{"report_id":"34eb15cd-d71d-47e3-bd1d-627f2002059a","version":0,"status":"done","tags":[],"date":"2026-09-06T13:09:23Z","url":{"schema":"http","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"title":"Chainalysis — Recover Your Stolen Crypto Assets","dom":{"size":56034,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16421)","md5":"655e792ced26e0a98e3e9f7a1b756121","sha1":"d1662f5c94e128ca2ba19bdd1d21b7fc06689722","sha256":"24e37ae05f317b26d41f0b82b8c09c9416f20be91c258bbcae048860c900f8a9","sha512":"ccab10cfdfe9217eae344106af02664393a7b5baa83910be209e53e1c2293d47017b7cbcb0b8ecfd7f830e3fae98506cb95f47f9dae43f04e707dc55ff4c8af1","ssdeep":"768:uJj0rGV4xksc64Jysq7vHb+fXoFoSJRV9HCO+ZT/AZBHdcQI4gYt26LCVi2DeD8W:uhebx/c64Jysq7v7+f4iaen6","tlshash":"b3430c203114223e553f9a5cb7c5b7ac61379643eb03cd24729c0186dfd6eea6d63ba8","dom_hash":"domhashb37bdb9e19aaa8c5b6c8f93056130786","first_seen":"2026-09-06T13:09:32.189336Z","last_seen":"2026-09-06T13:09:32.189336Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T13:09:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"bsc.blockrazor.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"prominent-licence-anywhere-true.trycloudflare.com","ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2026-09-06T13:09:28.523564Z","last_seen":"2026-09-06T13:09:28.523564Z","alert_count":0,"request_count":2,"received_data":51578,"sent_data":1395,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-01T02:34:25.557265Z","alert_count":0,"request_count":7,"received_data":1101681,"sent_data":3772,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":18389,"sent_data":621,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"secure.chainalysis-recovery.help","ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-09-06T12:51:22.351709Z","last_seen":"2026-09-06T12:51:22.351709Z","alert_count":0,"request_count":7,"received_data":640532,"sent_data":3465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zen.claims","ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-08-31T11:00:40.25586Z","alert_count":12,"request_count":6,"received_data":1053321,"sent_data":3424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2026-09-03T11:53:45.990227Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":584,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":4,"received_data":171136,"sent_data":2357,"comment":"","tags":null,"fingerprints":null},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-01T07:14:26.436393Z","alert_count":0,"request_count":7,"received_data":1219945,"sent_data":4144,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc.blockrazor.xyz","ip":{"addr":"104.26.9.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-09","domain_rank":3972429,"first_seen":"2025-06-22T04:54:55.313609Z","last_seen":"2026-09-01T17:05:14.125543Z","alert_count":2,"request_count":2,"received_data":1837,"sent_data":1131,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"63.181.205.193","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-08-31T11:06:58.001458Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1153,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7dca33f24054c0c18884b7fbf2f6670d","sha1":"22e339dc24459d9c6de533ebfb9700d932e43fd8","sha256":"db758b08c6687355502ca6e2ed6a83e665feb7caac662056964b1ac66e934c0b","sha512":"5cdce3364104006c99c6ed87e4d0fccb3ed509a1db9cec85d9d77c9d44282fb944ba965173429dcfc45f3e7b86c8de8b8184f6297bd51652c5c12ac1a6523787","ssdeep":"24576:tAyIKTsl77LuxjyWuXVnQNDlkCKQEGv2Gyoi68r5MdsJYHimjaUOsOhACS4WSoCV:DIKTsl77LuxjyWuXVQNDlkCKQEGv2GyR","tlshash":"2465d84163c06c58234b9fbb731bb4e5e41f096f78980c8fe114bd646ae9617fae8931","size":1514955,"data":"","first_seen":"2026-08-31T08:03:52.56325Z","last_seen":"2026-09-06T13:09:32.294769Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"prominent-licence-anywhere-true.trycloudflare.com","domain":"prominent-licence-anywhere-true.