{"report_id":"33c8a16e-510c-45e4-86d3-71a6da895cdb","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-03-15T04:55:55Z","url":{"schema":"https","addr":"xtokenfin.com/","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"ip":{"addr":"104.21.38.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xtokenfin.com/","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"title":"X Token — The Future of Digital Finance","dom":{"size":93895,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (452)","md5":"9917ae01d2bacd4bdf7e937561816e84","sha1":"81447d412203fc473ae51c5109e967c0469060d4","sha256":"e0620047473fa0e11089be7857e5f995c6f6c073c7c74ef68c7fbd639bedf0f3","sha512":"fd409d8ff55d8590c0e27a17d9b71aeb5876fe918cfc823bb39bc718cc85a836311ad3d5d1822d9fb6b0ee0a7e2eaaf79bba4d0b1fda3142209b5b84bdcdd52b","ssdeep":"1536:5/ACEfSQJXTwIIr3bZYIB0X49S/TvRW9SSSv69SC5v89S7mvA9Svmv7ufcqOUiV/:5wRTB8BEc","tlshash":"9f93c67071b4613ab067d4d1b5e42baf35a0e607dd1b4358baac42a58fc7fe29e2314c","dom_hash":"domhash0c736d79f85405768d1a744f0caededc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xtokenfin.com/","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"ip":{"addr":"104.21.38.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-19T04:55:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-15","alert":"Detects file containing Telegram Bot API","trigger":"xtokenfin.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"download.logo.wine","ip":{"addr":"172.67.207.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-03","domain_rank":699019,"first_seen":"2020-03-10T14:35:02Z","last_seen":"2026-03-10T18:26:25.617574Z","alert_count":0,"request_count":4,"received_data":138652,"sent_data":1865,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xtokenfin.com","ip":{"addr":"104.21.38.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":152909,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"freepnglogo.com","ip":{"addr":"108.157.229.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-07-10","domain_rank":548830,"first_seen":"2023-03-17T16:26:38Z","last_seen":"2026-02-28T00:21:08.420373Z","alert_count":0,"request_count":4,"received_data":116862,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":9,"received_data":294450,"sent_data":4977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-03-09T08:50:13.828413Z","alert_count":0,"request_count":1,"received_data":9320,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.scotsman.com","ip":{"addr":"172.64.152.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-11-14","domain_rank":112662,"first_seen":"2012-05-30T05:06:01Z","last_seen":"2025-08-22T00:27:15.454006Z","alert_count":0,"request_count":1,"received_data":104806,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":16559,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"xtokenfin.com/","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"ip":{"addr":"104.21.38.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"9f01af7932c34d9bddfa41d6bf8a090a","sha1":"30a1c70b8fa2e2b240fe62730e838cb35365ff27","sha256":"7e9f9027e95c987249d6bfb859952d1e4f897c4c1977bff983347db7e09edc70","sha512":"c64fc003c34cdd735bd40fba1545338a434abe32172e2cac4521a887c0aeda801d0bb86e2cb57143767a8480aa45c58c8746655cf42fce51b5c47c11a49eb80a","size":6638,"token":"8236729016:AAHRafLCWjE8AaGGPePf-nNBYZm5or3MLvs","is_revoked":false,"bot":{"token":"8236729016:AAHRafLCWjE8AaGGPePf-nNBYZm5or3MLvs","user_id":"8236729016","username":"devosys_bot","first_name":"devosys_bot","last_name":"","chat":{"chat_id":"-1003742608140","title":"Leads dev | Otstuk","type":"supergroup","bot_is":"member","total_users":6,"active_members":null,"admins":[{"user_id":8484340813,"username":"devosys","first_name":"devosys","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"xtokenfin.com/","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"ip":{"addr":"104.21.38.