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bitkeep.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12042\r\ncf-ray: 96b66dc6ab9056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0fd3e386b1690b4b72e53f12a7f7f7a6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wbC1gjZ12HgMHz8%2BUMSEBvWUP5tFT6Z68HaVXrN7NCGlUUpebfH2HeIFF45VlqtC4NSquY5OZfdXShv2t3twVbUUckg%2FZLSZygNcCWu3O%2BiOqyNAOOl5kU74aGjBEQdC7tahqeQ0qB5fyV5qG9gKIksLYZzw5LQa2tMHN1EcnY9cQ7z0HA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2389\u0026min_rtt=789\u0026rtt_var=654\u0026sent=2770\u0026recv=224\u0026lost=0\u0026retrans=0\u0026sent_bytes=3063207\u0026recv_bytes=48460\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2360\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12042,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"66d74cb438855098d4a61aec2aba71b6","sha1":"0dc06a5dd938feeeb96b0b649cafe65b80965a54","sha256":"795fbd7c08bf5ccf7e82dc12c7dd309d9da4b2aee2dab5e0a678f7ac4e17fa12","sha512":"dcf184f4f6784c65af565aea28834a0bf6600c86a799723cd0beb3c441d1e40b1336cd3c52a10050d20abbae3867c2f8778700ae6c6ce5564897ea44ffec5793","ssdeep":"192:DVLc50id6aj4jkeR7YjTq8iyrfgPyvfzDtphLig6IWVd73N6gjhmUiPMO/SbU+7g:N616aCkeRCriWzxphLigsX73AgjQnrYc","tlshash":"0042bfa77775a49be6a4fd78226fc514a3f228015c16ab2c123fa8730e0c34d1b029e7","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.820071Z","times_seen":656,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/ellipal.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/ellipal.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 11668\r\ncf-ray: 96b66dc6dbc956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"19939d2d66c5ae0fa6b27fd6e9f03909\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FZmeRvZUqjF4O3m0kGgQ5TTcW2dDSnmfBbwSKDNAZqtAuFpbtPC2G74VU24OpBsMO1KeAZn7Gbf%2BoNrc9H6ElYkSSUc0kXQ4mRdVC9f1hyC5XBBA3wMAB5L7YueswVdcFgRVvTsSwAm%2Fmq265NWUTMRJ%2BsDdJHR11luaYNeucQpTLEeuRg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2441\u0026min_rtt=789\u0026rtt_var=735\u0026sent=2747\u0026recv=223\u0026lost=0\u0026retrans=0\u0026sent_bytes=3038635\u0026recv_bytes=48412\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2356\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11668,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x391, components 3","md5":"90fd247f117d3b36de48ff3012eb75a5","sha1":"bb352c2057f0b61743a2fa41e50794b01ad87a74","sha256":"0e9b5535dc8e598af54858a6dcfe6d766bb839fc50b60ae127245606009039ca","sha512":"02af7734016786fbcc124bb5f5b50f0b7525cba9c63390bf3eaf65093cbf3e28d93169683317ca0837e4be5b7ac89f438cee10d4d50edf6d69b9c1a35a65828e","ssdeep":"192:tC1blKdY5cBhTymuesjV1z8QZr/UnBkh9SmL22nQV+k7dv2:tC1hKe5wtsZ1zbr8mPSU22QASdv2","tlshash":"ca32c0ac3b64e603d968cff1814f40152b614173b9f5aa2cb23d3894dda65e2b5f510c","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.823218Z","times_seen":400,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/atokenwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/atokenwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6772\r\ncf-ray: 96b66dc6dbd956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3aa45667db720f33f945835562bfaf7b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L9lDkSz0BJZPdc7HtjJN5h%2B2BWOs1kRk4sLfsUoHV1s3XBp9w5LdzSb2JYDHtgKX7MJAAUYmaJL0m4kTK7M4JyHjJ3rkkT2MpuOpEl0JXTZekaQq5KmQBfEeseBzmG1qCMAqGXil67V9iQ48OrZqR%2FMCQaMMiTbRD25Wn3Y4KtznjY4R%2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1960\u0026min_rtt=789\u0026rtt_var=930\u0026sent=2474\u0026recv=218\u0026lost=0\u0026retrans=0\u0026sent_bytes=2730764\u0026recv_bytes=48180\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2314\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6772,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"9c57c0e2ec3176b7cababa8f05b5a604","sha1":"96fc6b70edee435b4c3aae29ffed43cf536f0e9b","sha256":"4989e81bf3bd85e60e9fb74a27bf360237bb0e0db53a7ff1aa7ab84b26b24af6","sha512":"62cab8c7b9107bcef9244c7a90b7b4db907ac66d187116eae7136737d258d494397b28e08a83c507db9d5f89d9e7f87cd7ee39ed3a2e3a5138d82423da10fe67","ssdeep":"96:o7qTk42sGoZZ62rbt0+iXlLVIY2mWceiHIuNZ08m4W6wVo7TVL/YVLd6lywoRoo5:4PsGI3NWlLVF2eIkZARw7R/YX6QJUgKy","tlshash":"cdd17e8a37d99f32bc49c4fea469e798af280117444c7c9fa3be6c834a916545ebc110","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.93788Z","times_seen":747,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/foxycart.jsonp.sidecart.min.1752850871.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/foxycart.jsonp.sidecart.min.1752850871.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"c553845379976fc88a13ca7dd0e869c3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wdnKxB6CsCMQDtBiHi0YCjdxaOahnswBu7bm91Zf%2Fg8zPmvJBLZxqi%2BZ38JVxA4G8a9f%2FSBJ7UQY%2B%2FX2I7u5%2B5LDKp5ksJHHW5hv%2FMI3zQ3%2B1Qe2tc%2Bqe4%2FnruKqC1hSqRX74NKnsxOQIwuZeXK6GEFDRmhDa4ssdS49TsFBxB5uqoHGPg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaea6556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3656\u0026min_rtt=1677\u0026rtt_var=2000\u0026sent=158\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=146155\u0026recv_bytes=7172\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32235)","md5":"12d8b8736707b4a6d53a2afc416d4a8e","sha1":"e4851c41c0ff40833d5a3ca8757c073829717b89","sha256":"8cd180b03b9b38f487692d3201ec78adf46b5f778a79e472e8d9c76a643116a4","sha512":"cebf65f0ba5e53aa7a13d37b8312b7d8b46a3c58c95cf30cb75aa1cf57624bc65c5939e91cd7520d379d55755d209231db4f4dff8f98e6eb16a719b2f98219eb","ssdeep":"3072:awtAkztSKXsx/BbyrGsPh/TG71f/EtWkeMh/U044bFBUpFHIYmqsaGNbHD2t17Va:awtAkztGceMh/U048FBUp0qeN43OO0","tlshash":"92842a066da4103286fb05a454273e061b3865d226c42b50fbeccbec17f9d98f177bae","first_seen":"2025-08-07T11:28:59.806352Z","last_seen":"2025-08-07T11:28:59.806352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/mathwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/mathwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 13353\r\ncf-ray: 96b66dc64ad756a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7bfa4f20a319a9aaec338bec25a254fa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rYrofm3jE3cBPfIYnrg7b%2Fz8sEE3m1EY7LcsE4WCA95bafWy5ojvCxfzXcr6pCiKWBueZNKsb0ltf7%2FwyzjgnrCd%2BiA6XqDhjdMyyHcWEiCvklXj9oAY2nZyKHy%2FQoY%2BJsvrV0ZPdz5ZwfJmy3AcuHfg6NxwK7jjxjTD8nZF6EDM63LcxQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1921\u0026min_rtt=789\u0026rtt_var=674\u0026sent=2223\u0026recv=197\u0026lost=0\u0026retrans=0\u0026sent_bytes=2464679\u0026recv_bytes=47203\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2222\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13353,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"60f4289459b9326996863cfa52422fe5","sha1":"e057d71ca36992fb6f62dd7c1b84b9d39f921ac8","sha256":"43cfdb39a637087c1c4c055c40b0db772977310a32c6b84b7650cfb3871265ad","sha512":"cc3dc03690c183c48520000c46ec3c203be0a65f538a5e1151367824e66894f7cd759eb80e7c64faddca7e2e7cfe163d16cb724497af628edc2401d92e109d8a","ssdeep":"384:RGR5q7FLLGEyEZEc+85dFYjD2hJKmFb7j6zI92M:+uFAMdFYjD3mhOM","tlshash":"9552cfde7d1401f0e46bc7b16f1c18aaab8de72b92827d4fa8bd40515ef44221de29d1","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.0322Z","times_seen":1059,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.embr.org/checkouts/01G6YV7F0BHZEEWYM0S8875H6E","fqdn":"api.embr.org","domain":"embr.org","tld":"org"},"ip":{"addr":"3.98.226.217","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.embr.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 10 Mar 2025 00:00:00 GMT","end":"Thu, 09 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:24:02:5E:56:9F:0F:F0:3E:ED:2A:01:32:C1:E5:FD:55:77:98:99","sha256":"24:2B:8D:FA:00:54:12:A6:32:B3:E2:3E:CA:22:4A:79:37:8D:D9:E2:F8:E2:F5:17:56:48:A0:F8:8C:08:43:A9"}}},"request":{"raw":"GET /checkouts/01G6YV7F0BHZEEWYM0S8875H6E HTTP/1.1\r\nHost: api.embr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 464\r\naccess-control-allow-origin: *\r\napigw-requestid: O7sXtgetYosEJFA=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":464,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c374b93f34761e74673b6d851bfd1431","sha1":"95adc9c6b9995e1f66e1cfb5401cd67fb8b51d85","sha256":"c206900ebb121562437879d1208d98d0bcb84e15a8c14f61de1941b81e5c857b","sha512":"3fe4909a0aca28a9a1fc36a276a0394d9e41c03bef155a480a619ac3e4fc144afbb18d1eea93811621839a48e441f3014087e7d8ae9fcadcbcac263a7c6988f7","ssdeep":"","tlshash":"83f0238b232558690edc01d500d73875a8f301b7c10cb4249b54658cc271d7f380f622","first_seen":"2025-08-07T11:28:59.812675Z","last_seen":"2025-08-07T11:28:59.812675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2129,"timings":{"blocked":506,"dns":117,"connect":131,"send":0,"wait":1049,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.foxycart.com/secure.grovetoken.com/foxycart.jsonp.sidecart.min.1752850871.js","fqdn":"cdn.foxycart.com","domain":"foxycart.com","tld":"com"},"ip":{"addr":"3.167.2.67","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:11.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.foxycart.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 08 Aug 2024 00:00:00 GMT","end":"Sat, 06 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"76:74:DB:94:A8:3D:15:51:92:46:23:2D:20:72:6D:59:86:BA:2D:2A","sha256":"5E:31:CE:AE:C4:E0:56:DE:A8:65:DC:88:9D:5D:85:28:42:1B:53:09:71:EB:D3:0C:CC:EA:55:E6:5C:87:6C:1A"}}},"request":{"raw":"GET /secure.grovetoken.com/foxycart.jsonp.sidecart.min.1752850871.js HTTP/1.1\r\nHost: cdn.foxycart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-javascript\r\ndate: Wed, 06 Aug 2025 14:27:56 GMT\r\nfoxy: app\r\ncontent-encoding: gzip\r\nserver: nginx\r\ncache-control: max-age=2592000, public\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c66a2f390287242c7df16dd5190aa68e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kdcQnoq0BHAe7k_2Qe8bK4q0dekA182eC85pHPOGycHvhC4VZ0_dFg==\r\nage: 75616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":385568,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32235)","md5":"12d8b8736707b4a6d53a2afc416d4a8e","sha1":"e4851c41c0ff40833d5a3ca8757c073829717b89","sha256":"8cd180b03b9b38f487692d3201ec78adf46b5f778a79e472e8d9c76a643116a4","sha512":"cebf65f0ba5e53aa7a13d37b8312b7d8b46a3c58c95cf30cb75aa1cf57624bc65c5939e91cd7520d379d55755d209231db4f4dff8f98e6eb16a719b2f98219eb","ssdeep":"3072:awtAkztSKXsx/BbyrGsPh/TG71f/EtWkeMh/U044bFBUpFHIYmqsaGNbHD2t17Va:awtAkztGceMh/U048FBUp0qeN43OO0","tlshash":"92842a066da4103286fb05a454273e061b3865d226c42b50fbeccbec17f9d98f177bae","first_seen":"2025-08-07T11:28:59.806352Z","last_seen":"2025-08-07T11:28:59.806352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":40,"dns":1,"connect":1,"send":0,"wait":26,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/metamask.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/metamask.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 9649\r\ncf-ray: 96b66dbada3d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f3ce89a6314ea7b35c28968d058aad7f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z%2FoDaT84po4HXIzPS8juQvmYHaNE%2FibaJlCpTa2clfxdfRZ9fovKjm%2BaIg5SSNbP3t4DvVu6gTr3prvJR8%2B%2B9peDSv4mWK1wyqEmOeMfw9XoZr2qWUOaqmx1GFJO4qf7W2g%2BvFfqVuYz6Il0ym7p7Bi85YlCUBJts0NP%2BncwEXBG%2FFWMeg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4610\u0026min_rtt=1677\u0026rtt_var=2923\u0026sent=99\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=86210\u0026recv_bytes=6935\u0026delivery_rate=4694849\u0026cwnd=46800\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=320\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9649,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"51db991750e9db40fbdc7d0f30242022","sha1":"e6118446bcb9637df1a291e227b4568ecbb975b8","sha256":"8511e927da4ac9ec04a813dfd6048297ca51639520463b8d6a61ccafd81500cc","sha512":"e55f577d849f33e2905ab163289e216c3c13abd922d4219c5fd592567898d3fde46acc1e8d036aa13b8a60498be990c18c408e56dbb0a94763ec481fe6598433","ssdeep":"192:D8Jsuc1VNFgDBoP8/UmUBYrOzj+MKSbNEyv3I4R3Cj:D8JsuIPFgDBoOJvhSbKj","tlshash":"3f129e963750d722d09edef3278d202e2e1759b32416eb6e531b40d44c6e5a6e827c78","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-14T04:40:30.034601Z","times_seen":500,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/crypto.com%7Cdefiwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/crypto.com|defiwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 10892\r\ncf-ray: 96b66dc63abb56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7d388895165e7fcdcb31e1a9b8959ec6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ryoOjA5XsROaFLLZCVbytInDXT3HxmcXaKONbxVPb7WBkWixqjHMMQ5KuYu%2BkrkDiXDaeLBX%2FW9I6osh0YtLaYImHgQ%2BEXTrgJ6ptlYH8sferCGBhsfTVWscwwL27%2BFEHpLwOlpzBSue%2BUly7unjH6t%2BhOuTooDcjrBHTKYtMVMvgJJ1wg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2370\u0026min_rtt=789\u0026rtt_var=1197\u0026sent=1998\u0026recv=187\u0026lost=0\u0026retrans=0\u0026sent_bytes=2205205\u0026recv_bytes=45025\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2188\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10892,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"af51356c02ac29ff62a6f193926d5284","sha1":"578c72abc285cc31f3f53995894dbd33b2798180","sha256":"78ac04d45d90c6b9861b6ccba310ed30d7d797fd962babefd4bb024d487284d5","sha512":"7bb6b88cb6e6326341102c4db2173cf0d241b65e7076f4d11021e119a8ee296271a615a6849c6a53e5896a3df59db065b891c80e689a3f3e173487fa98187be5","ssdeep":"192:Talqi4iMvB3A55tAdnGYR0QZAVuxD4M89DBmXhF0jq1FNqAmPZUB:ulj45v65tAXAVM4MuBmXYyePCB","tlshash":"8122aff3b93e2564f5d4ee72d5857a36463e4330389f148e95f323e15aa1d2888478d2","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.055954Z","times_seen":818,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/trustvault.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/trustvault.