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5073df97cff5b36c67d20516f8a99db7","sha1":"6cdb67bf43aea0e1af371bd5ab82f4afc6ae43f2","sha256":"e82dab043e27db9f7b5a8466734d406115be4027cee9cc27fbf1bf824ea3281e","sha512":"e73764a273682f90031ba22c83e995b276ef9f8dee564369f7e74474291b13a4975b4aabcaab41501974be9a89bb9bc1590a746e0f35eb12d541f8cf80ca0665","ssdeep":"1536:zS1FEsfyN/H4I8c33SmyGpk/VlM+XJpmHKp95P5j2a19d8oJE:zS1GsfyNCcnSSpW1E","tlshash":"a553a8852bc0a964134f4faf733bb6d1d91e859e79884c9fe614bd50eba5312eec0930","size":60811,"data":"","first_seen":"2026-08-31T08:03:52.555438Z","last_seen":"2026-09-06T20:31:41.260424Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-06T23:31:18.42143Z","times_seen":811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-06T23:31:18.498547Z","times_seen":810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/assets/index-BW23yRkP.js","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e26f8d071807f9df5adc70a7213d2dc7","sha1":"e420ac21e7ae3c368c3c0feba9b17aeec136be1b","sha256":"e8757adc0ff7a4b0b07460ed2eb1f7f7ea46d27530df324cec170cf0e9f63974","sha512":"7780e7dc3e93b1e14ff9d3d824924c8afc87b480d7da32682b53df711f6039f01910ec7b2333fe4c68c018e63f33ded7dadb0f57c17bfee29c954c22ea2bfe55","ssdeep":"6144:NuG09D2dcncE2kgrXtSx/kNsQ1hLyouRwCYKex37KRqkP5hLw:UtbgrX0kNPmM37gqWW","tlshash":"f9945cf83295b5224bd792b6506f0006f3352867280d4424b274edef7ab588991fbff9","size":430216,"data":"","first_seen":"2026-09-06T12:51:32.718591Z","last_seen":"2026-09-06T13:09:32.245519Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#216","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a5a223116b4c573630183636fa9cbb","sha1":"eb0aff7f7f2b3a952c22c3ece9ae55109b9df403","sha256":"53b924ae8cfe5e82ded5d33ac9921b0ee727362cc3241f1e8ba17443c3b9bd12","sha512":"c433f43499b958f423d51f9852842dce8f6d494340713849d763570ddb1d64afae10feaaaa0e9c0ff0fe0833ccd641dedf68fa05c8577fe7287605294c5b9d9b","ssdeep":"","tlshash":"d341beaaf912187755b7b2be2baf639435330047e402e815bf6c9ac41f249865073bd9","size":2431,"data":"","first_seen":"2026-08-20T08:45:40.401847Z","last_seen":"2026-09-07T00:54:22.386622Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/53a5da74ed.js","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66578bfd5484c7a67c3a37998a411fec","sha1":"8b38dfe016de4b05decc87ed19588b5d78ad9703","sha256":"f2c5819ee275e624fc48b96c9bbf022d38729d0fd9463336963b446ef864d4a4","sha512":"97d67ac9270d57dfd7df8a7e65a1ecbcc63e54616617493415091d5fdd32d596c331e6aec3eeb72af5be8456d971b01b81e64b45bcbef99d80e07e5c4b57349b","ssdeep":"96:bdqmAd0L/CZUMW0v7FYQkMJk/7p/MxEO1jDfLFyP6QcZYnLCBVYW6wPlVli/0asc:bdg2QUMW05YQk9zpm/1fLsPBcWLCawtA","tlshash":"61c165806dc574d617928b37751eb4eaf76bf59e1806040bea00bcd076b0925dacfb74","size":5733,"data":"","first_seen":"2026-09-06T12:51:32.711491Z","last_seen":"2026-09-06T13:09:32.20735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c471a06045aae05bac48e5a50d18ac7","sha1":"8ccefbbf9570bd4cf2c2a5e8d19cf37c076c3a22","sha256":"a53ad437ea34357e65bc55a63ac9eb2055f8f61d5b22168af3cb3cc2e089b565","sha512":"aebd583ee169a550a18f63e34cad95ca44191c6939e0146e706ed4092dbcf015519546b5819d15fdc8220912dcdba6965244a435ab0e1665c3f4519cb80e4094","ssdeep":"192:fpBLaCbBlrlEz5vXJAkbJTdBE9SsLFvHk7ovi3tNerebZPR+ZIXDXfv:hBLaCbBlrlEdvukbJbKFvHk7ovi3tNlZ","tlshash":"5ef136137492b44a01da077e765c17e6c4a6da19ea9ac40ef388dde8b0dd8937e0c6f0","size":7688,"data":"","first_seen":"2026-09-06T13:09:32.297519Z","last_seen":"2026-09-06T13:09:32.297519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"13f3a260bb5d175c4425edabc8873bbe","sha1":"12cbe6dc723d9d2e011ea9519290064fe37d20e8","sha256":"b4b15165b70f9b724ecd0859e545727ff2902a05939a6435fe6b18e4981eda13","sha512":"ca2cf22e51df84c3a7e3f178c3fbc3b6d546fd66f54363f55b6ababc21831e95c2154db15c60392270398371d8c95bcdf2b3454c7d005556bc7dd07a06096055","ssdeep":"24576:xVTiIfGuotwwb/gR68UWPbf1vuKo0Epy4nbfOWKax:Di/j/W1uppXTx","tlshash":"7925f2994c338265669c03f47c5f1b883ea86becd098a77b9432d0f676c16af10d7876","size":1041263,"data":"","first_seen":"2026-08-31T08:03:52.559326Z","last_seen":"2026-09-06T13:09:32.300179Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"prominent-licence-anywhere-true.trycloudflare.com","domain":"prominent-licence-anywhere-true.