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f01af7932c34d9bddfa41d6bf8a090a","sha1":"30a1c70b8fa2e2b240fe62730e838cb35365ff27","sha256":"7e9f9027e95c987249d6bfb859952d1e4f897c4c1977bff983347db7e09edc70","sha512":"c64fc003c34cdd735bd40fba1545338a434abe32172e2cac4521a887c0aeda801d0bb86e2cb57143767a8480aa45c58c8746655cf42fce51b5c47c11a49eb80a","ssdeep":"96:7AjKb7/X2GsVHtifwIMgQA/uKLjGMFPJKbQUBkj7Szj7iSAoh+XM9WbFvE:7AjM/5OAH32Y6APJg5UGIoh+AWbFM","tlshash":"40d152a733ed253649fb6afb209363f9353180447c82e161196c88195dc0fd06977ddb","size":6638,"data":"","first_seen":"2026-03-15T04:56:05.129744Z","last_seen":"2026-03-15T05:09:09.216094Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-15","alert":"Detects file containing Telegram Bot API","trigger":"xtokenfin.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"download.logo.wine/logo/Bitcoin/Bitcoin-Logo.wine.png","fqdn":"download.logo.wine","domain":"logo.wine","tld":"wine"},"ip":{"addr":"172.67.207.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logo.wine","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 09:20:03 GMT","end":"Thu, 16 Apr 2026 10:17:48 GMT"},"fingerprint":{"sha1":"1D:CF:4C:45:1E:BB:81:DE:71:36:A6:A7:00:86:19:EC:BD:C6:FC:7B","sha256":"64:9C:5F:93:C8:21:AD:B8:9B:39:4A:F6:E5:CA:B6:12:E7:B7:DA:50:50:C1:A8:F2:9C:84:B5:98:EB:C7:77:F3"}}},"request":{"raw":"GET /logo/Bitcoin/Bitcoin-Logo.wine.png HTTP/1.1\r\nHost: download.logo.wine\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 39572\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6994D008838A683332957B35\r\naccept-ranges: bytes\r\netag: \"B11D84DC856EC4C11E09C6A887E56CD0\"\r\nlast-modified: Wed, 18 Aug 2021 15:41:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11600062256157190345\r\nx-oss-storage-class: Standard\r\ncontent-md5: sR2E3IVuxMEeCcaoh+Vs0A==\r\nx-oss-server-time: 24\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaQiGX9DEOB5Fz%2B7Nlw3KcSKm9auEE5y3XkDgq0qsW8TymKfuMKGnSxs1wn%2BwK1css5h0ZqdkKSTnOIpH%2BQgy7IIP3MjB4PcfxnyDMyqPCKwjw%3D%3D\"}]}\r\ncf-ray: 9dc8ed33de04a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"b11d84dc856ec4c11e09c6a887e56cd0","sha1":"c7ef494db37ea750a1e17a59b3f55b5850d62b2b","sha256":"2de9c673cea8ff2f3c0dc012230a045463297251d85039ef88f948a3912fe043","sha512":"cba282ad82300734250886575374674a644f872e645d89ce73663f7d9abbcf2709cb97925a9f4cc4cef4fb27ebac32c249c0f49ef760a063d30714666ee00843","ssdeep":"768:HZ5KsRB5zIleagutKZJbsqOfP3UIIYmwC4jxN87pVkPsa3pb9V0dp:HZ5KcB5EQbwqOnkIflCejYpSsWpb9V0D","tlshash":"d103e0eff8472771f57202328526851cad2953d1ab893acd03ac14f185b0ca97dfa5b2","first_seen":"2024-12-28T11:37:25.211486Z","last_seen":"2026-06-09T15:44:08.264191Z","times_seen":46,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":8,"dns":4,"connect":1,"send":0,"wait":231,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtokenfin.com/favicon.ico","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"ip":{"addr":"104.21.38.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtokenfin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:32:02 GMT","end":"Mon, 08 Jun 2026 08:32:01 GMT"},"fingerprint":{"sha1":"CD:B2:AC:F4:B2:12:3C:9C:37:32:7C:92:BE:A4:EA:58:94:98:87:BD","sha256":"CE:4F:A2:A2:89:CE:D4:A4:65:B5:63:AA:A6:4A:CA:B3:E8:79:1D:8A:89:BC:0F:2F:B6:F1:98:9B:21:1B:B4:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xtokenfin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:55:34 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLO0roGemVYMudn%2B7H%2Bw5sWl%2BFv9Mm1yYWmzQczplwR3%2FMxhG3JLloSnpMEdAPciYwiDGuf59JlOpo4WmfzRSubSZV1YHDFTu4rpWMU%3D\"}]}\r\ncf-ray: 9dc8ed37285823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-07-23T20:10:44.609879Z","times_seen":13330,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freepnglogo.com/images/all_img/1719936102tesla-logo.png","fqdn":"freepnglogo.com","domain":"freepnglogo.com","tld":"com"},"ip":{"addr":"108.157.229.