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 13502\r\ncf-ray: 96b66dc65aeb56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ac9470c1250a637ed23e9501b7a329cd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6KdEV%2B3djmuSTy3s1N8mYyNS0GdqYjtj%2B1OkZoYtvIbZ7hDgYWe67ni5O%2BGGRnHxA0fKA7UO4XQuYD9FvnRv4%2FTvfIIZkxDBgZgZ4z%2BGWr7bloH1rL38jwxXt3Dushrt0S%2BpW2UncQaO4gNWSjG7e1OO1iXwGjL5lwZQexeSufkPUBIcbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1926\u0026min_rtt=789\u0026rtt_var=807\u0026sent=2283\u0026recv=204\u0026lost=0\u0026retrans=0\u0026sent_bytes=2526954\u0026recv_bytes=47533\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2262\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13502,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"2c59b7c0c81a6c33598ca9574fe92c8c","sha1":"12262f0f730af892aca76e1e61343a21689f1e92","sha256":"d57de5ef07bf01fd1a0ceae790861ce5ecbf29bc076e03ef7e948e207b8b05db","sha512":"3e79ede6dc88160a95aeba45b21f0289489a40f2eed8ff379c4d0a7f4a6b4ad57b7c1aa2f7cf00c9705c3c9a23128a883678061b626704c9051ed4448c1aadb9","ssdeep":"384:YiDLmh/PA6vmD6FdDp5Pl4PsKHNHq3ps/Kk:5+h/PAcmWFdVosCNHq3ux","tlshash":"7c52ce25f46c77ccdb51e23a9188825142e60ffaa05c39bd538370b901af73ca84f96d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.912116Z","times_seen":865,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/guardawallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/guardawallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8032\r\ncf-ray: 96b66dc70c1456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fd2effc60e2ff106d08b0b8ff169c82f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=udv6ubO73vZOwTrZEqD%2BxnQLqTB4nYK8D9h57uZ2AUIpndxUS0ZkPYd4TYVQdZ6wpnjApnedIFiMLMhxc%2BC3IIgAXALfIrUrjTC6DrXrK4uJNX9BdL5uGFBKjftQUf1HfdTOJ8VkKhz%2FSUbfcyBJfxkI7nq9dZtayNHJrgxQwDvLq0i55A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2246\u0026min_rtt=789\u0026rtt_var=1269\u0026sent=2521\u0026recv=219\u0026lost=0\u0026retrans=0\u0026sent_bytes=2783394\u0026recv_bytes=48226\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2318\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8032,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"521d0a27dff013b0b9313ed91121b20f","sha1":"8d4a2cb408105f8b87fd1cb852ab813913227ea0","sha256":"eefc338f4a2058461b6800c0fc41481ad508984f3ac5cd2c49c14dcab80eff06","sha512":"41da961f1b7f73aa69b1cf2cdef84eeb71692ad1d4367f92f7f62ece82db3355368ecf728d9136453385418fec0b051d8152b868e3f164e793e73dffe22a94ec","ssdeep":"192:MuTHUGc+/wV6jZFdkGFTQdAwjmIBONupxJL4jB+:M6HUb+/wVAFd/T0jnosg+","tlshash":"31f1be3db92b88a4da51d2bfe0169d5123977656fc200f4cb34585d987bae6e11c30cc","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.837809Z","times_seen":668,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/spatium.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/spatium.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3744\r\ncf-ray: 96b66dc68b4156a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"240572284a01fa1e889fe5d6dd7902fe\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HEcRd5WqQZIRXXqA69tIQGbO7ETywID7zFEXV17McuD7C6SRuny%2F79TWgRiHE9%2Fx4fiJygz2yJGldJSzUXJXkqE47G%2BUAXyYZHrsTpFVcHZEzrJf998iKiH9VAF155gr5leEmidtJoqWWQRt%2BoDoi%2F%2Fd9dUS55V8HXOBrF09M8zYsqiQ9g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1981\u0026min_rtt=789\u0026rtt_var=738\u0026sent=2115\u0026recv=196\u0026lost=0\u0026retrans=0\u0026sent_bytes=2336339\u0026recv_bytes=47157\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2215\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3744,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"1d80c66d4087666473477ca8852636e3","sha1":"e0d4fc2b90a5ecf937509a0de9df338c0a5b4096","sha256":"c9606c925968e9c32a18cbbd923d6ef5341365be3306b797ba35fe72d435464b","sha512":"8fcf0c2687d0a1096e7d42a76582e06fc99996c52bd6491198dc20ca74d0e6cbfb2ac9dd608dfe5d3fecf0a80f23a28aed9eaefde0a537ef0d0c1762910e56a1","ssdeep":"","tlshash":"9071c666bb50a30cfcbbc8f1802d59f53317627208c99e8e5588b04eded90e5e82d8d5","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.06549Z","times_seen":518,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/xinfinxdcnetwork.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/xinfinxdcnetwork.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8981\r\ncf-ray: 96b66dc6dbd156a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0b5c15a98246ac37a8650836d59c6b17\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ldpn%2B0Cr%2BBisjVRAAmwyeK8cIBsWN2asQZcOBbGeUZP6ok1%2FwXJAZdq2PJtk%2B5kOAex1I4wLld6QtlL740pHYD70vqfxTqIdqqTwmDOsxwQAIU4yiz2SJX83yYsJh%2F0RrLwtjcZ9U3c0EyI5NQikC9DiqUSk%2B51Uu705WmbWIbX6HufS6w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1743\u0026min_rtt=789\u0026rtt_var=700\u0026sent=2419\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=2671162\u0026recv_bytes=48088\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2303\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8981,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"60f87e16077bd56afa4dce8e0651f619","sha1":"6a803a4c96451869d22c84920d262c6c6a0b7f52","sha256":"886989ea7749a43c57edbc97d5e2d133061c68c204c25b5ded17b9dfd623a9a5","sha512":"3f0bef602cd653e85a682ee0c0f78cf2ff965b013efea89578fd7c43c58d921cd8b2a18af8459d9977e72ffc9ea67f2ac4bc1d94b33923b3f77a412e23ee617a","ssdeep":"96:U7lcn2U1OsATWXaRCAHGroxs8XFZo6Kqwwlpfqx6f5s61c3PyiZcqe8isTWYQCp+:XBlXaHx91WrPV6fu3PyiZcnQVBpOHP","tlshash":"a602ae8b7b2c4266f200cfba566b112a5e671821f133decf4b66e5a8f0b1851d43c4e4","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.771094Z","times_seen":598,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/686dc7cdb02d2017152837a3_linktree-logo-6FC3ADB679-seeklogo.com.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/686dc7cdb02d2017152837a3_linktree-logo-6FC3ADB679-seeklogo.com.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 6960\r\ncf-ray: 96b66dca594d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"457ab57dfc996bb4f212be98223137c0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q8b%2FccPdXuLuy68kBF5JrbD%2FDCjlafBnYwWNm0emDVDR8HYuh%2Fd7ibCcOIf8%2FbdXWov37KwEC9mMxfkE7dQ6u5MtqPEk2bG2TVF2HQ1zrdfwJBRbAWi%2B8ZYVlDQf4KzAwn4WjQlA%2Bft6hT%2BqcLvB7SxhmZA22kLAfvG1%2BjVwdGdX4xdyfg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2877\u0026min_rtt=789\u0026rtt_var=1736\u0026sent=2827\u0026recv=233\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116688\u0026recv_bytes=50144\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2814\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 300, 8-bit/color RGBA, non-interlaced","md5":"04053b6486c88a8721bd80b561334123","sha1":"585f18526771ac4aa7121634bde992935e37d140","sha256":"c7a7723697bde44eefbf77121723d127ddf8b052b7c5a1bbfd2c0dd0908fb4bc","sha512":"8fa7668b09e012614bdcee239b6b049a5940640b366a25a184e8711d807f728cdab31edf0ddecac8dc0622ab0259d654eaf947c65ef1a6ede4f8c40cb7ad5b10","ssdeep":"192:VSs6kncAAs2fNGdLwcWmaUf21OZVUKiGjcqAnzE:0sJncAoFGdwLg2UZXhwE","tlshash":"84e14bd74950ed9632c7f8d865c1b0dba6b24334f8c85e381e95bc9aa1420f7a0396a7","first_seen":"2025-08-07T11:28:59.822132Z","last_seen":"2025-08-07T11:28:59.822132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T11:28:06.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sKZHj8NKo%2B2c1RQ298IiGogJQU3PyPA%2F33vwSWzjP9yEAWvAjoLtlg6UZ0kE4uqQ0bn1F658RWt%2FlYq6jqwd6Z%2FbHuB08IlzMxB69C8nlS9LwahoWjluY29SniEfig8nlIHK5hPpAtX0SRq5qiMpUcLT78B%2F%2FvDoy4HhUr5oKKKhzGoLNQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66db808d156c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6511\u0026min_rtt=577\u0026rtt_var=11864\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3314\u0026recv_bytes=1142\u0026delivery_rate=5648894\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=76503a65f3c141b8\u0026ts=231\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}],"data":{"size":304399,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469)","md5":"2acd0ec333d8a23314291b8b51e77d07","sha1":"e3ff8b73104dbee3bcad1313f483a587cca2cd54","sha256":"a3e236919d4d4d6ad1da4f66a200814b77a0a6cae13602cf5ff2bdc6ec0597f2","sha512":"7a55040416bff09d3c1662b3e532f0e8cfa346831cbc130d7708d55790284b2ce13ce8e3a82ae01dc89691ea681593105e6dd55514418067be03ab423813dc1b","ssdeep":"1536:7ktJrAsvYrL4JEVXhsxvKnFiqVXhsxvKnFSXGVXhsxvKnFOVXhsxvKnF0:7roO4idXd0XGdUdC","tlshash":"0354645a86f340662c1760f4b7edb51ab77ae087ce2eee997ddc21008f856a49dc3314","first_seen":"2025-08-07T11:28:59.826342Z","last_seen":"2025-08-07T11:28:59.826342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":212,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/css","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:07.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/css HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32607\r\ncf-ray: 96b66dbe5f4756a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"77984bce3886bfc8137dcd54aaa61109\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LgCOvfwQKEC08X7SUojSJwmGSmR6YpGwV8PJ5Sfam2ugHagml9hBqMW1Q0vwaguVGVmFQ4dXYudhkW6SYPvR5a4A5smAg0padbg%2BsXMnjBCyM7rjcBSHfwE95IIv2NbT6ZqtYBm4%2BlpfyiOqYLXjoCucNVuMEEHi4Bz9JOVlUneqIRWtGQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1073\u0026min_rtt=789\u0026rtt_var=261\u0026sent=959\u0026recv=86\u0026lost=0\u0026retrans=0\u0026sent_bytes=1035065\u0026recv_bytes=10256\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=821\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/xummwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/xummwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4112\r\ncf-ray: 96b66dc60a4b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e29b60a25a02559ee80820c18181da78\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9lpc4uWCv88NJbP6PDt%2BE6ZsJH%2BUm3B48EiuN%2BnX8EknolYCxHNXm1%2B0vwjoB7kqUkuPdd0pZmAyiy%2BJC%2FX6DtW%2Fg%2FRK5R%2Bf5anquib%2FVz4OBGENepfhCPWOstB0QRd3W5Dk6ikAH36SlfGszD2SVc6m19CF0wNHQ4aebxQfL4Um8OuLGg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1919\u0026min_rtt=789\u0026rtt_var=770\u0026sent=1368\u0026recv=163\u0026lost=0\u0026retrans=0\u0026sent_bytes=1479108\u0026recv_bytes=37301\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2120\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"970a9991768287f0c743a81af8cced5b","sha1":"911848f93c8ac39f26c0ae18c86f289a61462714","sha256":"2e093bf300e2f85ec7fd2b44ac7854a407ee21ad5af8317ac1754b940d9bc0fc","sha512":"1fe582a2dca78926b7a2c3a05afb0985465c59ea331dfaac5cf54550869b941c7b2dfde4d2b906b387f2ea030e489c6f70a634d8ae5b4647aec2e0ade6bb6d27","ssdeep":"96:67/eRBW+8vtGSgwxYPc6FPNkneYU+BES/Pz13l9FjdNj8:Y/eRaUaxYPcIPNqBpz13Jd18","tlshash":"fc817e7990cbc14e2d04742f7f1e65c3723b96d78dd42596a954072b7fb7a3ca884340","first_seen":"2024-10-06T09:21:38.448693Z","last_seen":"2026-08-06T10:01:23.755646Z","times_seen":35,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/alphawallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/alphawallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8019\r\ncf-ray: 96b66dc66b0656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7baca8564b454a2f46405fee71097987\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YUxLaR2lAcmIgvzZ%2F%2BL9DbNgL15KhTGpoosshHb6c1xZHL6usw6UaY%2BUyJ4yWN6gJMF83JWDmm5aNb0z5jkdRntvUMrRUh6%2Bu7%2BYO05kKmtyLu%2B6ahqqyfLXYmdZXBj0Ee1FN5zBoG3p%2B8TcDkJZVg1u6rQO48fyKzkR3nTJbIUoTUWe4Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2167\u0026min_rtt=789\u0026rtt_var=996\u0026sent=2242\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=2486020\u0026recv_bytes=47249\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2226\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8019,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"1d752067fd0a03d24ff63d31564698d5","sha1":"77af8c998069936dab91443300789a942b6ec9b8","sha256":"55b2c6cea21efbc330f23f354de2d1938b30baed8591159a5c34290904b153ba","sha512":"eab48aa86dbe5fe23cc5c5c79aeb016a4ccf5a9e354dbee87f689a78d93bd81f8f96d92f62a7deb338752a51da5ac108b96858c6e32605655726881a85f9389f","ssdeep":"192:tYkcnsCHrMum1Xy0gj+zjglYFmknq8EQ5m2:IDrDlzjJ6L","tlshash":"96f19ea0beb19c98dc46e47dcf5ea46ec9241110fe37829deeae57004b39120aec3659","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.76701Z","times_seen":403,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584104\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/rwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/rwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9909\r\ncf-ray: 96b66dc70c0656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6d5200f84cdd6ce199d3dd46d9b3499c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=69re2kYWFOewbcvSL8hz5Zw6KyijKwy%2FU1UFnD2t%2FaTeBd%2FH7%2BHgCZwqXnHoO33%2BAKqFoCvtJn0EfDQjvL2EhiGF%2FAnvSsU4G9r12R9uS8EBRusMO%2FLlfKtDSZaANWMepaDpp3HAQoAcLAb1lp6falFK9sC46lxDxJ%2BXvgEjH%2BtHu1%2FlYw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2418\u0026min_rtt=789\u0026rtt_var=919\u0026sent=2736\u0026recv=222\u0026lost=0\u0026retrans=0\u0026sent_bytes=3027666\u0026recv_bytes=48364\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2349\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9909,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"334d2db9a560f966534d8a297cfbca74","sha1":"1107fab8ea68030a2de08516e28ba185d37445b1","sha256":"35cb4eb66e9b789c8ed54c150fae469d2844703d18288a0e50a7e1375ef863b8","sha512":"68a65ec29f090634649d6fe3abf6239aed2a8d5e745718dec73759d3fbd9974190e8af8d737bfecda84f315608ef1d05862a0336b47403f19dffcd921c9277a2","ssdeep":"192:hLA5D9p7cIfWdYnvYSm7JVFXFdgo6TYZkGX8NMT8vDqVXyY3g3xgUnF7s:hLA5RpfKYnvYSmNVFXFdgLTYZkZMTm2v","tlshash":"88129e583181800cdd0fe737c4881c2ab6ae8c726b0db9cd0695c2daa0774bbef43876","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.793073Z","times_seen":702,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/jadewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/jadewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 10969\r\ncf-ray: 