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freepnglogo.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Mon, 14 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:AC:FA:FE:F2:DB:D9:8A:35:F2:7A:43:AB:53:8C:8E:4C:CF:F5:AD","sha256":"3B:E3:02:1E:BD:2F:CA:6E:29:F3:93:08:36:F4:4C:99:16:A9:00:05:E6:C7:A4:4A:FA:F4:77:B3:2E:CF:19:B1"}}},"request":{"raw":"GET /images/all_img/1719936102tesla-logo.png HTTP/1.1\r\nHost: freepnglogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 6160\r\ndate: Sat, 28 Jun 2025 02:36:46 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Sat, 01 Mar 2025 22:52:32 GMT\r\netag: \"53cbffc97fa3f330a79c4728d6d853b2\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: NnbYw6D92EwNyiYTcv2LAhWr60YMTGgjPU_Zht8N8m2ISO6hQWldUA==\r\nage: 22472328\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 319, 8-bit colormap, non-interlaced","md5":"53cbffc97fa3f330a79c4728d6d853b2","sha1":"766ec5a3d3ad8b84b9166e9ad087149d27ec3be3","sha256":"b3e44c8123a36370edfd79d57cbfb845cb328c3d8b2d2c2730c1053054ffe7f5","sha512":"32fb21aed9e15e9ab06b0960fc231ed922be58a39e42555368eaf6800dfb7fe9aa3071606d43576fd694eefb470b68271c80f5fd70bf9a3c63420050f04490b7","ssdeep":"96:dsM8s+MaTbS75K4HdVnygpFOEIQG/upbBqOS0dgggQh5c08dt/qr:a1DbUs0F0QQupbBkYgggkK0Os","tlshash":"a5d13cffe00647f4c9509837e27eda3819bbabb4cd63964652b2b826612d3c30647407","first_seen":"2024-12-28T11:37:25.234566Z","last_seen":"2026-06-09T15:44:08.225228Z","times_seen":41,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"download.logo.wine/logo/JPMorgan_Chase/JPMorgan_Chase-Logo.wine.png","fqdn":"download.logo.wine","domain":"logo.wine","tld":"wine"},"ip":{"addr":"172.67.207.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logo.wine","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 09:20:03 GMT","end":"Thu, 16 Apr 2026 10:17:48 GMT"},"fingerprint":{"sha1":"1D:CF:4C:45:1E:BB:81:DE:71:36:A6:A7:00:86:19:EC:BD:C6:FC:7B","sha256":"64:9C:5F:93:C8:21:AD:B8:9B:39:4A:F6:E5:CA:B6:12:E7:B7:DA:50:50:C1:A8:F2:9C:84:B5:98:EB:C7:77:F3"}}},"request":{"raw":"GET /logo/JPMorgan_Chase/JPMorgan_Chase-Logo.wine.png HTTP/1.1\r\nHost: download.logo.wine\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 31535\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6994CF00D2310435372E5408\r\naccept-ranges: bytes\r\netag: \"4F7AABDFAF998D0DB88A9B7757566BA3\"\r\nlast-modified: Wed, 18 Aug 2021 15:42:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6421393993181802261\r\nx-oss-storage-class: Standard\r\ncontent-md5: T3qr36+ZjQ24ipt3V1Zrow==\r\nx-oss-server-time: 11\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f136HrlCoDZPXiStGkDWPBQWWIt9%2B63jt5%2FTbmloS2hBUd1bkzRFcXzyR1w5Bv%2BbwbH8YS%2BIim%2BgxV6853GzjC8vY53BZyTpY%2F2wn6XoNJUhnQ%3D%3D\"}]}\r\ncf-ray: 9dc8ed33de07a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"4f7aabdfaf998d0db88a9b7757566ba3","sha1":"4341e9001bae43347d2e491172d63ddc7f5c4019","sha256":"342e5af699d8231387fd3e8b5f7248ca533d5445dc6162ae8643a35750853e7f","sha512":"71f6ffa6c14202453b8bcdec8e20daad48a20bf1062568c52bd1f43c64c07c0655b266370c73f9d5c07648fb2e588f2c17e3d8ee98f7b3e103e0f49d5fdbec5d","ssdeep":"384:ZOdtQcgYxndQ8q2fUJNBLEepfLpRrev7XhykHROOY47llboK7qT9BepqBCRvXPIv:ZsaGhqd/BLEYpRr0jx8OY4qT9ls3m6I","tlshash":"9ee2e17791b711d5ee7e47b8eae920c071a9850660fc75ca03e327a63dcc2cd431da65","first_seen":"2024-08-19T21:53:44.428584Z","last_seen":"2026-06-09T15:44:08.207472Z","times_seen":43,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freepnglogo.com/images/all_img/1724180093squarespace-logo-transparent-png.png","fqdn":"freepnglogo.com","domain":"freepnglogo.com","tld":"com"},"ip":{"addr":"108.157.229.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freepnglogo.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Mon, 14 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:AC:FA:FE:F2:DB:D9:8A:35:F2:7A:43:AB:53:8C:8E:4C:CF:F5:AD","sha256":"3B:E3:02:1E:BD:2F:CA:6E:29:F3:93:08:36:F4:4C:99:16:A9:00:05:E6:C7:A4:4A:FA:F4:77:B3:2E:CF:19:B1"}}},"request":{"raw":"GET /images/all_img/1724180093squarespace-logo-transparent-png.png HTTP/1.1\r\nHost: freepnglogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 55115\r\ndate: Sat, 21 Feb 2026 15:43:30 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Sat, 01 Mar 2025 22:52:34 GMT\r\netag: \"ca6754048e9e7b58023fbc9d0ef90410\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 3V9aCUbd8DE1p5acaXjirdDJ0DqhOChBUpj3cfG689W6obTOfA014A==\r\nage: 1861924\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 434, 8-bit/color RGBA, non-interlaced","md5":"ca6754048e9e7b58023fbc9d0ef90410","sha1":"3cbe5254ad3ea93f4afb4d8c7181ad67f288216b","sha256":"8856e038a6eead28952aed095607e193c4368b17a65494502378f77599b530ec","sha512":"f95b7a87dde32c5b210150ab33baede2c694ef1df7ae5418bf11f4fda250ffe598397feb6bf1016518bf55f61a3c01cfb5e8012371e51b51e117c8a9f4b1cf38","ssdeep":"1536:A308QfYP4AWY48TN0JZOMFBJJ3QNZq1U/3/:A3Uf6C8KZOeBQNZH/3/","tlshash":"8833019099e0e916df6801f10ccc2b3e3772164d022a4bd9eb0a5e943ff3a41ae3a1c0","first_seen":"2024-12-28T11:37:25.232923Z","last_seen":"2026-06-09T15:44:08.219005Z","times_seen":40,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:18:18 GMT\r\nexpires: Sun, 14 Mar 2027 05:18:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 85036\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-23T22:05:47.97277Z","times_seen":10813,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":110,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 01:05:47 GMT\r\nexpires: Mon, 15 Mar 2027 01:05:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13787\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-23T21:34:52.495422Z","times_seen":27174,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":31,"dns":4,"connect":18,"send":0,"wait":25,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:18:18 GMT\r\nexpires: Sun, 14 Mar 2027 05:18:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 85036\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-23T22:05:47.97277Z","times_seen":10813,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":30,"dns":4,"connect":11,"send":0,"wait":26,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:18:18 GMT\r\nexpires: Sun, 14 Mar 2027 05:18:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 85036\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-23T22:05:47.97277Z","times_seen":10813,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 01:05:47 GMT\r\nexpires: Mon, 15 Mar 2027 01:05:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13787\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-23T21:34:52.495422Z","times_seen":27174,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freepnglogo.com/images/all_img/1691832278twitter-x-logo-png.png","fqdn":"freepnglogo.com","domain":"freepnglogo.com","tld":"com"},"ip":{"addr":"108.157.229.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freepnglogo.