96b66dc70c1256a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2e0f6d4eae9f6bf7730444e500810cef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WkuEGR3Yw7Rgi%2B1GvvCnvS6u3UY8fLWa6dE1Q3B90UpUFGzFl75RRpeBIumKnach702SEeLVJmmkkDsfUAWdwxji%2Bw2h5%2FPGzQLDveWRSgiVeeeMMGh%2FDn1OCjynsJ2qwEXn5GTwDuid%2BiQ7a0%2F6y8KfjOyiVsoKnLQnU%2BQ%2Fk1PedRdYSQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2400\u0026min_rtt=789\u0026rtt_var=512\u0026sent=2785\u0026recv=225\u0026lost=0\u0026retrans=0\u0026sent_bytes=3077868\u0026recv_bytes=48509\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2384\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10969,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"2976d6357a37a784f8e579cbea3cf824","sha1":"caf2d7979887e315b7176f3f8fa73e35b56793d0","sha256":"353c7ea72130625c1c2763a37a8bfafd67bfc0e743268650c718801446b9e6c2","sha512":"eb4d95b4bfc8dbaf8b026e9f49538dab1e3df790229bd970e85fcd836b85bf45b8cd8d979b3acc137b773e1c2e32bcde7638fa1cefe00d9990b746900a4e7d3e","ssdeep":"192:HZqWdWQAmSytBoG27ORGg/2+sI3MWt4oI87JxN3MBnXU0fbwk2TzmPtTk:Io1tq7rs8I3MWiBexkcQFk","tlshash":"3c328e9d2e77a65fd88ae27c077de43492b87e32c1521d0eac7850b62a109015cfe207","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.771747Z","times_seen":743,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/modal.css","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /modal.css HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"8cb268fbb9225831cad496eb12d5a1be\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fig70gTK5%2Biv06wNmmtDcF3ZAbyef6WODYq9Be65C19ERCbrOxyHY8xWPI4ctVCcTS%2FuTH31F4cXP%2BPVJQ5JhEslVHaw23nhUQ0j3NW9PoUcuD3Dx48Y2E8wpONy4Q7w2uLb%2BFm4ekhopBITuBmKsEX1qlXrHk2b9NqebLkDWz6qTXZplw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbaca2d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5934\u0026min_rtt=2059\u0026rtt_var=3540\u0026sent=20\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=4484\u0026recv_bytes=6760\u0026delivery_rate=400479\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=304\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2a8b0d5f0ec3dd7311fe3286fbb643f5","sha1":"1e32949464b11a2732e4a04a736129f8a530897a","sha256":"70fa4ae3bac556df81b8a27c73b9419f748b3767e10a1ab5b9a079998cabea7b","sha512":"f737a8a2aca04f7c46da60ab0195aa22eac8198046097ea66986a89d1262518e4cc3991da5a2e4325068b3e7a602b97a8cc615af403e3ec51820ed0de1e14588","ssdeep":"","tlshash":"b021eec45b791605791be0582c718f20637dc542d60ec63d22e2248cdecd389d4b77e4","first_seen":"2025-04-27T11:02:02.404955Z","last_seen":"2025-08-07T11:28:59.832979Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/rabbywallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/rabbywallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9961\r\ncf-ray: 96b66dc62a9456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"341d96afb97f1969b074ca9dca73f75d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cpP%2BzYCIFyr6bryOe1SaohT%2BQWHpM4qGcXRdJR3FliKSB5rGbI2%2FOu2rZGpCR09ZS1juYHG6TDdPv3x%2BgGuEaT0MsL3fPQ19%2B514MJx7uEsSqT8min2m8R9ybNK0zBCDy1z4IkZE%2BBGFNUyuTbRDap3SST6ztj2a9YBG9JaKZAL2LWzZ5w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2154\u0026min_rtt=789\u0026rtt_var=1040\u0026sent=1804\u0026recv=174\u0026lost=0\u0026retrans=0\u0026sent_bytes=1988912\u0026recv_bytes=40395\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2158\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 260, 8-bit colormap, non-interlaced","md5":"cfc7f2302e6cbc105f7e17ebee53572d","sha1":"f0d4c1811f52796c3c683dddf8b9af1d89ca7fa4","sha256":"942354b07d0c0911a7efa0eacc040a53d690ab35770caf358d61267d68e405cb","sha512":"68d5588de85017abd3d67141e577476ab4f158e1662c350d162cbc61fa60b52cd379b83fe525835b32c7f1a7c6a33d3184b17942ccc1c56c7add15f83fbceb94","ssdeep":"192:p3GqztjL6dLlL3e+Tkuoy2jrw+QWi4UYxA8s5oVmATlHHCwP:sqxjL6j1aw+ZIp8s5bi","tlshash":"bb22a098f046536fdb72df3c690c639807c94c1e5d37b65e99d2b3060432b8e54651c1","first_seen":"2025-02-26T16:32:21.38955Z","last_seen":"2026-08-06T10:01:23.778907Z","times_seen":29,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/tokenpocket.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/tokenpocket.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6087\r\ncf-ray: 96b66dc64ad456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3440b6d9713b5d9711cf36e2af17a4c8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IEsQ8E8CDp4AmGJiTAdqN5GCmrYmIMBVkMt26VnHmJTCD0OX1URcOL2NNkGKIO2krfpjuzzl%2BPRFEecWdh6qTlLzBLVq64RS0xn7CSr2POhjM1i105YvcCoUZlnotqSA0vgDrho45xQ5sh7hQOSLKJPlbE8qyU7ln2P1Lf1Jq4imyJeWsQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2284\u0026min_rtt=789\u0026rtt_var=981\u0026sent=2026\u0026recv=192\u0026lost=0\u0026retrans=0\u0026sent_bytes=2235533\u0026recv_bytes=46978\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2200\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6087,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"0243d07353ca763d43281cfdfa2f07a7","sha1":"e3d6c6c00d8eb3932a9d4c99226fb04c4f53275e","sha256":"6e449e2d7c14d33985572a5bda124b89e5bb76aac56ed94f5c31678248b24309","sha512":"525abede557dac3100d34bb5a24f05e12de4007b63d0879db4703a9198d92fee4150536f0ee04d5810446977c7dbf61883a7ceb035854d62c9b14283a5b1d068","ssdeep":"96:vAkJ3viYLSpjkFgZe9sTOPCaGjW6GXVnCPOjkCdIs8Nk6k6kIv:vt3aYZuQ+gCaQ5upCEkC6LNlljv","tlshash":"dac139c378226323c81efa3cb4a20511ef216d5fe018bdce18209a7e43cea74a427601","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.81367Z","times_seen":473,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/infinito.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/infinito.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9672\r\ncf-ray: 96b66dc68b4d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b491362d9e8f8292223158451431f791\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kJ8HqMidMWK5BA3P69j1FCdJV74lfDDwRvgTVT1yYrNFog%2Bi6Jq7lDX%2ByPCMJcJMS97eqCrbMB5FOqNYsx9c12pFmaj93Vv%2BOp92BMW%2B17eejg%2BRjAvx4cKLDUy6OsDr7TTtK6eO9itwmYp7Maqxfd8ZomNjYdknha1n5nQogwbZyylDDg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1743\u0026min_rtt=789\u0026rtt_var=700\u0026sent=2392\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=2640586\u0026recv_bytes=48088\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2296\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9672,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 398x400, components 3","md5":"319a4e53a51ceba6ae824ed693002f84","sha1":"60b6e1e5cb3915e1987d70a551759a29087303fc","sha256":"3092ecd1ce7ffcbcb9fce2cd014089d9a634c28801ad584f95131eea56605df6","sha512":"eddf8c1a0bdfa0d6edc9a5733195ce965ca062b9b854b65f744f7157a2f7173cf0554114b40b3706a4b13efc129e32b63eda8da74f933e9cd74e8f65c98d6816","ssdeep":"192:8vtMi5Mi52zc3tPtfrDZpC8eEsfyzqV/+iF5ojb9yQ3+wYSC5x3I/yw:8vtMi5Mi5v3ttjXC8eDfyzTi09ydwYSB","tlshash":"ce12bf2cb64123c6cdb7d3bbb8adac3fb1a6599af8784d0d7707114422fde305151289","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.814427Z","times_seen":599,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/midaswallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/midaswallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 13710\r\ncf-ray: 96b66dc6dbc856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"15ae9b2067a943b553bbc5e0d74d12b1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QBK7k1Cs5O1OwCvWWTuxyy0EXtFrRHj855cgx5MPMp2bCDgO5m1WJfyGVkRmeGfTc7TnwqWNvIWhnWpX1Rb5FVdQSbrFvGkEDksQIEEqYQCUNJZ5NLLKJPERF8KuBGpL9E3PMP%2B9gQ8kD6dcY3c0XGXIak4FPym0ljELvLHtUisSW%2B57rA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1945\u0026min_rtt=789\u0026rtt_var=968\u0026sent=2378\u0026recv=213\u0026lost=0\u0026retrans=0\u0026sent_bytes=2625738\u0026recv_bytes=47952\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2293\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13710,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x352, components 3","md5":"4440d86c7acad101dee957c63301559a","sha1":"fdefd83f9815393ccad764cc611ba2e6bd9eadae","sha256":"e37965ee219a033ebf6e6957e008b212d56bf60e8ba9cbe64760cbfa15460c2c","sha512":"bcd988aa24c9c52edffb8b34c735596e22ce9ec5035d0601429ce583a2d8bea1f770b4b1f095cb9b3aa4f12d0a9683db9cea7b9fb5bff51be68f05f20c3170e7","ssdeep":"384:xxqNzgedRIpUPkx568Q2zml9C5BmGc6hMMWHHDF:bqNzgWhMsX2il6BruHDF","tlshash":"88525ba8f09f97049d81db3b53272930462bb4a9ef6605de8d33677134ae900e9f4f60","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.740257Z","times_seen":713,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584103\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":1344,"timings":{"blocked":621,"dns":1,"connect":29,"send":0,"wait":28,"receive":10,"ssl":641},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/zelcore.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/zelcore.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 10588\r\ncf-ray: 96b66dc66b0756a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"93390274dab4c7ef185dd9346c664e12\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yTXWj7GxIP3pzif6fIO6uC09vsHreazfDDOVrDuxEYyRrZrwuizaUOWYwythEGNUAj7Jrs5T7Ancac7gF7tDhZQ7GmB7VsRABWeGeJqWy4zkXEaW5Ahbc6q9NPqJnep2cSjKJcuwbs4gPUeN0AKk206ipjixNb3Xr8TluOjIRFJRPxldrQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1926\u0026min_rtt=789\u0026rtt_var=807\u0026sent=2296\u0026recv=204\u0026lost=0\u0026retrans=0\u0026sent_bytes=2541570\u0026recv_bytes=47533\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2263\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10588,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"6a4044028d98d908bc4d3f2e76b61fed","sha1":"c2370c24e4646179560da04606cc6447ad01b393","sha256":"ccd37abc2fca779dc434b5b90e17e82676602a751911af95bb1cdb4f9efb16ba","sha512":"f3e56fb8aac2553749de6bc68a41283e0816ac4f8c12d3589498c6cb1b6e5d7bd98ff594f3839d3666329c7d903a01826f2b6b07f4080519e08f2d1311a4d37e","ssdeep":"192:TykOOAwKG1FF7oLTLDNoMfvCTqDvGucJ6nBKmvvdK46nRmLvh3WitLb5Jz:Ok3nFF7ah1fHuuxnBKmsBEHJz","tlshash":"4622cf923f4078a5d9e3c3ffe1ea5249ba97bd223e50496e36380cd68138e5d024e746","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.009038Z","times_seen":524,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/tabs.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /tabs.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"cdb30a51370cec593f2843eb2b7490ea\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LdZQ7%2B3g%2B6qxgx%2BDi96EpJRghUt0uy61IVQy%2FAmBRxAuyGpBxfrWUaS3Nf5O2j58D6ACvLMRokn%2F1pNirWljXeRnOtNzuA9znOtROYV46icQFrKs4jGMKE1k1QRYiIHp%2BJE9Qp8oPGZ3kbTtX9cmpVDYCKeF36RgnoXSPUdx%2Bruxq8Y%2FUQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada3e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4272\u0026min_rtt=1677\u0026rtt_var=2867\u0026sent=109\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=96878\u0026recv_bytes=6982\u0026delivery_rate=4694849\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=323\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6358,"size_decoded":0,"mime_type":"application/javascript","magic":"assembler source, ASCII text","md5":"ffc43d4e7603b066df46b8502227b5fe","sha1":"9c46621b287aa4f4d6e6fa5604576b9e25849d6e","sha256":"f1779a0519ca4eff4df28067475d5e5679f2cfc2bd9d9981f1e2364b70d2449c","sha512":"a5bb3c33ce1fa936cb48931383f726fe94786f6ba7151e7f9d7a2990341044295db6c043015cfdd51d7bad50ac9563f0d7f75fcf4c74dac611f78931efbf04e9","ssdeep":"192:mp7dPIYgVGgtp60w0n8BKP0qPJsQLxDFI:yUZ80IKPjPJsQL/I","tlshash":"4dd1fa9210b25eb50ad726b5a29796e93a04d043ed03b8513bcc064d0fcfd85d0b77db","first_seen":"2025-08-07T11:28:59.841432Z","last_seen":"2025-08-07T11:28:59.841432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webflow.schunk.12f66a7a1043bbab.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/webflow.schunk.12f66a7a1043bbab.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"2dc33b18f9e370ebdb8da38231df7fb0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Mx5sO6JQZBAZpy1oAKnaDCnYzEbDk1gv1CxCfOXfRggzh5bntmDYBGJ54hhf5LeQG2hbAVBrI%2B16WhsalZrOZNTm7uo10RJxZaikg6uXv7RZe%2BSqotSPTuajFEB2WbFVKHZY0yuB2m6Q02e30719rEzGUnyN1ddSp8771cVVCKfX8bYweQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada4a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4610\u0026min_rtt=1677\u0026rtt_var=2923\u0026sent=96\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=84140\u0026recv_bytes=6935\u0026delivery_rate=4694849\u0026cwnd=46800\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=319\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3089), with no line terminators","md5":"7c5dcc2dd3bea2e2f9629564c696d702","sha1":"7a1bb588fb3ee222c21c9bd284f4666f681629b6","sha256":"b41d87e74b422a46b6fb694ba75c747f7c4af179bf7133ee9931c455c579282b","sha512":"1bd30f84916829cb0561136cffe91940e7b0511835d00298066564e53a5a449f69ab3b801e01f7b2297b55063fdce17b2e5cf363e5830e7eba0a768599550cb5","ssdeep":"","tlshash":"7d51742d3605323445a7275e05aff249713654ed4714884aa37c9cb0acbde4e11bbffa","first_seen":"2025-06-07T16:39:09.433845Z","last_seen":"2026-08-03T05:24:51.258027Z","times_seen":124,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/allwallets.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/allwallets.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4819\r\ncf-ray: 96b66dc5696c56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"15c7840bf98264bd7a96cb96d03954e3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kOvDEu0URootCHUiNsFFKfa8RfpDzAivJTAkkBPPFPZeQZRfahpv%2BcnPCfBieWaSwaieN%2BNqg3jWLNXb073XsvgnHAln4MgkK6NWN7wrQCrVCdBJpOOGop0B3tMOgxFmK2L1OY3fGOnLQnZNIrpiplwtDL49pqBSelPfPOwGZjQHv%2BQfrw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2224\u0026min_rtt=789\u0026rtt_var=2259\u0026sent=1020\u0026recv=97\u0026lost=0\u0026retrans=0\u0026sent_bytes=1098524\u0026recv_bytes=13641\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2001\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"3750c6396a4728b183c32a80a597ac3b","sha1":"10033fb82c5f52f67f76d68533c07f480f9396e1","sha256":"87b746600062a359df41d27b40155d0f09cc1f4eaeaf4a8171b35dced4243aae","sha512":"476280ef09c89c23a2962229fff654074eb314692bb07610eca25b43f13802a5c4ad1720cd60ee3d7e34c15525b024b514626e29e187e76d1c3ef91e6b4ed942","ssdeep":"96:83nrZ3q6qBG66666666666JRFkN3RRwlkT8nY/bfmlkyIukt66KMYji66pzZ4Q9z:8XrZ6g66666666666nGN3RRjgncmI9tx","tlshash":"fea10abd219ac62adb9710b5e70887b8b5d0d2a4cc83ca3e194e2cdcf77043916bb414","first_seen":"2025-04-27T11:02:02.452462Z","last_seen":"2026-05-03T10:03:53.529226Z","times_seen":17,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/ledgerlive.