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Mon, 14 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:AC:FA:FE:F2:DB:D9:8A:35:F2:7A:43:AB:53:8C:8E:4C:CF:F5:AD","sha256":"3B:E3:02:1E:BD:2F:CA:6E:29:F3:93:08:36:F4:4C:99:16:A9:00:05:E6:C7:A4:4A:FA:F4:77:B3:2E:CF:19:B1"}}},"request":{"raw":"GET /images/all_img/1691832278twitter-x-logo-png.png HTTP/1.1\r\nHost: freepnglogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 26306\r\ndate: Mon, 08 Dec 2025 11:39:33 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Sat, 01 Mar 2025 22:52:22 GMT\r\netag: \"327df8a9baeef5d2b09b419853f14057\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: A0bwa210sOtCFBMHl8lf-9MLq7o6oQCVHz6ahIssg3SPvNiNoQmBYg==\r\nage: 8356561\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2139 x 2000, 8-bit colormap, non-interlaced","md5":"327df8a9baeef5d2b09b419853f14057","sha1":"8a30c42d4c7d1df6ff3a70cf0e63def8630b71c9","sha256":"6a51a50f676b171df4b12dd9164936a72d44a9cc0b36b94c5befb1811e52d526","sha512":"c6281f9c4e563d164ae64006d0b1caf950d846a8fa9f89e8354633b591c6673acc945d093fd8c2b31cc6c7005785fb25a8e84c71000d84cd26d1a91a9182350c","ssdeep":"384:HS/RFub/3Wu66nwmTkSmFnqOMu4urKy6n6pCHMsBQiqNKZv4fPmcLl3jJvygPiSZ:ymbeQCtq1n4CsmM1ecLFRvQn+tew","tlshash":"e9c2d0590af141d247b99e33b4b49d88536138f8ecddb3bec57bc8adda49f890015872","first_seen":"2024-12-28T11:37:25.238361Z","last_seen":"2026-06-09T15:44:08.25882Z","times_seen":32,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/thumb/2/2e/SpaceX_logo_black.svg/1280px-SpaceX_logo_black.svg.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/thumb/2/2e/SpaceX_logo_black.svg/1280px-SpaceX_logo_black.svg.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-disposition: inline;filename*=UTF-8''SpaceX_logo_black.svg.png\r\netag: 7669cd0a749b059a1f833c2796add40b\r\nlast-modified: Fri, 22 Aug 2025 08:34:06 GMT\r\ncontent-length: 8005\r\ndate: Sat, 14 Mar 2026 14:19:28 GMT\r\nserver: envoy\r\nage: 52565\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/2\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=Q9TMzZR9voy5n-GOUpzG6wMkAAAAAFvdvZ21gWd64JJuyVEoVrZj0G_J_fZ97pKS;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 15 Mar 2027 00:00:00 GMT\r\nx-request-id: 3c7613b3-86bd-458f-b544-fe752d30bcc8\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":8005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 160, 8-bit gray+alpha, non-interlaced","md5":"7669cd0a749b059a1f833c2796add40b","sha1":"17902fd639ccf00cb843ff830b0308d339e1b77f","sha256":"18293ec11dffd87cedc029588f2464bb04a7c63b0e9bbc4bd3db7744d66102a3","sha512":"cfa27e5111d5c479db9d7e835d4c41850ff5a971c3cedd64995b7f718e5edf757c881d637dfe9f90c96bc367eb26f98ea049a8e136eefcf25c1255c3b8d5366f","ssdeep":"192:wYkfcfQxpPbOSvygwF2lyR/11VfZTpmR2Z+uJdf/R:WUfQvjOq8IyR/HB9ph7df/R","tlshash":"d3f1aff78c4fd838ed09fdda4e5338e84c1084a62ca2e579211bed299eea4704c48963","first_seen":"2026-01-20T02:24:22.526568Z","last_seen":"2026-06-09T15:44:08.260959Z","times_seen":19,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":164,"dns":0,"connect":24,"send":0,"wait":27,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 01:05:47 GMT\r\nexpires: Mon, 15 Mar 2027 01:05:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13787\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-23T21:34:52.495422Z","times_seen":27174,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtokenfin.com/","fqdn":"xtokenfin.com","domain":"xtokenfin.com","tld":"com"},"ip":{"addr":"104.21.38.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-15T04:55:33.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtokenfin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:32:02 GMT","end":"Mon, 08 Jun 2026 08:32:01 GMT"},"fingerprint":{"sha1":"CD:B2:AC:F4:B2:12:3C:9C:37:32:7C:92:BE:A4:EA:58:94:98:87:BD","sha256":"CE:4F:A2:A2:89:CE:D4:A4:65:B5:63:AA:A6:4A:CA:B3:E8:79:1D:8A:89:BC:0F:2F:B6:F1:98:9B:21:1B:B4:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xtokenfin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Mar 2026 10:17:43 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Lc3NYyoQbprXgC%2FMInPIJOvWSChEmJqiClpymnGBrrNzHPQ5YPbDjk5o%2FecK5sE%2FwjnVq6XTzo6PyTRcYztoHL3Bi25kZuc9F0LHfQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dc8ed31ea4ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93371,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (426)","md5":"4a2d884ca22a7e3b0e4765f4014147b1","sha1":"1e1ca1f6a17dffce9196ab8687889b4349669877","sha256":"f4640d94a74a6da480a19fed9cb88ff27bdade318b1661bb8610712392df75b9","sha512":"58afa101ff6e81119152fc41295db0f3d147531c10e6c737e9e01cc3e87082c3fb75aaf6e1ec2344f8bc148045790fc6a1033c567183eb6a5a7dfabd3659d5ed","ssdeep":"1536:C/ACEfSQJXTwIIQ3bZYIB0XJ9S/TvRW9SSSv69ST5v89S7mvA9Svmv7um7rMD6zc:CwRTzvPmV","tlshash":"3693c67061b4603aa067d4d1b5e45baf36a0e607dd1b4358baec42a58fc7fe39e2314c","first_seen":"2026-03-15T04:56:05.123334Z","last_seen":"2026-03-15T05:09:09.214862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":49,"dns":38,"connect":1,"send":0,"wait":136,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-15","alert":"Detects file containing Telegram Bot API","trigger":"xtokenfin.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"download.logo.wine/logo/Coinbase/Coinbase-Logo.wine.png","fqdn":"download.logo.wine","domain":"logo.wine","tld":"wine"},"ip":{"addr":"172.67.207.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logo.wine","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 09:20:03 GMT","end":"Thu, 16 Apr 2026 10:17:48 GMT"},"fingerprint":{"sha1":"1D:CF:4C:45:1E:BB:81:DE:71:36:A6:A7:00:86:19:EC:BD:C6:FC:7B","sha256":"64:9C:5F:93:C8:21:AD:B8:9B:39:4A:F6:E5:CA:B6:12:E7:B7:DA:50:50:C1:A8:F2:9C:84:B5:98:EB:C7:77:F3"}}},"request":{"raw":"GET /logo/Coinbase/Coinbase-Logo.wine.png HTTP/1.1\r\nHost: download.logo.wine\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 33328\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6994D0085A8E1E37300680C5\r\naccept-ranges: bytes\r\netag: \"F802FBD7E28278D80F2CD5037C4EEB5B\"\r\nlast-modified: Wed, 18 Aug 2021 15:41:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3047557031056272045\r\nx-oss-storage-class: Standard\r\ncontent-md5: +AL71+KCeNgPLNUDfE7rWw==\r\nx-oss-server-time: 16\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41SqS%2BfPrisUOnqSPhFU6LERUpyESZsk8NJUS0OM1HObr2795lsz%2FPHRL6Q64OaIQtw5ZefnWy6EGYa5fOcu2FtDS3o3VGHwYLqeD%2FOixSAtIQ%3D%3D\"}]}\r\ncf-ray: 9dc8ed33de05a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"f802fbd7e28278d80f2cd5037c4eeb5b","sha1":"ae941aa397b7cc291f93bf0d354dd962d55626a5","sha256":"8371437f6f39fa493411ed5a2ce5f692da2de044590e33bd4dd67d64c062e12c","sha512":"d0151ab1ab68e61a2c935d2a52fd164fefe93635d1d75b3922dc01af363072e627c17365da630b81bbbcc220d1f3f6887cae88c1bc185e968755b8e5d043293c","ssdeep":"768:0inc7a0a7oVUiq5ou9F4aTE37tEg5zeypF:0Baor4F4gs7tEgteyH","tlshash":"b2e2d0bf1aca4bf4d4ef8b37a19ef824c122699d101889c38816edd9b81c577b701d2d","first_seen":"2024-12-28T11:37:25.210113Z","last_seen":"2026-06-09T15:44:08.263513Z","times_seen":44,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.scotsman.com/jpim-static/image/2023/07/27/08/Elon%20Musk%20%20James%20Duncan%20Davidson.jpg?width=1200\u0026enable=upscale","fqdn":"www.scotsman.com","domain":"scotsman.com","tld":"com"},"ip":{"addr":"172.64.152.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scotsman.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 06:02:46 GMT","end":"Mon, 25 May 2026 06:02:45 GMT"},"fingerprint":{"sha1":"28:AB:41:71:B2:86:C9:BC:3F:72:7C:0D:0D:3E:26:73:C7:16:2D:FC","sha256":"5D:A0:AB:15:E4:42:89:BE:80:A6:D3:02:15:D8:53:B4:24:4F:C7:4E:DD:68:A0:7A:EB:5B:28:64:86:EC:80:AA"}}},"request":{"raw":"GET /jpim-static/image/2023/07/27/08/Elon%20Musk%20%20James%20Duncan%20Davidson.jpg?width=1200\u0026enable=upscale HTTP/1.1\r\nHost: www.scotsman.