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/ledgerlive.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2546\r\ncf-ray: 96b66dc5ea1f56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0da4c0634dfa4fc71024f82c56b9a65a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qySW1gAUVzGbbuXJCiODQ5qZgz32CGMrLFKOW8usCSfFaWHbiU%2BwfHZSX71tqEvVSP0c0s%2BBAyn%2FjpzRE5tQPwQrMFf7xBcsdXn%2FyM%2FVDD3PCXDhkqm8NVE7qC3MqDcLh3Hr9eCLHpCkSukwKHNTeD7PpoXlmy8PSx6nHF%2BLDkjNn44e8w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2202\u0026min_rtt=789\u0026rtt_var=1261\u0026sent=1177\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=1271286\u0026recv_bytes=24922\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2068\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8f19ac835c875b1905f90e7c6b92d386","sha1":"1f0f0e5d3833e60caf7eda01d0a801bcec7be01d","sha256":"05a44974d76ee555042a144fa29a445cfa6573c132e03fca75b578668bfe8f09","sha512":"98d03a73525657d0310328f5c1f7a2a33f380d58b143c9af2ef87c2c6e051e31e282dd42b9c225004df6662b25b19a667cba788bc95e8fc04bcb2520e9e6529c","ssdeep":"","tlshash":"30511959030513c3403ccc59cf171ca09cf68bd70bbf92a9284ca3585499b34fa4df86","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.755556Z","times_seen":292,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/pillar.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/pillar.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3954\r\ncf-ray: 96b66dc63abc56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4d8d1c58e40a6361e74860d053ab9ada\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YK9UEi3a4oFS%2FIVrHuT1jQGF6wOeoUvBNujmhE4pxiBaHSq3f%2By5kjwgC29Qh0qg0V2G4sFY8QZ8dtqdijhqEay73Osy%2FNwVjEf0bPBGE%2BH4WeucfENMntvxNqTv3VGc1FJT9gz%2FvUlNLaRmJV1Fnn1XzPh38k3REHawKP2lyGqWssNVbg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2144\u0026min_rtt=789\u0026rtt_var=799\u0026sent=1842\u0026recv=178\u0026lost=0\u0026retrans=0\u0026sent_bytes=2030001\u0026recv_bytes=43195\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2169\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3954,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"56303a528c3576d6b1b01eec7f9b7935","sha1":"72114fcd129d3b209fc9cd26c3e3cff285eb4440","sha256":"83aa1951815cf7cf6c2e10ea5d3e9e0f7e4937a34e36a355518c71ed65f8632d","sha512":"1ded0fe7cf95bcdab79f5eaa0f8b753f27a3b3add16390ff9a995f8287e167b56c6e88b13f6ed85bc375407d04c133d6f591454806385f9afa1d0dea9c44caf5","ssdeep":"","tlshash":"e6812a5e794367d2d5fbc975e1112cb2b9aae73b703c028f506e1271bca29d43d1b284","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.042689Z","times_seen":529,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.embr.org/checkouts/01G6YVH3JJV51DNC4ZKY4B00KN","fqdn":"api.embr.org","domain":"embr.org","tld":"org"},"ip":{"addr":"3.98.226.217","port":443,"asn":16509,"as":"AMAZON-02","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.embr.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 10 Mar 2025 00:00:00 GMT","end":"Thu, 09 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:24:02:5E:56:9F:0F:F0:3E:ED:2A:01:32:C1:E5:FD:55:77:98:99","sha256":"24:2B:8D:FA:00:54:12:A6:32:B3:E2:3E:CA:22:4A:79:37:8D:D9:E2:F8:E2:F5:17:56:48:A0:F8:8C:08:43:A9"}}},"request":{"raw":"GET /checkouts/01G6YVH3JJV51DNC4ZKY4B00KN HTTP/1.1\r\nHost: api.embr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 460\r\naccess-control-allow-origin: *\r\napigw-requestid: O7sXthNbYosEJRw=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":460,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57ed71ad0e1d4ce881f04c26b9097018","sha1":"628e22b9f0694e792cd296ba6e2871d4d443cce9","sha256":"2d21a3aca5054dd6a66fb6d18442608cbb36e0a2f29359a224bd47dbc7986d89","sha512":"576ca0f9897289ef6fbd330487c61a8bb3da20459b62c177df5e5f861795db1c162a33c7239ac4f691d472554cdf4d7bdefe742719c9f203d6493cfb77dfa3ec","ssdeep":"","tlshash":"67f0dc992f246c7607bc52dd04e9b81adae300f7cc0415149f55aa8cd270dbba90b1a6","first_seen":"2025-08-07T11:28:59.846247Z","last_seen":"2025-08-07T11:28:59.846247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2114,"timings":{"blocked":497,"dns":115,"connect":130,"send":0,"wait":1053,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/binancesmartchain.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/binancesmartchain.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 13441\r\ncf-ray: 96b66dc5da1456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d3c819bf533b47b5dbbbc4f88ca78553\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FRPX942XEfH2M1oWbKqAmNnOkqhzJIIMfiuKMMCZ2dzP2AbSv3VtvNQhlLK8%2B6ZGeJQknIGg7nh1z3TUInUtLI1nEKZ%2FMvaJfdOxSCWYs44ybnRucRJqUQpyU0hHoCwjh050IAB2Z6F%2FTpisXDzRiLgvjWa5wsOsan35LlOG8qn9RYwFmg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2310\u0026min_rtt=789\u0026rtt_var=1394\u0026sent=1151\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=1243261\u0026recv_bytes=24876\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2062\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13441,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"30c25622425ea78143288abedeee3dbd","sha1":"55178743f6ede82f836beec5936c86069f2fd0a8","sha256":"9006e858f325d81816f5013ccc34fa74833cc92b5ccaa3c96dceada828418d45","sha512":"f131677ea5f0ba9eecf552caad19cb279bea3312b28016cb20ef1b5b7e1d04b3d9f6c6782bdd5909cd61df9869dc43a75ae0d7ded750b8d3b73bfe88e27d1773","ssdeep":"384:byYrI68pNqoTfRcY1xDdaw2rTGbpW66HQFrD2+C:QTpvCGdgdUrix","tlshash":"ef52b05a27c32e32c76a99b54177480cb3935dd69d4a2e392acd451d2013db1e8ce635","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.834573Z","times_seen":341,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/shidowallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/shidowallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5726\r\ncf-ray: 96b66dc60a4956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"9d69718df359a6a8e3b60bb77acafd65\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aJMzDwnRB2IeCciRYXo%2BMw0UvoLVo4j%2FrZytK5WM8o7bQcu1MwuZsMxhuiUPaWXVp8U7nyb2CbyBcQlzbCRrejUR7Tyhx1LhtxRzDVjDXajNro1swkl7iUYhtVRNc2gMG5381XFnaar%2BcnSk3T7uISpGR3SGRSlA7KX81wcemtSdu8vRuQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1909\u0026min_rtt=789\u0026rtt_var=853\u0026sent=1227\u0026recv=137\u0026lost=0\u0026retrans=0\u0026sent_bytes=1323355\u0026recv_bytes=29854\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2085\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"917eba9f879139a1d517a1bf3d1f5747","sha1":"802f4eebfdc978eb107366285787755c92762acb","sha256":"e709dcfd5cb8d4a90e50c11b6c0b0a3a6f586f33dc09c5148722011d15997184","sha512":"bcf880c3196214d064d9ebaca966c7aa263853c62d4bff2c11bcabd7d5202206e1408be652d4a2ce2f2b0d0422ffe627b42d953356cd34a70dfd99b0896ba779","ssdeep":"96:fuQMOFT11fZ775/vup+iby+9YzYAA5Wkil2I1O4Bw/2XV2gSXStuOfX:jNjfZ7ZQ+TmeYAA5W5jBw/qcXSffX","tlshash":"35c1af3116d7b820f096d90ce0587dd5645e0c970aed8ab52b5cf840f25fbb2a60f0ea","first_seen":"2025-02-26T16:32:21.375441Z","last_seen":"2026-08-06T10:01:23.83844Z","times_seen":29,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/coin98.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/coin98.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 12620\r\ncf-ray: 96b66dc65af156a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"539fb4f9d1adc31fbae2368610e6d047\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0YIG%2Fyn%2BodaS55doHEklJ%2FRoQjLbhi1GpXLfTCI6t4paRpvltJn9Ddk8cTWz7kpp%2Fg6vDvCeIqCayRK1zHhDcZFW5NmKio5q7YPxBLSsQ2iq8oRUtcJF7sN%2FdwGhzstMv0b2X2ucdmqiBvBG6tKCJ%2BkPll61vQ2%2BNmpaaUI1iWDpHglaoA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1952\u0026min_rtt=789\u0026rtt_var=907\u0026sent=2053\u0026recv=195\u0026lost=0\u0026retrans=0\u0026sent_bytes=2263757\u0026recv_bytes=47112\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2207\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12620,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x399, components 3","md5":"c853c7334cb327be4e6d8d0ba7e56a63","sha1":"ff376e955dc008c41798d8bb003d6cbb7659ffbb","sha256":"4d20fa8823a9797faa93a7e0c9a61cf0fc1bacdc0549146acdfbde783284c4a8","sha512":"14330d10467faf1e6aa82381a14e98df96614e4c9650b79f15bf0c6db782ec5125c1fc4fb1564924df97e813bc6aa6ab38c9a71a800586400a45c1dc3e443492","ssdeep":"384:1bHN53JAsIxffcI120ayqieFgX8dyoO7k5:V73KrZZ2lyteFgT7e","tlshash":"b0429f07f90bb119fd58dbf3c8cb15bd3ba940395a024558a38726948be6006dc4eb9b","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.773548Z","times_seen":785,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/nash.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/nash.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8155\r\ncf-ray: 96b66dc66b0d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"02a0d2a06be8c13902e62b9a839c81e3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TyLkMg9qWjRvz3JWEsEgPSGc1B4JHyI7%2FWZ2vE3TxMTxnCltknmvzRMXYZE01KHEPD1y7VTPltcJ%2F3Qcp4BdpDiGhDYlFzYUDVG2GAIE5rXaIUXg17Dhttft%2BqJIymivEYerRkwWO7S8rgwOHB3oOQp3ccvHnMBp1lSbkxizABWLu3Tvkw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1971\u0026min_rtt=789\u0026rtt_var=893\u0026sent=2256\u0026recv=200\u0026lost=0\u0026retrans=0\u0026sent_bytes=2499587\u0026recv_bytes=47343\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2237\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8155,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"104461e7e4dce9afb135eac0a215b19a","sha1":"9d71d53d7eae917ebb2409cfb50c00ec7b301cd8","sha256":"89d1383830e1a334458a6acb31e44b2eb2fd8162328533e2e4fbe44322011c7b","sha512":"1d6c9d2120851e790d1b62b62fbb9db1e3d459c5970d86b7d3c8f6bc46fab08e950cfee3b3d29236c0f85d2ba963dfd23fd9fa95f255f5b7f61d2327323f2eb6","ssdeep":"96:3wVnYPA7qTFA0FjCQAATa/Dis/wb3cqUSHOT1W2mj6DSOxQ5V3hX:AFY47qxA0F5Q+ywUSuTCj6mOxa3B","tlshash":"21f1af0c3db86064c1e8d9feec3a075082fc21d2a619ee3d7296946843ddd56b9d4ed2","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.789222Z","times_seen":673,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/686dc7cdb02d2017152837a7_CoinMarketCap-logo.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/686dc7cdb02d2017152837a7_CoinMarketCap-logo.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 6074\r\ncf-ray: 96b66dca593956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a9c33715bb6b8995c2548ca4c1ab2754\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m%2BlZoq4ydH2khktjUKnG0ekcGh174E%2FEXZ7oEzYNxGbYAC71TiYanP0IzKxVI1%2FjoJgr43T2iKGuUsC%2BH5faNEc3%2FMy3ZLKIAAhxZn3PHWS2QozkKUuIcfcL5iv6bblq%2BpcgApJalIhstWF5n5zn3JQntUelc8nBIEti12au9lG%2BAJU%2FBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3110\u0026min_rtt=789\u0026rtt_var=2366\u0026sent=2802\u0026recv=231\u0026lost=0\u0026retrans=0\u0026sent_bytes=3090059\u0026recv_bytes=50052\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2799\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 406, 4-bit colormap, non-interlaced","md5":"688672b8e0cc26ec10ec0d29c2a283b0","sha1":"6b9716c94c784b66b0b771665eecc0b22f916037","sha256":"83867d246123816b230c05e3c850da1fb24849ba3f05a281f44c9e8aaec8ccc3","sha512":"30735df98058dce239b08b0c97ab5dd465b3948c396ba6303a28acccf5b9a571f9148b970dbf1ba081835ad4e1de98268b98cd1a84ecce9410fd8c586cf44403","ssdeep":"96:BjJGP0vAPArbu2omS8EYp1CdxE09xHJ3Dg+woGDZX22mUYGeDey1u7mioL2dilri:pJGP0+Arbua31qxE0DJzg+wo4PKeQuKa","tlshash":"bdc17d67735e013ae975b6ebe69a7714c4c6bdacb20022a032c47cd54a8f143559832a","first_seen":"2025-08-07T11:28:59.850242Z","last_seen":"2025-08-07T11:28:59.850242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584103\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":1461,"timings":{"blocked":676,"dns":1,"connect":31,"send":0,"wait":15,"receive":31,"ssl":700},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/at.wallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/at.wallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 13243\r\ncf-ray: 96b66dc6bba556a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f3eb910bf19ef26bd3b16ed3b4c87ea1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UK13C7zDrzJBH75Xz5IYknGar2aFJ1sdetrYrPR%2FyUV88G2NJffAU1xQJH01EkSucuuhVj5e2zVky4RpbAYN8WuYMrR9ARULiqvAO2OPfhQsfTZ%2FCEl7Kbq%2BEhjcmDhvX%2BMFSI2uioqvjdPNrnCYDZsSN2H0AfpXymcMhdyhpZbkCdK5OA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1567\u0026min_rtt=789\u0026rtt_var=465\u0026sent=2357\u0026recv=211\u0026lost=0\u0026retrans=0\u0026sent_bytes=2604347\u0026recv_bytes=47860\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2288\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13243,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"567f617068dcd5ea372ad03e10991514","sha1":"3953be697875e808423c3268b68c7de0f3833b5e","sha256":"0f0cfb848a47be7fae86c813dca0b15fbb0b7377ab28613abc2515948543fffe","sha512":"dfd09fb6c342ba4cc00a882deebbce09659cf97aff52aa72140f15eaa9ee1d019d7ab16fc39d8858b9c1d315dec9f00690fd001cc0284315c8b87e84be4dfd2e","ssdeep":"384:tIXK62b3o9bxBTzpzYAZqMueR5d2r+RdHoo:tIXKt3o9b38M5R5HL","tlshash":"d152b0217908debbc074da72151aa4a4869ddfca3dfb1cce60685425073c1e7aa489e6","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.017138Z","times_seen":803,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/tonguewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/tonguewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4793\r\ncf-ray: 96b66dc70c0456a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"356382d282496b038395a0ed04998754\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e56acLDepvoimPdAvatGVTCrgRbohJKjYPbxkMFncRzFLFyinH9ON6ARdN6lBh7lplBia0FcNXYC6XuRpdZqmNKWQuIQuu44Ehi7c4n4d6G6sNXOMMdUP%2FhYCy3NNahK%2FcQavC53HmGayfXJrWs4l5HHR6IHsgmG63urkA2T0SxOUKrgBA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2021\u0026min_rtt=789\u0026rtt_var=1080\u0026sent=2466\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=2722919\u0026recv_bytes=48134\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2310\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4793,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"343792786b18339d16d0dd92fb91e6eb","sha1":"bdee6426ac6a6206e15680af46af67376e1701fa","sha256":"5a8304f37ebe014cf58d37de067afcd1ee6da645395dff8c47f277477e64a86d","sha512":"faa030fcb0c1e292f4bc856543bf441d60953fb62bcc703e3405e4fe04b8e606886bb111c90867936d1db22a8f61060fedd59aeb8b6ac3f97bd57cf44a4bba33","ssdeep":"96:fiRi9nj8zm+RO0A/neYYgXA5jypLOKJTFg:KRaIzZRPSeYYgejypVXg","tlshash":"29a17c51322a6b23f44ff6b25c959fcd6bd10ac85c4e523c95af705cc286e8da9054ec","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.739114Z","times_seen":596,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/47e964ecdcb6c59e56ba5de5a6b61c30","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/47e964ecdcb6c59e56ba5de5a6b61c30 HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AlYbmxxROrq0jLZHuGD25XGRCECYCbpYsKcc7NconEdVyQflC8wGMpiJPdG2PhZnVk07kCdwClgC0RQTjzvpr7Y43WXHHVEoPwIOTB9Zk0Ais39hOplmrEe3KZy5my4R4Ekhi0kMKO3BlVzeP56PX0e%2BUzs7hRtRMqPL%2F70d8L%2BJGgRaaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dcea90356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1947\u0026min_rtt=789\u0026rtt_var=1318\u0026sent=2842\u0026recv=241\u0026lost=0\u0026retrans=0\u0026sent_bytes=3126860\u0026recv_bytes=51214\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=3506\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":729,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (632)","md5":"d0680b59e0b13f18a571e98a3422fae3","sha1":"75765dece00eda157d1b3515db4840068d7479e2","sha256":"4757047de93fd7977d28f903e5c35268d2cdac5036227cfc499c78ef4ce921e4","sha512":"0b300976608fd689eb9d37308d162e72dc1f1874438a8065533f1528f72df57ab635c15d3747b23aaa5084458835b44206f7568f1fb3301336c81a091b99a2a9","ssdeep":"","tlshash":"b00165e91f1ab7492542a3a2a1edba081464c4458492cc501c6430e8d28c7dbe46f3c7","first_seen":"2025-08-07T11:28:59.746452Z","last_seen":"2025-08-07T11:28:59.746452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.foxycart.com/secure.grovetoken.com/responsive_styles.1724467665.css","fqdn":"cdn.foxycart.com","domain":"foxycart.com","tld":"com"},"ip":{"addr":"3.167.2.67","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:11.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.foxycart.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 08 Aug 2024 00:00:00 GMT","end":"Sat, 06 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"76:74:DB:94:A8:3D:15:51:92:46:23:2D:20:72:6D:59:86:BA:2D:2A","sha256":"5E:31:CE:AE:C4:E0:56:DE:A8:65:DC:88:9D:5D:85:28:42:1B:53:09:71:EB:D3:0C:CC:EA:55:E6:5C:87:6C:1A"}}},"request":{"raw":"GET /secure.grovetoken.com/responsive_styles.1724467665.css HTTP/1.1\r\nHost: cdn.foxycart.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css;charset=UTF-8\r\ndate: Fri, 18 Jul 2025 04:48:22 GMT\r\nfoxy: app\r\ncontent-encoding: gzip\r\nserver: nginx\r\ncache-control: max-age=2592000, public\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c66a2f390287242c7df16dd5190aa68e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: hpC-FzOcSFrpCsoVcLwNYl2X3GiCesN8uGXabsOFDEssZ_hhBj3iTw==\r\nage: 1751990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315207,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (788)","md5":"d4f38c3bb804165ab7f13c4a0b8f2b95","sha1":"b842c7be10dbd897727ce70d309ee76c8ae7600a","sha256":"c354ca0881c26fa9eb3c91a6253057fc6a204ced75fdcea03a05ce59d7f194ce","sha512":"78e627d2915dbb7fef6bc3df94bcbfbc2873a306dd4913f7ba499c3614a960891db97cdfce944113913ea069d7c00f90d4240079ba9e4d81e7d61de99e742a2c","ssdeep":"6144:C5I/OtPFTZ6XO6O999tnnTzvIfrQ5bx2h/KS/pk5D5r5G5Q5r8GtrxEUt9ewivI/:C5I/OtPFTZ6XO6O999tnnTzvIfrQ5bxh","tlshash":"4f6452d4252036b4b1a16a582183edc2bf5c6bc7d82bdca5728210e85b54cdf36f3e97","first_seen":"2025-05-15T08:55:12.004803Z","last_seen":"2025-12-25T03:49:01.039251Z","times_seen":44,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":33,"dns":19,"connect":1,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/css","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/css HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32607\r\ncf-ray: 96b66dbaca2356a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"77984bce3886bfc8137dcd54aaa61109\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7KhlJjO2ynCLhJw1NIYRL5S4f8QimCiz6xsavvY%2BSmEF7ruuaQL2ctOLtxNT25ziyLckfPn23VjwEUyBcF2YydfpVs606MNL7%2Bu78u8jDGBrRiM9d4v8UxYDGRz1dSlZUNKtQiNrA81fJOQzysDl6Ol9aUjbj5tqXTFQWvggYCg26pNqMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5182\u0026min_rtt=1677\u0026rtt_var=3369\u0026sent=55\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=40262\u0026recv_bytes=6846\u0026delivery_rate=2943334\u0026cwnd=26400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=312\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/frontierwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/frontierwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 79456\r\ncf-ray: 96b66dc60a6856a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"eaae3929ac9929e90b82380a8b7a4809\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IcVlk1InllwFEuSOZwInAysY0xP35SB%2Fw0iJqdfyuRoB7hM4exIhtMaLqqNT30Clk4O2Jd77%2BkExdJdZYOBAtS6EMbaDQDH6oFKNzHzd3Nweqd%2F%2B4FL0D9nik9VrzqbkuiELm6lQrREvhEZTJSPxz7sW%2BrASjRjfPedOSTolOvdeZkJsJA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1946\u0026min_rtt=789\u0026rtt_var=953\u0026sent=1356\u0026recv=159\u0026lost=0\u0026retrans=0\u0026sent_bytes=1465087\u0026recv_bytes=36268\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2116\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2501 x 2500, 8-bit/color RGBA, non-interlaced","md5":"a0f02ddac64a634dbace89ce71c59117","sha1":"404eaace92d3d518f805cf53cc3961787d4c93d8","sha256":"f00dc3b3fa956b60b359ababee24916fe572d0992df91ed5b9df45ab27b85402","sha512":"d65cc4013d07ca5f6767ae36c6b6c5164f0fd990ac7099ec1d2ab6d97a5c2370f07ba3a56d5c9f7203c1fd9321eda2cf58157802529901f1465b62cf802ed51b","ssdeep":"1536:65V0o5TVD9enoykSXVWM0bRrEKAKWZ1rIFXXBg7hlD5UmZXaEuMs:IV0dImOBeXUmFuV","tlshash":"2973cf669f631ee2c8a42ff89cd81f19b7b00259c1b85b5b43b8e0739ec725d7053869","first_seen":"2025-02-26T16:32:21.381959Z","last_seen":"2026-08-06T10:01:23.783712Z","times_seen":28,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/argent.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/argent.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4799\r\ncf-ray: 96b66dc62a9e56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"166df518dc13ad7c631d6693f48d51b3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wmtqt5fTaZIwJ%2B9tzvmXgQ6ULsH9LRz%2FRCKJiLYrRtvnJwXIKNjpVhpcpx316Fz9hs03topkQlW9W%2F4Vruxx%2FljGPwfi7E%2Fa5O6LT3YITrpZO6%2Bf3v4Y1OVWkDnTgzzgKzaaEPpMxNOy8oe4EagXMJbHrqgqObetwteyLyZgtYMuAV8k5g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2144\u0026min_rtt=789\u0026rtt_var=799\u0026sent=1834\u0026recv=178\u0026lost=0\u0026retrans=0\u0026sent_bytes=2021187\u0026recv_bytes=43195\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2166\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4799,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"ba14456aaa8918f10ec0f0406cfab704","sha1":"821df4dbf546ec0cbf0e0638b3607435d280c6c9","sha256":"2f1cc7a575e26a18f4c7903434a91dcf10761445254808b636567087fc8f5d5e","sha512":"5745593deca450974fad33c7718c292576a1be8bae48fc3b47ddfb2e5fcff58ef1b9c1adef74311b81a3e78e3ae1541a8bbb394a1d88a6c3d6ec5d3075f06cf9","ssdeep":"96:4BHKB7E4zhgPFB0T6N942Y1L34rJ/JTIowjBezyQafsFldb1:wO7bzhy0W94l1LgGowGyQJldJ","tlshash":"eca16d2b35e1db27dc05ef32006301209ba2ce9ebc09af6cdae826484ae91c0cb4d5d4","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-13T23:12:13.04045Z","times_seen":569,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bravewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bravewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 24379\r\ncf-ray: 96b66dc63aae56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0fca8406e7c8d03060b27ce71bb80332\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aydAFXlsWS4ByLb7z%2BwGdDrUaHRXK5EXIWRPodq%2Bqj80UJz0gnpWezJhVtc70%2FUK9BawZK1fu8b0%2Fm9QajV%2FfqVRxX0zOrffaKajpAABHhKZadcEOwYYBx6cXO5A%2BauYGJWThC8xWVq2h1BR36cGqn2hR0cdMKKcGIdCWG5yr7BVFPiWoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2154\u0026min_rtt=789\u0026rtt_var=1040\u0026sent=1800\u0026recv=174\u0026lost=0\u0026retrans=0\u0026sent_bytes=1984386\u0026recv_bytes=40395\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2157\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 155 x 180, 8-bit/color RGBA, non-interlaced","md5":"5420c2011e428f4929f7330ce63e31cc","sha1":"067cd10ed2f7f86181706b436a556bd6dfa85e83","sha256":"1661ae7a593738204313455516135a883d0b41f90764cf032dd007b529bb0c03","sha512":"a792bd35ba76b9de8d89303732f7c2d1f14c84a13e68447660ba59f18e7112fc02071ddadf520db4bd0d807305867b518e1ccafb7e216bcecb5bb6840be7dd7b","ssdeep":"384:4EVi+Yks83vAmTV8AP8VGzohPjRMFl+uPGEcL4VMe9uaaijn2EDvlTh5E/:4Evc83vzTGBVGzgPjy+uOesal1Dv5E/","tlshash":"00b2e1572dbb856a58d10213bf8ee1f601224ef5b2bd00ab0d2efd92d5c24f5c50978d","first_seen":"2023-05-16T23:24:24Z","last_seen":"2026-08-06T10:01:23.827086Z","times_seen":478,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/61afdd1ecc1aaf78e3b2393c/61afdd1fcc1aaf1ac6b23969_menu-nav.json","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /61afdd1ecc1aaf78e3b2393c/61afdd1fcc1aaf1ac6b23969_menu-nav.json HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\nx-amz-id-2: vMXYgqEerLWlRay1btc0fcMfOrBCFdQE1PcOAL0Ljb0cuwC0XsvSsP7mZDfFnD8MoWqyHwNgphY=\r\nx-amz-request-id: QM4KJQWZN6ZX5X20\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 07 Dec 2021 22:16:00 GMT\r\netag: W/\"62283913c195cf3bcf50860dd1bcb8b0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: CN0SSieBHZaScP9N_YP2v7KW7Myu3mRo\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96b66dcd782d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7621,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62283913c195cf3bcf50860dd1bcb8b0","sha1":"a46e7ef226b796bd68044735bfb81ae2268fa054","sha256":"07526484281d3d0f81f439fe386563a1782196975c45bffd65d3e29a609331be","sha512":"8652efc4f4e3ccad460e60c3eaa6407b1682bb16a6d3fa064ac49e5cbf58480458c94063bfeb59a20e1943156a34d436c23c7b21382d76f085e1b95be25a1db8","ssdeep":"192:Ok5FtYNv+Z7u5FtYNv+S5FCvhCvEor/Dx5FCvhCvEu:jwKQyh1QyB","tlshash":"61f17bd60a7142ecda1578809bc374d2cfd489856fc609b7aeb76c254fd57ae2302f22","first_seen":"2025-01-22T02:10:12.588762Z","last_seen":"2026-05-05T13:32:52.850734Z","times_seen":13,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d201715283752_Green%20Crypto%20Logo%20Fav%20Icon%2032.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d201715283752_Green%20Crypto%20Logo%20Fav%20Icon%2032.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1779\r\ncf-ray: 96b66dd20a2d0b55-OSL\r\nx-amz-id-2: bZ4q6vBsMBCUPnNzL70hzY0Qw+h2ULq0Oc0vzQ4A27MHkkPIAilyyZaiQSKUGViTftq9KtdAl58=\r\nx-amz-request-id: 6T42457BEX150XMM\r\nlast-modified: Wed, 09 Jul 2025 01:37:21 GMT\r\netag: \"59126368a593d38f00fbf8fad9a5d062\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: uKZKQQy3cLGvQFaujXg17gGjCpELx3Gf\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1779,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"59126368a593d38f00fbf8fad9a5d062","sha1":"a9bdf891902f4befe2d70a4317892b7d17eedbce","sha256":"7878f6ebcebe1efc849f55461bd86082ca76634c35c4af635e54ef148eb6b360","sha512":"925d435e13a81d8ad7969371d5697b4da7479c65bc26316a72320895f5e68c1df3a0edbfd33c9b791a6a9b74eff44358679d4d3aee7b24495e47c2f989d2070b","ssdeep":"","tlshash":"7e314b747024ba63d9c20d308131c3e17cb4e64aad2b03895c16482645235500bbaed1","first_seen":"2025-08-07T11:28:59.856342Z","last_seen":"2025-08-07T11:28:59.856342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686dc7cdb02d201715283596/686dc7cdb02d2017152837ae_smart-farming-with-agriculture-iot-a.jpg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /686dc7cdb02d201715283596/686dc7cdb02d2017152837ae_smart-farming-with-agriculture-iot-a.jpg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 335490\r\ncf-ray: 96b66dc42a36b503-OSL\r\ncache-control: max-age=31536000, must-revalidate\r\ncf-bgj: h2pri\r\netag: \"9a6e28e8383669ad5db26d15d543bb11\"\r\nlast-modified: Wed, 09 Jul 2025 01:37:22 GMT\r\nx-amz-id-2: f/7SozVzSAbHBIE39UwhP9JFSKeOmc7oE+M91TEuEDsJ0mFLBn4pA//+XQfjQFwKVYRG3XRTcZo=\r\nx-amz-request-id: 2050TWGJCQB1FZ8X\r\nx-amz-server-side-encryption: AES256\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-version-id: 6Ms8hYSrnUNMmSIW3BlWrsZPmsz0apKn\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=2521, bps=0, PhotometricInterpretation=RGB, description=Smart farming with agriculture IoT, orientation=upper-left, width=4481], progressive, precision 8, 2000x1125, components 3","md5":"9a6e28e8383669ad5db26d15d543bb11","sha1":"7fdb22a724741096e9f7071190b45306c854efad","sha256":"382d070c3fa821f299d01c3a4e214b40187bb6c09d766fd843c1b6112a78406b","sha512":"78994c407de77869a84e5a3f6e7c1cfb439c0328fbb75c6c6907740ecb48885026d5275561ac8fbcf084477a2c441b309f566b9337ce38ac0bcba1747d06f854","ssdeep":"6144:QgnLxM5D9LgMiG59Xy8l6+m5rP9ZakOyXzIVf2saBlxDtb7JcsVnZ3:xESA3lVmt9wwId2saBl1nZ3","tlshash":"ea641224f594ea16e090be33f4e69279dbb3a9c24d56030f79ce98247fa09f18c85573","first_seen":"2025-08-07T11:28:59.857936Z","last_seen":"2025-08-07T11:28:59.857936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":81,"dns":9,"connect":7,"send":0,"wait":94,"receive":18,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/ledgerwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/ledgerwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 