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103610\r\nserver: cloudflare\r\ncf-ray: 9dc8ed340d492678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57000\r\netag: \"cfGzME_iDOcjuJ7BzfMJ7NuAyslF6BO2_7ETScGhT8DQ:3db9a90004b6b90a1b4fbf460a95a37a\"\r\nlast-modified: Thu, 27 Jul 2023 07:11:02 GMT\r\nvary: Accept, Accept-Encoding\r\ncache-tag: Elon%20Musk%20%20James%20Duncan%20Davidson.jpg\r\ncf-resized: internal=ok/r q=0 n=77+80 c=48+30 v=2026.3.1 l=103610 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=1;i=?0,cf-chb=(267;u=3;i=?0 10072;u=5;i=?0 55576;u=6;i=?0)\r\nwarning: cf-images 299 \"enable was ignored. Did you mean fit=contain?\"\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=F.iureDAPB1xvf9n9RbJSSpQr3VAp0V4V9t8weGGel4-1773550533-1.0.1.1-xiHXSpyuo6egFA9kjZzSyWSJ8L06vVJCnRWn1KYCLDDqBlrIrp4rlc2cXtrNxnRFJBLQTyqZdP7VlCTyFUh9AOEZlLw9LrAHoqoJe7dwriU; path=/; expires=Sun, 15-Mar-26 05:25:33 GMT; domain=.www.scotsman.com; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103610,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x876, components 3","md5":"03a0ad3e644684c26ad8881897529445","sha1":"c8a37168dca6c02c7c73bf529459a75b7b8e9774","sha256":"5a9a25bec8041bfcce1701387469989ff4cab3ba25d5340a2edce03c8fc3e397","sha512":"85c60a1e5c7cd9c2fe2a61bd220230759df7c1f4c017c5415312797958c54ebccd42e2c217530eb41dca8f41d395e2228ca3c8d7a31e94fb50ed818fd5d10661","ssdeep":"1536:vZmXcXqNKuP7xQHCz9sNokKnb/CfPYjkgxu6QpvTTLcUG/BpxSy4Unf1:8XcqNPPtnmKb+BEpiPQAUd","tlshash":"f8a3125f27211b36e8886bb1cbda5bc03494c53dbc40b783d5da472878ae675883a7c5","first_seen":"2024-08-29T18:05:30.591108Z","last_seen":"2026-03-15T05:09:09.213093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":38,"dns":20,"connect":3,"send":0,"wait":71,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 01:05:47 GMT\r\nexpires: Mon, 15 Mar 2027 01:05:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13787\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-23T21:34:52.495422Z","times_seen":27174,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":65,"dns":1,"connect":8,"send":0,"wait":10,"receive":8,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 01:05:47 GMT\r\nexpires: Mon, 15 Mar 2027 01:05:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13787\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-23T21:34:52.495422Z","times_seen":27174,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":149,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:34.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtokenfin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 01:05:47 GMT\r\nexpires: Mon, 15 Mar 2027 01:05:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13787\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-23T21:34:52.495422Z","times_seen":27174,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":167,"dns":1,"connect":10,"send":0,"wait":8,"receive":1,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700;800;900\u0026family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Outfit:wght@300;400;500;600;700;800;900\u0026family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 04:55:33 GMT\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15873,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"53df1673dfa4585f3faa264305d4a9e3","sha1":"3e65c0c696c6c6eb95c4bc7e54ca232ea930525f","sha256":"344fd814260bf45ec81450b52641c4af8d7ff44c76515c5db91bcb927e69ac7c","sha512":"b83a2e7a354823a9a2855ed8747dd80c33fd8c2970cea7866ea7f2cc0d6863ae301a128e82d79d55ab718ff9b5eed727401f985bb841847be5c6e8307251dbd3","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxAhbNh6OhprhwEhXxhWCh1V:fOGC6CmO5","tlshash":"f6621ee1041b9004db471cc633ce7e36ae8fa1066481d9b9dfff1898adaac6a533574d","first_seen":"2026-02-01T01:04:20.06061Z","last_seen":"2026-07-22T00:00:41.966039Z","times_seen":18,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":158,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freepnglogo.com/images/all_img/1702059505open-ai-logo.png","fqdn":"freepnglogo.com","domain":"freepnglogo.com","tld":"com"},"ip":{"addr":"108.157.229.