402\r\ncf-ray: 96b66dc5696356a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"47aeb7110da473e2d3dd16cf04b86c5f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s%2F7rA%2B8K9iQPOy4Sf02AvYFmEe6GXYfbVpiSqLdjrtob1j4lt51WITZK3hJR0OHuFB2KpVqVCqDHimDWqQh2PE1bx9EkN6bvjdnKrxKlcPalz1xUUbfc%2BnjPKp1jWoiORSuk0bUK2iHMx3lITibz9iTG9Br122qak2GBdTo9wfaBJeMeIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1227\u0026min_rtt=789\u0026rtt_var=504\u0026sent=991\u0026recv=91\u0026lost=0\u0026retrans=0\u0026sent_bytes=1069358\u0026recv_bytes=11627\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=1976\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ae21ecb25616d3be96e987fe7af84d6e","sha1":"db559bfa16b130ab1b8c0b9b8693c807e29b3503","sha256":"7545b9667995fb98664f07b94793628ca6920fc953bb4eb924259480cae4bbe8","sha512":"02bbd8bdb2e77a6b39b14712828b719e7c036e006c792dd8f2d0150b09324dd2b2e7892cdbbe05cf7dc6d1d162af3ccadd65099806e857821de738228f2c3ef4","ssdeep":"","tlshash":"ede0f17081776c782de418f412ff520303ac0d5ed211021b43b5b82020f47d6134d193","first_seen":"2023-05-25T12:23:00Z","last_seen":"2026-08-20T21:14:40.744342Z","times_seen":1268,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/banksocialwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/banksocialwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5079\r\ncf-ray: 96b66dc5c9fc56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"127b8af312c7a229b5e9c34ed9432cc8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3pkJPppRlg3wMzqETsgs4OLP7E9YP96lfb2XCbqeRhchG%2BVHFjd%2Bb7VHHRVSu99qbC6lU%2Bqrf5kWlX8ThzJqf4WL5HrFB0LffRcmMCBFNyk%2BSlJo9IC36maXlSWu8SganwF0dt98EqiBSDMF5Ex0LSp85Hp5UhjPpfk%2Fo7jCi4YDGKvdEw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2101\u0026min_rtt=789\u0026rtt_var=1300\u0026sent=1134\u0026recv=117\u0026lost=0\u0026retrans=0\u0026sent_bytes=1227697\u0026recv_bytes=22342\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2053\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"aae14d4ff3c0e3a17854f1dd1f74d8d5","sha1":"65e4927302bfec34165bcfa11eb833126e20682a","sha256":"b86a9daadb3f16ef139400bbcc0b5a4a263acc79130e3b67a48181265e313217","sha512":"3065daf5e73bf496b9fd900f5800500fbd4983336712abe380eafdba143a72b18e1f7ae534bf1b277c9a799d5d525209f5c369ae0474f8ea7f32a03827234066","ssdeep":"96:Pp1WttokWPCFIySKWNZFM0d+02J3tvO89DOEJbh:P7OKpZFMj02J9O89fz","tlshash":"5ba108caac4c090ef62c8733c6d928b6c2f1303757bfd7bf511d49582057589b92ab14","first_seen":"2025-02-26T16:32:21.363377Z","last_seen":"2026-08-06T10:01:23.794663Z","times_seen":28,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/gateweb3wallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/gateweb3wallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 11770\r\ncf-ray: 96b66dc60a5656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"18766e2fd010978fd9cb8e19e4992ed0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EYuYFmCdjuT%2Fq7%2BRvdmmLidK3JWXjT8%2FKQyDOE4QXTS0I8wSSd5rwu98nL4jUBg9Vy9iJ%2F0JzW2M7lpJzKZxg4QVeIcpAY2o8amWgGVlpHAdX1%2FPPsNujHwDtkSJWlEUztZ67rC7wjC8GTWFG5xzE7X%2FeTA%2BE4sSihHHqHWx3WDFbDwolg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1919\u0026min_rtt=789\u0026rtt_var=770\u0026sent=1366\u0026recv=162\u0026lost=0\u0026retrans=0\u0026sent_bytes=1477087\u0026recv_bytes=36970\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2119\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11770,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 399x399, components 3","md5":"b2606205d62d5cb4f072dd41d17474cf","sha1":"01493d8efbef15ae750f38d0fe643171ef9a6be0","sha256":"6bdad5235fbadb427c0cd8fd91090633c62744bfd29665bcbcd30de3d5535842","sha512":"a9aa21b24d6744ac791914a723fd082a3fca76099a7745cb8424ae69bb94f58f9805e6e7a5ab08f46aa659aacbef34d7c20b438e28e1c3c148b320e0701fabb6","ssdeep":"192:s5Eukq4XAtj07gV75LtyM4PKWkef53RFWS9/68fHXEqd//gUYecoEWkxdw5VGsIF:s5mq/dTOKUPFW0i8/Nd/NdcoCnw5KF","tlshash":"4b329de62af40e18d16e1379de897b26e106ed141f80278be5821890df6d6f49e821f6","first_seen":"2025-02-26T16:32:21.378022Z","last_seen":"2026-08-06T10:01:23.782988Z","times_seen":28,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/mewwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/mewwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 14804\r\ncf-ray: 96b66dc62a9056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4de1b4d08a2ab950ccb248e0d929bf34\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5JB5jRqCIIjO%2BHMrq8Od8CEz2yh0dINiEkr4aVz6vVly4b6j895p%2Bbr9RW%2Fsc0zUMENeShajrodsXohErkRsA5%2BzURxzL09CmNQeKlVKRCAwkSUwwlZuqILENf4FFLKmeW0iTNtjihAA4ZpfCShal5cMQLeOS06FgOSK26Ty9jrNZdf4KQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1927\u0026min_rtt=789\u0026rtt_var=747\u0026sent=1576\u0026recv=169\u0026lost=0\u0026retrans=0\u0026sent_bytes=1724117\u0026recv_bytes=39010\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2138\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"82615ce16864801ba6748b4654439d0b","sha1":"874a2385b0d385930f081579905cd4635a8e900d","sha256":"beffb34a6674041191a472a308bf68f61fafb82182593ca281ee4e7261e9b120","sha512":"5c9282945a9a64ee8fc38ceadc2bb173584d3a0279cc8fd6d06a59a55f38ea1ac3edae5f099f7ecc28fa66a3b417c51afed32259b549ddb45f20aaf9da5d99cf","ssdeep":"384:2zxFJjTrMUsRGfVBofEpjbWRxztre3mHPdIW6uZQ2jZXc7:2djsRGfVBXWRbre3Q+3yQ2jQ","tlshash":"2562d19ac57c4c53a0a7990175781e7c0ea29f317e8c25899414f35d0a36866b9578cf","first_seen":"2025-02-26T16:32:21.388725Z","last_seen":"2026-08-06T10:01:23.782144Z","times_seen":26,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/peakdefiwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/peakdefiwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 13343\r\ncf-ray: 96b66dc6ab9656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4dea57d6141a15d974ad250f612b384a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U5jqljkVXs%2BoDE%2BOzr%2FKKBxfZed9O0qo%2B2et08poqAMAthjsc6xp9URCHFgXl%2FfxUxooQx%2BCsuCW3k7OQtkpIKBswkt%2BexY%2FCeknl9xWieqr25Mh%2BiQqNGWO5Sm8qzq7aQStom%2BjEyIm0eqcpp8vZIZYssA%2FWIEyqpqyCTzjnETt05%2BKqg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2021\u0026min_rtt=789\u0026rtt_var=1080\u0026sent=2439\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=2691903\u0026recv_bytes=48134\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2305\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13343,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"4e707fb79ac3c7fbbbadf5eefb2b49c3","sha1":"1891191d2e706ed2de8f9e8abf1cedb1c3237e42","sha256":"d716ad850f9073128b1d56e364c61bc446a4912d86ebe0453bf20052a2759d7e","sha512":"fbc7b2c88327f2591d10bf1cbc2769163a22189036758d03a9acce6119ca0ea4069cdec4fa78617e71513b5fff83205a5f8f476a515368bce137c17269f9b156","ssdeep":"192:FCbwl963+zqXVST48UXoBwAS1qdqAAAo8HTL2hkPn9hRiKOoKWSQUItXeueaMrMc:FaGA3+zoQ/bLXTKhenNittrQU6eljt","tlshash":"ed526ac27c1288948eff8bf459628893d8454570aeb7fd2f2c637de5ea00f2c55123a9","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.016302Z","times_seen":636,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/hashkeyme.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/hashkeyme.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9614\r\ncf-ray: 96b66dc70c0f56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5e8d322d6f6bfcf757b890f339790193\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ctvYLm5ZdbZ6ajrPrshACFl6o9rUOR0iqK7n9nePkp2IPjffZIYSNAWFpHUlokhwRXyeTb7MZGpBmxD6%2BU2Q8YdJ%2FkuyLkgtBa5KcxLM8odRpbvN%2F3IJ8yXOuMOUTXK8EE6URok7Tw4x4dxg2vTi8qm0agmn%2BIXmotyEMmEyTrUXi6yvCQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2205\u0026min_rtt=789\u0026rtt_var=1036\u0026sent=2626\u0026recv=220\u0026lost=0\u0026retrans=0\u0026sent_bytes=2904385\u0026recv_bytes=48272\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9614,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"df8b9be6ab001c952141bcc0d2dd3a18","sha1":"dcdb9772083c0f2d339681a1585df3cbcdf95aab","sha256":"cad836e38abd3a18bc965f97dea766e39ada552a301ed8144c8516101ddfd0a0","sha512":"3de4d38b6e0380bc30b7eef8d726ef66b8c16df84385b6378aec1bed7f718398f9a497a101a210048096e463288de8c75cedb8506277b18b1e71de6b5efc0e22","ssdeep":"192:vI/kesMj3sdYv3Yj/TVlMF+kAehO27g8qh5cF13ZVxLD9qXV7X:wYWsGYD3M4kAehbe5cF13ZVxLDgN","tlshash":"3512cf67b81ec900e795c6f4894208e9cb20df16d6ddb54f93bb435a33502283c7807a","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.882744Z","times_seen":732,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/686dc7cdb02d201715283800_actualize-arrows-couple-in-circle.svg","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/686dc7cdb02d201715283800_actualize-arrows-couple-in-circle.svg HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"5a2b66aa3918eefad9bc7f9005bba01d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KFX9cBMpu0at404KRn2j%2F%2F6tkcn%2BSi0PFNQg4GLdxPUm%2F1JNkJMacpIJrHDD6fEPpp65mY47fdHs3YLdeMeluccNcPx%2B3yhtulKgVbL97AOIAnDzyUq1oyQ%2FIfBT3ra3X%2FZfGLlRrJFKbxTlqww13MUoyUYX3K3wm5YU9jC66ZQjR4rp2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dca696056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2587\u0026min_rtt=789\u0026rtt_var=1480\u0026sent=2835\u0026recv=235\u0026lost=0\u0026retrans=0\u0026sent_bytes=3124623\u0026recv_bytes=50236\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2838\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52a6e75d4b42580e4f21622c27e78df6","sha1":"8306ef073a73e3353f9c76912f7b7c638fbf5b4d","sha256":"88b9d5e6bbb8ea05bffd45c31351904e4027721bb4245a88a502f481d8177dc2","sha512":"380b67b6312acc18e256da0efed2f24d1a709768cff1724056fb116478dd756f8967660f4c65b4eb146c591fe33cfeaed276272e461925298a2d86d836af73f4","ssdeep":"","tlshash":"0d21d0f806169d67e43076f1d7b83669127003792c92e354bb17755f704156771d0a9c","first_seen":"2025-08-07T11:28:59.867658Z","last_seen":"2025-08-07T11:28:59.867658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/webflow.schunk.e4c2a62eb4a275fa.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/webflow.schunk.e4c2a62eb4a275fa.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0d8a8fbee199606b670bc266f4a90997\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7p0IwA3SI%2Bj75rvN9bjRsQgHjfYqts8KLcuK6b7UduRY27o6TkcNnme64bMo4TqrAicfHpiIx9lxgZ5cvWBrYCPYolEM5%2BKzk7GBsVCzJppdTyHIQ8VOC%2BpTobUF4TjV%2BvrYmWNcDyvGuhbLuOAdf3xltvCKNI8xUoHAxmRi1WQTaY2peQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada4856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2804\u0026min_rtt=1265\u0026rtt_var=1815\u0026sent=217\u0026recv=35\u0026lost=0\u0026retrans=0\u0026sent_bytes=213223\u0026recv_bytes=7369\u0026delivery_rate=9136967\u0026cwnd=74400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=337\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7fcf0522e20278ae757266d32a7ab5ba","sha1":"42528e839f5445b3a20b2af3e67f63427cba25ee","sha256":"04e2555aceb50232869c7a00171d6c520a569532db7f8d3db875fc4fba41b8ee","sha512":"248cad86de7598fa07f2c42848ec8c7c31f4459e7b866c5eaefeb3ba7c55fefafd6abbeedd88a3c5e596461a2cd5001e809465c9672b10e16d923f090c31490f","ssdeep":"3072:l/OBOMLkJP8kyRWPEWgf2YPeflJRIcSRYuRYNi+myhN3ipXVwnFCGyw/fCNrV9G1:/JPIwmFPeflnIcSENT3iNKn8rhnu","tlshash":"0c9429c771d2f57a039f0269586b2006f2fd5ad7894a81a0e574cdce3c3899c87a3b6d","first_seen":"2025-08-07T11:28:59.873848Z","last_seen":"2025-08-07T11:28:59.873848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bifrostwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bifrostwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 14141\r\ncf-ray: 96b66dc5695b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"398181c8cd90bece903d2163dddeafef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uKS70L8meRwAWeuXLlsop9ECT%2BsNIIJxzwWbsD25Txs5yHGns6tChdwUd1pVsPogBABRadrxIxtPaLNjQ4K8RGEKSOrUY936W%2BmAxxVY81Td0MBFYwmZ7dUDRY%2Bj%2FBtRk3jTFCSE2dtUsjNVaOF4%2Fi535uyPLfwPRGPlvfxTWWkk%2BNohqQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1227\u0026min_rtt=789\u0026rtt_var=504\u0026sent=992\u0026recv=91\u0026lost=0\u0026retrans=0\u0026sent_bytes=1070523\u0026recv_bytes=11627\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=1977\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"68cabc51bea666e96c6c05c8b9a66f6c","sha1":"87d2b5bc383aea3d67ded2315968220563f58113","sha256":"fc9b91b9507d2b2cbede9c8406636511f5dc82ca650de9ac61bc6ad51bb6a01b","sha512":"c77a994b3af49554d98402729ef5fc2c25e68f39fab2f0cc8cf8490734dc393ed0b5ce6b0be422426efd673af63e6c61082b117ce4c94e626775bdd6df9a32fc","ssdeep":"384:AXBK28ICqRAVRIH1V9yuoVSQpJywJF9/0FSe7W:+qICiHD9sYQpJy29sg4W","tlshash":"c952c0b83f6016a298f9597b0c561d600af37b014ac842ada3c71d8f1523990e5f5fb7","first_seen":"2024-10-06T09:21:38.447439Z","last_seen":"2026-08-06T10:01:23.807397Z","times_seen":30,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/robinhoodwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/robinhoodwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7841\r\ncf-ray: 96b66dc60a5a56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c4cd98ecd9ea04148eddae69159d0ba3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Q9h0ahod3iwd51B%2FBVoZPtef%2F%2FMKPwdedwa8sNpnrFRqln7TwTt%2BU8GkUrlVh%2FGHeDI%2FQAOJ%2BoRKNG6M76HmK4KIC5PNMOIY024XUnS7SY07VkfXUnLT3mrdhLKcwWVD2%2F5jGjmc%2FfnBthmcu6wuyPoVfiMg7p0h67wbXDTIQeOEdUfjw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2144\u0026min_rtt=789\u0026rtt_var=799\u0026sent=1834\u0026recv=178\u0026lost=0\u0026retrans=0\u0026sent_bytes=2021187\u0026recv_bytes=43195\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2166\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"95f775805982449278d3961dbf77cce1","sha1":"3e6279102de44c778b9178091f096e96def3e9b2","sha256":"2816a4fdd8a4b545dd847211c29a7ea657fbad0bca1c190db4505fd6a1302692","sha512":"3426a3be220d59e6d07f4d07c55a96c50840372f7b278239088c18eaec1a5d804b5771a3be8d1980a71cbab64a3180222e8413d98747ab0093df2457154ad93b","ssdeep":"192:nSSZSVsEnVwAd4GcXpUNfehxtQP0aPa049:S427VwApatQsaPa049","tlshash":"29f1b058a1210cfb399d1576a948b0b036b5a367276fdfbfba0e695c10f3524fd22702","first_seen":"2025-02-26T16:32:21.380185Z","last_seen":"2026-08-06T10:01:23.804452Z","times_seen":29,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/tokenary.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/tokenary.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4838\r\ncf-ray: 96b66dc68b3c56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"14f6c49932b8e70e51563bed4a79198b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ionFL%2F8Pu5FLj7tqKwFLw3CwMlSZAHPjrhLgz7Sy6lcnmyf3B21%2F0RyRyGHHBHppQAa4Y8V%2FSqXMDcUozdUBBV0TlMePhc2k3y0QZ9SNM%2BgoAPl4xYdT55WLAm0%2FPLwCRGCwxm6PA1f8NWAvANNDuc6%2BWUG9WIGD8jXEHQ55v9kjXqEVDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1773\u0026min_rtt=789\u0026rtt_var=668\u0026sent=2278\u0026recv=203\u0026lost=0\u0026retrans=0\u0026sent_bytes=2521225\u0026recv_bytes=47486\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2255\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4838,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"3fd4369bbf41aa2eb083896e8523baba","sha1":"45d7fec158b7b33ea20a7aaef8443241c52a4a7c","sha256":"9a2afe96a1e23c9792c8e2a17307a3f79943abe4dbe3937f1d40ed3cd9158a24","sha512":"691d6ade2fa8970e3134db3447359f1e7993e7d1e59a4841eccb64363013d4ea39c966b31ae87aceda61b8511068bb9403eef0395a39a22888b198de06726b88","ssdeep":"96:KndUeVZ0u6pdehwApVnJVdkYdXDuFhlG+zn:KnP76pde2ApVnJ0YdXSblZb","tlshash":"f0a14b5e32afe128cc23df35044db16ebe2838b40625eb2c5d7c9591442b52a35ecd1d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.018207Z","times_seen":847,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:17:45 GMT\r\nexpires: Fri, 31 Jul 2026 17:17:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583825\r\nlast-modified: Wed, 28 May 2025 18:56:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39608, version 1.0","md5":"7edcfc856660cb38268d12020c19f321","sha1":"2681c51f50575a41e511d9466905216b29ed6c60","sha256":"96a874a36a161a53381e9c5b16dcc188a04da68d463130aaf505c0f08de38782","sha512":"ca7f075f61865b369cb7391113f48038648725b36c7c3b3578d910c0c154b5996788fb0fe56a2b4cb990e1ea54fd715d84d5ceedd539e3b98cb3ab3ab59487e9","ssdeep":"768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70","tlshash":"2003f103ad345b43a628cf7aa59d1b3a22fdc19e95ac18cc4f90181b30d2f780ed6b4d","first_seen":"2024-11-07T04:28:19.915413Z","last_seen":"2026-08-22T20:05:17.073347Z","times_seen":8542,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/modal.js","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /modal.js HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"214203fb70b7a35faf32dfaf41ccdd61\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pg5jVpBUiIGYqQdG0giVeGdPktg7rxiJo41la74ISR5BVxMXGUD%2BSLF03yPJBN6BxHiX9RJWbx7%2Bq%2BvJVyNie8vu%2BeG09HuBFOwYrqxrrvdXgiOkjph%2BrvC5696vgUbdClrK8tzGJmV9QsmPS%2FJvJRlKxjXZ0dKrqIzu6it%2BNWx9WEL4ew%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbada4356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4610\u0026min_rtt=1677\u0026rtt_var=2923\u0026sent=91\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=80096\u0026recv_bytes=6935\u0026delivery_rate=4694849\u0026cwnd=46800\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=316\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7939,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a452630597eaeae01c63a7bb150c13ec","sha1":"c640dd0a13d75abe84d66cc7dacd159bc3e35c8b","sha256":"8dda3467c0b81a66d0bd5071f2f7ab5f4c6e95c8ef2db3955e7058619db23407","sha512":"2b4772f4d1fc4cbf74133a871bc0b5407f5d795161f3b39bb5976a2b17eeedb42a3cb2f0d21e5be61028f20a6dbc377f7ed693fe8463a18f4f0788da7c826426","ssdeep":"192:yuBMopI+6Uz+qSpGJULr7FQniOiyiq6ieiidi3i3iFipqiSCoieivix9wiBNiRBy:yuwez+qN4XFQniOiHi7idi3i3iFipqiO","tlshash":"07f1dda99729073012db035e20575afb2d308d13930679a427af41e48a7dee75cb32fe","first_seen":"2025-04-28T11:20:09.957124Z","last_seen":"2025-08-07T11:28:59.880367Z","times_seen":7,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/responsive_styles.1724467665.css","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:06.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/responsive_styles.1724467665.css HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"146b416ec97c5dd955ae14260bb65ae4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FiEybSBVDlsMMAadiw20ZhRtBuLdat%2BYEu4rbI7CSM9ppi7SAGunvmRRPVCYc1TRFGK3NnoKhh9h5TDr1KfRmOdfd3tqBPlZ1LLPbq1m%2F5D6WUH4oArSKKBob56U%2Fr4o%2FYGsGR1XQHlo15dapBC6vUP8NSjl5r4Kd0i8AYJArfBmQx6LNw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b66dbafa6b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2683\u0026min_rtt=1265\u0026rtt_var=1208\u0026sent=286\u0026recv=37\u0026lost=0\u0026retrans=0\u0026sent_bytes=291929\u0026recv_bytes=7470\u0026delivery_rate=17411699\u0026cwnd=140400\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=341\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315207,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (788)","md5":"d4f38c3bb804165ab7f13c4a0b8f2b95","sha1":"b842c7be10dbd897727ce70d309ee76c8ae7600a","sha256":"c354ca0881c26fa9eb3c91a6253057fc6a204ced75fdcea03a05ce59d7f194ce","sha512":"78e627d2915dbb7fef6bc3df94bcbfbc2873a306dd4913f7ba499c3614a960891db97cdfce944113913ea069d7c00f90d4240079ba9e4d81e7d61de99e742a2c","ssdeep":"6144:C5I/OtPFTZ6XO6O999tnnTzvIfrQ5bx2h/KS/pk5D5r5G5Q5r8GtrxEUt9ewivI/:C5I/OtPFTZ6XO6O999tnnTzvIfrQ5bxh","tlshash":"4f6452d4252036b4b1a16a582183edc2bf5c6bc7d82bdca5728210e85b54cdf36f3e97","first_seen":"2025-05-15T08:55:12.004803Z","last_seen":"2025-12-25T03:49:01.039251Z","times_seen":44,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584103\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":1561,"timings":{"blocked":741,"dns":0,"connect":18,"send":0,"wait":14,"receive":5,"ssl":769},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/safepalwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/safepalwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8518\r\ncf-ray: 96b66dc5da1656a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ba41e9db4588f6563dbdb864f357a9ce\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X7siJDzutbUsbeOJHv4a8iU%2ByOEpGWyvU3G%2FuPv0vqkHutf1lkL%2FCystKHtMPEpKsJE5H3rE3aFpkouV1v6xjmVjKyuCENuHN85FOUJ23R3XtzBll%2BzdoT81Y9M%2FCOLkGEnWLfMqEeRgHfYlrFkfU35E4r4tw%2FLL5HBnfFA1wHrCjaH6YQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2310\u0026min_rtt=789\u0026rtt_var=1394\u0026sent=1142\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=1233745\u0026recv_bytes=24876\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2062\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8518,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"829d3341b62d2e49a243b428254e4073","sha1":"a60e30fafc8d8fbc28238ef81577673c4f1e7a58","sha256":"df21b51db14a9aad17a3cec946a0dc363e8b0762011b5564c879f92b00b92025","sha512":"899e9f2712dc60652f8ecfa5566a3e1b93a77f2c83c8892eee4f113c5d9ee5fb8d7cdbd5378d5352f2dbfa8c9636dfef68f312ea2622f9d306fdea0d424a2a66","ssdeep":"192:L5fklF4F4AAs63sfOUK7PrH5ggU91a0kvLyCA:d88HYcvK7PrXU91a0kun","tlshash":"72027ec786e144a0ef110a75d5cf3b63a74109e81bf569fb9281cd889c37c3eb6d0694","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-06T10:01:23.796666Z","times_seen":83,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/solacewallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/solacewallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 14337\r\ncf-ray: 96b66dc68b5b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0b8da742e4255b03f3c7b118a44c5655\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L8vcbNGTJI0fgTESd3U9TETwGkInQDE7hIIAH7udR7S%2B1147spWuiJVz9Jfuoj6855ErmOQXH2HXGKEDrOslc38Mh30ZASUv0iCjLofuO64Q3IPS5WCOsI5AKM08%2B2%2FLyx4TmmQtiUFrsqS8BYl2%2B%2BNY9pRS7bU9w5FG%2FjDOCH0ZIiPOIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2246\u0026min_rtt=789\u0026rtt_var=1269\u0026sent=2513\u0026recv=219\u0026lost=0\u0026retrans=0\u0026sent_bytes=2774533\u0026recv_bytes=48226\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2317\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14337,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"b4d996e7e8bcb1baa984870b6fd5af09","sha1":"0b825c2fc440dcbacf1a756c74e64aae18401e17","sha256":"3550a9f964810bb17ac2a165f78c9c42c45f1a9190868d339325cdb82e1a8977","sha512":"79bef14008f442cc865e6d6d0d69d2051b775de0495878b4bf3f6d7dfaa1474f6985e0968991ab56cb3854a0686046007f76e9248fac115eaad9e9b87dd56453","ssdeep":"384:sXJVAge1QTzcXXXXXXFpizBnCYPhKhNnKYJR:AApQ4izg40nKYT","tlshash":"2752af217a977180c968a7ba9c459f54acb20e6069a5b2cff8c5a0348f7c5c06cd54fd","first_seen":"2025-02-26T16:32:21.430245Z","last_seen":"2026-08-06T10:01:23.825696Z","times_seen":28,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/hashpackwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/hashpackwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 22930\r\ncf-ray: 96b66dc5c9fb56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0bec115c974afdc638223084fa8d9509\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KBweUFPaymZxNmrI5u%2Fv1geiwZH1cigCW%2BWcQ34iHL15BgQCM9TPw%2FnxhYB6ntj1Dv49dDhH9JmhUG%2FcM%2FWwj68YxzuEk%2BNwnC2guwvyFrCUG3E4n4wQExzBVBPLNFrrGNEQDh3tlon9nOQwMuBqn0P8czf0kg9XlNHR9nsEohTL%2BRAFjg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1909\u0026min_rtt=789\u0026rtt_var=853\u0026sent=1206\u0026recv=137\u0026lost=0\u0026retrans=0\u0026sent_bytes=1299073\u0026recv_bytes=29854\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2083\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22930,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0e121fa973b0f89491bfa41d9c57b33a","sha1":"474cf002a8e36c44949da4c9157ab9fcfd86af45","sha256":"30d140803d613a1338d5173681d5e1c460afd8d2a44c50104ba1488c0b581003","sha512":"16be6e67391c4d45e44a4bba3049e9a0b5aa77045bb78e0e8c3fef9f0433b7fcd6c68d465357e32a5e9441cedf24c7d53441cc64ad4a69bcc5a9ba29ab7cb4ba","ssdeep":"384:gdhMFFZ44ynrqizpjU7y/m5Y3pNN4xRsIaaZ2CVl5BxigKmMWu1AOpKYC1009pz:gdhMq4ofnegNWRS1CV7vK3WyVZC1JTz","tlshash":"17a2d11684905ed590bb0e5d38f0d87912e54b3d768c0586df324c60faf5e669dc2afc","first_seen":"2025-02-26T16:32:21.362275Z","last_seen":"2026-08-06T10:01:23.803812Z","times_seen":29,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/trustwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/trustwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6633\r\ncf-ray: 96b66dc62a9d56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"336764025dbf51b0c7b9802361cf3021\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=80rKmEnziKsBxm%2FW14%2BAabUs2ZfyfCwjEqByhxfcEz7R%2BceiQjsi0mf76991UuQL4aM%2BVy%2BPqYbVL5yFCe9m%2BTq0LllQgmKX%2B2YJ9iq3L05YiQbs0Bq9X8woVNNwCMV2U3F%2FLwnMYDVZnHciWNiIEC7i%2BgYfnYSAjwM0OSWCXXIHMOyVhg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1799\u0026min_rtt=789\u0026rtt_var=655\u0026sent=1490\u0026recv=165\u0026lost=0\u0026retrans=0\u0026sent_bytes=1622415\u0026recv_bytes=37393\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2127\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6633,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"f15670e2fa664790560becb05302a51c","sha1":"836d223713db4da5ef9ac8b6caec385f06353e89","sha256":"521f3ca5ed42fce36af921fb2764ad5c75760b434563d11d960270a8bef55c6f","sha512":"8c075bcce1435d37d89a091faa4e1633f6c5d2fff6161e5ce530d71b10a837473ee04a2f39d0414c7d59c0b9f72d8df8fc5d2cfffb30244c3eb91c72ad7f994e","ssdeep":"96:KdRNpQK9Icf5SJRiL8ylpJq1eRuGTQhlLCFuP+QzIwPMFMbEIp:Kd3pQK9IchSJYL8ylLqQ/TCOgPCo","tlshash":"dbd18db43f431800c9e6fa705d6750672d9ba78894da689fe16d16af362ca11be3c831","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.031027Z","times_seen":720,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/morixwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/morixwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 84350\r\ncf-ray: 96b66dc63aaa56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"700aa94c71b7090a4bb7aaf62eb5e43b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LBgygpTW9msts9shaza%2Bh89AkhHt9Er9DLZrH62d0wgUAK73Y4X%2Fv0Oq6sQrAG%2F6fwVWexcTq2tv4V8PEFx1ddS7g15RadH7ZMIYYedcWd6T9aB1eHTfATdMp9CBhnfA%2FWWfYBJ%2BnQ0xUkKWuc2dxkW%2BbwAIzIfdj9QkT78sN%2BsjaSGhHw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2581\u0026min_rtt=789\u0026rtt_var=1472\u0026sent=1847\u0026recv=179\u0026lost=0\u0026retrans=0\u0026sent_bytes=2035689\u0026recv_bytes=43241\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2169\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"aa7d607cf9ad52afeb3b7c83e5f34eba","sha1":"b6cd74f86e67cde7e138b707f600a8bbc79acafb","sha256":"3105aa83d6e1f0bb4cf7181013fc76f72d495dcd9e6413b3cda440add06adddc","sha512":"67f93d26000beb4dd1197f71b8e794f1745a5a42d6ac3772a30510d1ddd45ed007f7b0e1cb193a7ccddabc10753ed6f3d5b0e98c8def476870e8bd12d7e84e3c","ssdeep":"1536:T1yKhMjGiR9HaJa7PU3x4PfgaKxPmCmMiSnusMJvvqGhExWujO9s2IqppAAAAAA2:s5S+mar2OCgSnusMEcujO9sBqpm","tlshash":"8b83131a6798cf151dd7764bd582a3dee713c3fccd831385489a64622ab9123b03d4de","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.744753Z","times_seen":404,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/index_files/686dc7cdb02d201715283655_newgrove-01_edited.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /index_files/686dc7cdb02d201715283655_newgrove-01_edited.