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freepnglogo.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Mon, 14 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:AC:FA:FE:F2:DB:D9:8A:35:F2:7A:43:AB:53:8C:8E:4C:CF:F5:AD","sha256":"3B:E3:02:1E:BD:2F:CA:6E:29:F3:93:08:36:F4:4C:99:16:A9:00:05:E6:C7:A4:4A:FA:F4:77:B3:2E:CF:19:B1"}}},"request":{"raw":"GET /images/all_img/1702059505open-ai-logo.png HTTP/1.1\r\nHost: freepnglogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 26332\r\ndate: Sat, 28 Jun 2025 02:36:45 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Sat, 01 Mar 2025 22:52:23 GMT\r\netag: \"923bf1f5050e9d98d3c816d9d1cf42f4\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UDX65PrqhvSYdVXoNnXams_H3Izv0B1ZUYYSEDjBb7fH-toVxdbeSw==\r\nage: 22472328\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":26332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 489, 8-bit colormap, non-interlaced","md5":"923bf1f5050e9d98d3c816d9d1cf42f4","sha1":"ffc58dd5473dc131bc4069e69ef434b8a1b2c290","sha256":"05097c77435caca17d58413af3430130e3e74a2181bd273efb5c8bcb65c7d435","sha512":"a14a85fd955e4e6224ebbfa2dd8c93201bee7c6d5b1a68bc54b1c86b30f6068889edceeebd6e7afae9c513e8e69b013323e4b91617ec024a30978e8eef55d6bf","ssdeep":"768:xyr0GQBFepi0p+AzM0pVqou3CiM8usYUpBE3zp6PtI6Ht:xyYGQr4iRAzM0pqS3G8pGtRHt","tlshash":"3ac2d07485240fb3ebcdfb32c6a95afc3723f8ca95262f56142415f8f62245ad08805f","first_seen":"2024-12-28T11:37:25.236322Z","last_seen":"2026-06-09T15:44:08.211421Z","times_seen":40,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":51,"dns":22,"connect":9,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"download.logo.wine/logo/Binance/Binance-Vertical-Logo.wine.png","fqdn":"download.logo.wine","domain":"logo.wine","tld":"wine"},"ip":{"addr":"172.67.207.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtokenfin.com/","date":"2026-03-15T04:55:33.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logo.wine","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 09:20:03 GMT","end":"Thu, 16 Apr 2026 10:17:48 GMT"},"fingerprint":{"sha1":"1D:CF:4C:45:1E:BB:81:DE:71:36:A6:A7:00:86:19:EC:BD:C6:FC:7B","sha256":"64:9C:5F:93:C8:21:AD:B8:9B:39:4A:F6:E5:CA:B6:12:E7:B7:DA:50:50:C1:A8:F2:9C:84:B5:98:EB:C7:77:F3"}}},"request":{"raw":"GET /logo/Binance/Binance-Vertical-Logo.wine.png HTTP/1.1\r\nHost: download.logo.wine\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtokenfin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:55:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 30819\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6994D0086ED6A336332105E9\r\naccept-ranges: bytes\r\netag: \"28C4A8CAF11E6E1E8B1429196A648147\"\r\nlast-modified: Wed, 18 Aug 2021 15:41:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14442334311592102681\r\nx-oss-storage-class: Standard\r\ncontent-md5: KMSoyvEebh6LFCkZamSBRw==\r\nx-oss-server-time: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUQqEQqcoAI%2BKbvMTb0HFoZ8O%2BSRePXn8Kdr2eGK31nDCIXz90zi66PiOibwrAaC6c5homNQ6%2BAcQKwcHI%2FnrZobMPL4GffJg%2BEJyPtZPVZBjg%3D%3D\"}]}\r\ncf-ray: 9dc8ed33de08a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 2000, 8-bit colormap, non-interlaced","md5":"28c4a8caf11e6e1e8b1429196a648147","sha1":"3de7101287eafd005227f4d58448c30a078ce7c2","sha256":"96bdaae8c92f32b4d427741b898708ad7ae7f8fcd3fcda8952e90bc048d00910","sha512":"588a01913a01715ef88b523c6668bfac6498871a1793937df2809a99fc3df3526fce10954bab8adcf8a918ff9a3b076752a90de450bfc8c345c617d380198d4a","ssdeep":"768:azU/pEx8XXXXXXXXb/5MiSweFsu55aNz17sj:a4pXlSwFFNzOj","tlshash":"c6d2af4ee0129c66fb7d4f35d44750de9067980641a781c9f340f690b2cbae372aeab8","first_seen":"2024-12-28T11:37:25.207282Z","last_seen":"2026-06-09T15:44:08.214424Z","times_seen":47,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}