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 18365\r\ncf-ray: 96b66dca695b56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a70800780a8810c56aeec8e225a38a1f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2siX3Mlk3CpxgmGx%2FHXJZZAq7dqjxyD5MRYnQQKQcTTMFEvrbVTRW7Rl%2BKbfSRO2UF1fHktcBuAkFRlUTJWCPpPZyzxpcHgdtH1aXuKOEp%2FW9dHUllbilkogwGzA5Z3Xes897hj7PqLDU45Lr3WOWNzhZudMq28jty2kAMhRjz9H34eOcg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2987\u0026min_rtt=789\u0026rtt_var=2020\u0026sent=2809\u0026recv=232\u0026lost=0\u0026retrans=0\u0026sent_bytes=3097072\u0026recv_bytes=50098\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2807\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a893ec1ee9203caeb2f0230596df1dc4","sha1":"49568f80c34df98557addefe2fa574620c9d19c9","sha256":"2971bf9798f1a582e56a517e1a14baba22d163dea2ee8d2522c29610b1fb3e0a","sha512":"2149ceebe1aac829f4711d4497231009702acc1bb89a53aa81e1b1f37023aaea536fc8bd275ba6d5283d759432f7e940e48e4db57f300057880b33b193ca5c52","ssdeep":"384:zGx/y2SHkFBEAd3P+I1o1Fse8VqXj1UouEDZ5z8mCalkh9CjspVOWBzFzFv1f0:CRy2qQBE6P+Im1meRUouq8qQMspxzH1M","tlshash":"2f82e0f30d7c01b5001cbb9b3669b26f30c053bb62aa1626d894e57841059bc22a6f7f","first_seen":"2025-08-07T11:28:59.888852Z","last_seen":"2025-08-07T11:28:59.888852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:10.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584104\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/talkenwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/talkenwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7091\r\ncf-ray: 96b66dc6dbd056a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"cb2aeba011e5d970f8e1a904d05dc2ab\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xRP60ybgo2tj%2BV8eiGra8iNE9rkhyguO9m06Y2F6XrgYxPuAjf%2BekCl%2FP%2FqciCtX14nkQPzlzkWScEgZVrziUECvuqnQPoLCKtQDpSqAVplYvOMdWfOw9GU8xa%2F6nj9oZhW1c5AjEvCSaQtInuV1lPEeqewCFEnjhWgD7BjvpgoZLC8ITQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1567\u0026min_rtt=789\u0026rtt_var=465\u0026sent=2339\u0026recv=211\u0026lost=0\u0026retrans=0\u0026sent_bytes=2583592\u0026recv_bytes=47860\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2285\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7091,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8d18e470b85fcdacd479aed6c7cdb16b","sha1":"7ba69fb3a9de45c015502158bd12ef6e956a500e","sha256":"dc5c2220234d9d9b75d41400daa8619b4b248f08586d9c04858d43f5c81b2e8f","sha512":"b3b4dca612bbeff4f66e2b2dba378d623ab80f4737d570d73b4472a5ef5867f79abc8a86b4d4ef7d1723b2c2a18b524e8a993a4d08da9a7913cf7514cf3dd443","ssdeep":"192:zILJKEz0FaZ65bU02jrZZkpuABROEwlZMjCul75:yKE/Z6IXgERMjJ75","tlshash":"9be18e38b58f3827d954c6310663ccd6ab726c3350a2f50d9672181fbd772a47a4617a","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-20T19:34:32.929597Z","times_seen":703,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/o3wallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/o3wallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9058\r\ncf-ray: 96b66dc70c0a56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b2b053044e54a4a7b1fb11d00db3a724\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A7n%2FszvViKsIeACPEGH%2Fsu7lefMlWc6oLAlS%2BudFGVkj5bnBAAkMpMsJnNxlbVMWxJnvzDjL8lvwOvETP9znp5rFhpdcapa%2FeLA45xNSDuvpvS1OoU4HIXWeQwZtFR3dsge3FkoUlFi973UPmPGLJJBQJTTHSt3OsauWBzCjcUg01iuGzQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1960\u0026min_rtt=789\u0026rtt_var=930\u0026sent=2484\u0026recv=218\u0026lost=0\u0026retrans=0\u0026sent_bytes=2741756\u0026recv_bytes=48180\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2316\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9058,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"c68bcc627461911030befc3d290f7342","sha1":"58e37e3584323f974b8c07f30c5dc1ae2e21b4ac","sha256":"9692fb2e6ea236083a898403714cbacf006d60f62b21a470d0bf99a96f8937ed","sha512":"9dffd9e3d409fad8538925609fd6d881a1c72df7428660d589049abb116b8f4eae58a005b4d4aa36993af97412461d477fcd7c00f2e123314e2e43f89227a04b","ssdeep":"192:0eFOTveSn/SJzoiCKNzr0d0joeSOrWefrynMBtHS3:0j2Sn/aUoprS4oeSJfMBtHQ","tlshash":"8b129f47ba444d87c863effc40516cf36a5626e95a37629e390a01ef1ff8d0a9a03155","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.739906Z","times_seen":577,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/defiant.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/defiant.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 10771\r\ncf-ray: 96b66dc70c1956a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"334af3001ce81ac76f5c1176193781cd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uWN5iQUxpmvUUIqJCbnp9cOMn28OSaFct68LJ0JB1s%2Fw5N0Cf3vxbs6iImGhz34o3rZYsqYEaXsYFjOFY6%2FW%2BMC17W3sI3rfsTtJDhIFGXwsPh8vZ0j2KuDjn7qltTqb72jbYDy1VwxWCx%2F6bc95bk7uCE5SAvBAE5fatTjZ1BR9GND%2FOA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2441\u0026min_rtt=789\u0026rtt_var=735\u0026sent=2758\u0026recv=223\u0026lost=0\u0026retrans=0\u0026sent_bytes=3051356\u0026recv_bytes=48412\u0026delivery_rate=18652340\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2357\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10771,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"a4fdc02452b1eab67ae23915d2ede36d","sha1":"3e419ca025ec2e08e87701ad47a1b3081336a003","sha256":"9e44c6a82a2679293752269bd4a45fad12f221e0b176d0efba81245138684e2a","sha512":"16b8c26b6fb737610f2e030315e42106e1ac00b952557775d409d573e481a352d19a9362ab45928692990f421d71576b634408dc203b3180c60c3b529bcbdc79","ssdeep":"192:+VAzKgPqaltGy3gXHcXKNJ6VaXFChIDEG17xFf4M8m+CFril9kqGCKu5yEzoJGUy:+VyVJXGy3gXxCVa4Gn1tFwDCxil9gCKK","tlshash":"e4229ec7b2104b44eb87df3f2dfb94c2e274c225c4b1856d57ca0cb817e08b69d215aa","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-08-20T19:34:32.86485Z","times_seen":413,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 17:13:06 GMT\r\nexpires: Fri, 31 Jul 2026 17:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584103\r\nlast-modified: Wed, 28 May 2025 18:51:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-08-22T19:34:20.096407Z","times_seen":41486,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":636,"dns":1,"connect":14,"send":0,"wait":15,"receive":17,"ssl":668},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/bitgetwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/bitgetwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 126587\r\ncf-ray: 96b66dc60a5756a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e60ae76d894b2ac8a9f29b8c50f462a1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hMMT74TfAEET847JXr%2BBqJP5MA0DJ8SwTQ5vz2BtsAm8fPb18x0XeJbYnFK3jzqrIRR%2Fy4XSYGHSKbbk%2FYcWPeQXPtyxhLZw2v1FySTOdTfijaxQtPatmZnnWpTm8l7Pe%2F0lYwP8bZxcJlMro%2FWFCmZYF4sUcbYKU%2BRmri00Al5%2FgE%2BaMA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1648\u0026min_rtt=789\u0026rtt_var=762\u0026sent=1245\u0026recv=147\u0026lost=0\u0026retrans=0\u0026sent_bytes=1334434\u0026recv_bytes=32588\u0026delivery_rate=24919075\u0026cwnd=216000\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2097\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"cba7d2c7d5b7500ba7b2da925d0225f6","sha1":"79af64be7a938039ee179f8b3cd9ce2a30867ae6","sha256":"ba5c2a5ac31177ae33aa47ad1a35d8bc9cdd3e02f7d46bd745088c53236b95ef","sha512":"5dc1476041a18833e33d1d73795436b3a775954d65b486826511a24166ba9a5b6a5ce85416de50f364746610bc84534f56c7efe7424bd383a39fab3aa2451023","ssdeep":"1536:DuB0Tr9AM/wQALwxzaWK4Tt3Ha/NYOOj7Hp1GZTf7fi0uIfMUOHfX3US5nOETnCw:csrKM/5AmzdPK/KOuwRK3QErCbtGvf","tlshash":"26c323f34410f2d18b2b45ee44d96fb5ed472f559f114f02193ace6f3a6c97b240a8a2","first_seen":"2024-02-05T14:32:15Z","last_seen":"2026-08-06T10:01:23.818629Z","times_seen":80,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/enjinwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/enjinwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 74574\r\ncf-ray: 96b66dc60a7a56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"101a79e2664f4e6201632bc2497a24fa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CXEkafGbE7nd2YdOr5JipoFovKW7TUQte%2FbYrUIvBE8002vsjsdXY2oa9kl5mJ8tLybqLmwtPN%2BkfssGQxXhuadNh5oGEH4QZNusczMrDb%2Fn6J2EwY5mg%2B8PT5TyDnnrHLMEH%2FtGQ9s1o7KTXz7tmB0qPIADiFbeNjZQlCPIK3vuEwXQdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1927\u0026min_rtt=789\u0026rtt_var=747\u0026sent=1566\u0026recv=169\u0026lost=0\u0026retrans=0\u0026sent_bytes=1712117\u0026recv_bytes=39010\u0026delivery_rate=24919075\u0026cwnd=257700\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2137\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"53a2bfe64b8a094d8fb5e02f3c01a2e9","sha1":"5472de19eaa563af48779a330c97c5c7942cfb15","sha256":"3c79b41c2db51051950ad63d21bd29dd37054ea909f4e1af8c637e1bd4e8b381","sha512":"37f826a3f31b8010246148d5d93955633c3d12334007bb4da3006fdf02f12268499fe2d88d24cd7a6a4a321c074976875bbf5c721cc893dba8ea3ed027448067","ssdeep":"1536:x+s5bo7nSdbkPsIuuIpeCpcqMm6OGbDzibEw2IjguDK+TIhny6o2:x+o+nSdbkPs9uIp/pcqlGbDzibEwpguU","tlshash":"b473d0b5ce26cca1c2600a3cb8772fc1ba7062fdc82d1fd9936751356e86ba5b0549cd","first_seen":"2024-05-31T07:02:01Z","last_seen":"2026-08-18T13:52:04.334625Z","times_seen":56,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/eidoo.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/eidoo.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 14809\r\ncf-ray: 96b66dc65ae256a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0dbc9f723600dfedf7c08876af0d3efe\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FbEZnctcv7klB24pxQWEkGAvcHwi6V4acX8yxFYALlwW3kH1%2BrUdB8v%2Ffb%2Bs6KPfHZlcn3TXD%2BTvcM4zBAbw4ohRDJgaLrZv8BcqY20bsDvRPKfRU26rqCCcy%2F6Ls3DnTxN3sCtTVvZNrG3KaQD3SacbBv%2BaotgDeK2XyU0dqiS1HCWQ2g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2144\u0026min_rtt=789\u0026rtt_var=799\u0026sent=1834\u0026recv=178\u0026lost=0\u0026retrans=0\u0026sent_bytes=2021187\u0026recv_bytes=43195\u0026delivery_rate=12816937\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2166\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14809,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"2eee070ed91a8e2515826a29f7a862e4","sha1":"2a789d49fbfa9ee93f26a403299cc3c3a9135d95","sha256":"b17ff4a4c72d030c1db9ee2c6a299c8a5adf5b9d90b96709280249758754c7f7","sha512":"4c7cd72988abe550a7df23e0436f4bed1ecefd29983fba749feb1c609ec9bf9dea088163cdaccd9c6df0e58263978f5b21eefa43a405fee9ef2cf65f91fa07da","ssdeep":"384:Fd/cmmBL1ALrRuS0G7m3f810B3VjKxe0a1:FGpeLrkS1q3f810Bsm","tlshash":"19624cc1bc524b698ebe4bf20dea920693600439eef37e7c1d136de9d642d5e8607709","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-08-13T23:12:13.053962Z","times_seen":682,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/images/foxwallet.png","fqdn":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","domain":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:08.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 15:02:15 GMT","end":"Sat, 25 Oct 2025 16:00:30 GMT"},"fingerprint":{"sha1":"4C:E6:69:81:E4:A5:26:70:BE:82:82:22:9B:74:9E:BC:9F:ED:5C:34","sha256":"EE:C5:E8:DF:3F:9E:D7:E2:3D:D8:67:29:B1:43:F1:CE:79:FC:A3:F2:CE:08:2B:9D:0F:8E:5E:12:5F:0E:C5:2A"}}},"request":{"raw":"GET /images/foxwallet.png HTTP/1.1\r\nHost: ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 91579\r\ncf-ray: 96b66dc67b1a56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"04aeafbe18d74514178dc887714766b1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=90aXuaFD1%2Fvj2S2U%2Fiaq2kR9m5Mu469cLMmj48xAzoEZ8J1aE4MGWDI2Hbj3w4OI7qv%2BjT6gtYtFXxijADuIblqrDMELt6tSeC27WhzbU%2BfcvVkPnwCeWcQREtrx9eCkECWJVq2EO2OsZwwg3TCOyrHJ3R%2Bb8AUheuyLabeseP%2Bd47%2FPbw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1981\u0026min_rtt=789\u0026rtt_var=738\u0026sent=2105\u0026recv=196\u0026lost=0\u0026retrans=0\u0026sent_bytes=2324339\u0026recv_bytes=47157\u0026delivery_rate=15569703\u0026cwnd=293100\u0026unsent_bytes=0\u0026cid=1818daddc96d3f62\u0026ts=2214\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"17704a74f323a86313878e334f18a7fd","sha1":"c23c458bf7370cdbf5fb8996736b295ef7af016d","sha256":"787e07e6380defe658ac44434e72a67f5cf287a8b32c143481f1a270d9dc9646","sha512":"f567abbf3f0d0be966c9da327b454d621d10434a39fc9a4025078ec89de6eb46797c342218e1e0fa5d0f0a9bc53c572ec589f5235ecb6dff715a17f13fdd64e9","ssdeep":"1536:DCBPfcdvHX5XKJZBiVdj39JlKPkaGHzSUmG6wSsnFj7ewWlNfKouARrxfj0q:Dbd0bBiXDlKcaG2UmCzFO15KouAJxfj9","tlshash":"26930276d5c6bf35e46beafa4ef58f4aec9821020710c1d15b0758a730b801d06f2ead","first_seen":"2025-02-26T16:32:21.420864Z","last_seen":"2026-08-06T10:01:23.786968Z","times_seen":28,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/61afdd1ecc1aaf78e3b2393c/61afdd1fcc1aaf1ac6b23969_menu-nav.json","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/","date":"2025-08-07T11:28:09.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 14:31:51 GMT","end":"Fri, 12 Sep 2025 15:31:45 GMT"},"fingerprint":{"sha1":"79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97","sha256":"B0:F4:38:20:8A:82:7D:D2:71:AC:A5:B3:29:8F:68:DF:53:75:5B:DB:E9:C5:44:81:33:2F:EB:C9:60:1E:CE:7E"}}},"request":{"raw":"GET /61afdd1ecc1aaf78e3b2393c/61afdd1fcc1aaf1ac6b23969_menu-nav.json HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev/\r\nOrigin: https://ewougyihoshobdsjndsjandshdsahrewrewrewre.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 11:28:09 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\nx-amz-id-2: vMXYgqEerLWlRay1btc0fcMfOrBCFdQE1PcOAL0Ljb0cuwC0XsvSsP7mZDfFnD8MoWqyHwNgphY=\r\nx-amz-request-id: QM4KJQWZN6ZX5X20\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 07 Dec 2021 22:16:00 GMT\r\netag: W/\"62283913c195cf3bcf50860dd1bcb8b0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: CN0SSieBHZaScP9N_YP2v7KW7Myu3mRo\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96b66dcd682656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7621,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62283913c195cf3bcf50860dd1bcb8b0","sha1":"a46e7ef226b796bd68044735bfb81ae2268fa054","sha256":"07526484281d3d0f81f439fe386563a1782196975c45bffd65d3e29a609331be","sha512":"8652efc4f4e3ccad460e60c3eaa6407b1682bb16a6d3fa064ac49e5cbf58480458c94063bfeb59a20e1943156a34d436c23c7b21382d76f085e1b95be25a1db8","ssdeep":"192:Ok5FtYNv+Z7u5FtYNv+S5FCvhCvEor/Dx5FCvhCvEu:jwKQyh1QyB","tlshash":"61f17bd60a7142ecda1578809bc374d2cfd489856fc609b7aeb76c254fd57ae2302f22","first_seen":"2025-01-22T02:10:12.588762Z","last_seen":"2026-05-05T13:32:52.850734Z","times_seen":13,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}