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-09-06T20:31:41.255868Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-06T23:31:18.349282Z","times_seen":675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-06T23:31:18.434227Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/assets/routes-C7LWKtch.js","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8e4e79f302a43016c6eee306af63cba","sha1":"6ab9542aa61acee81e42a7506add0d2410b871e1","sha256":"42dee54b16c072d417524862ab2f95454f78b414d2d9585c7493ae0940c80623","sha512":"a36e1eba5150d26896684d45b989842f57e7b4f7c99ccf74cbf9b6d67e5043faa2945b43a8e062337731bbc67cc3bd143371835b5b3c241cce73c45e6042aa9e","ssdeep":"1536:jBsdo/AcIZebx/c64Jysq7v/FsdvPoeFVsXa1C79:iZe/gPRFga1C79","tlshash":"0b532b05b01426bc793f8711fa8de75ce536a640cf0b8919f2491432e7f5be93a62f49","size":64282,"data":"","first_seen":"2026-09-06T12:51:32.70764Z","last_seen":"2026-09-06T13:09:32.223643Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-06T23:31:18.437253Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/.netlify/scripts/hud?variant=public","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7434e7cef2321312287197bf3202f104","sha1":"822a53f0a37ff6a66e4c5832264b4e8a70cb8738","sha256":"5725e74637e875b18a3579f03036242fb760ddb46cf6c9e9d4eacfc7e9ba4e28","sha512":"9ae832734fa072239df5653536ba87e7afa6dd7e3596ffbc423da2a00ad1fc39cf4e2169398968b592b8038260dd69bf9a3ee5d073fa647ae95c1329285aa8d4","ssdeep":"384:FxZ3X6N7zEc5X5pQb2UJyHK7kor1Q7QQOoSDDd4gwrIjZnIHSC:FxeD+2pBopRnxC","tlshash":"bbe21ab3d3a1153d5027c2be6beba26a31354063f107c900fe6d63944f92896a5bb7cc","size":33735,"data":"","first_seen":"2026-08-20T15:00:24.663946Z","last_seen":"2026-09-07T00:54:22.377898Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prominent-licence-anywhere-true.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"prominent-licence-anywhere-true.trycloudflare.com","domain":"prominent-licence-anywhere-true.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0878a59877e35ea9a46f94d9fabb03dc","sha1":"ee4065b3586fb2375b435be5e09ed03acee35abb","sha256":"59c7d2596b774438e6ad0f36d20c2ee4ad54953654a14a5616c5ad8b66ba0615","sha512":"11b8567cb4d138528f5e19482b11bf1332242b43a717ae4e5f069e54f905a337577922dc148dc786704785ca525fa1ab0e2bd33a6b622a570d388750904a724a","ssdeep":"768:hEmJ9uKRXOIhP0ioZxtL+2OeN8e+pMNKbmWQZTiqsuA2hJf8NCu2Ct:hEmiI6vNpOPQB9FLEJ2Ct","tlshash":"cd23e1e5643102390674ab70395a0acdf9748ba659ecdb4ed152c0a4ebe539f08efe70","size":49971,"data":"","first_seen":"2026-08-31T08:03:52.525654Z","last_seen":"2026-09-06T20:31:41.250869Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-06T20:31:41.236503Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-06T20:31:41.235699Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.879Z","timestamp":1788700131879,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T01:14:13.095467Z","times_seen":18320423,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"prominent-licence-anywhere-true.trycloudflare.com","domain":"prominent-licence-anywhere-true.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.168Z","timestamp":1788700133168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: prominent-licence-anywhere-true.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 13:08:59 GMT\r\ncontent-type: text/html\r\ncf-ray: a36db4a03bf60b41-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":762,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7dead4ba970a8984e84186ac8b407d34","sha1":"672c588381a1262ce004e65fb2faa79dd2f62d1f","sha256":"7fcd7da4b898827bbd559e300765656899be3edbf15393193c6e05d09f4ceff2","sha512":"22e54cc32dba587465931f228ab02dc2fc4c0fec59e6de843e526a1e93e4541949b1ce74ca8880de53883ae8df85af848199f14ecb08893539d9ab35733358d7","ssdeep":"","tlshash":"f511d0450d57007105f38ad63b5f7f05a362924640c0c5003ffae2b7af53e5bc805ad8","first_seen":"2026-08-20T12:56:45.684951Z","last_seen":"2026-09-06T20:31:41.240337Z","times_seen":46,"resource_available":false,"data":null}},"time_used":6685,"timings":{"blocked":1,"dns":6,"connect":2,"send":0,"wait":295,"receive":0,"ssl":6381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.412Z","timestamp":1788700140412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36db4a59afe0b06-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1928,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-06T23:31:18.498547Z","times_seen":810,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700\u0026family=Inter:wght@400;500;600\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.241Z","timestamp":1788700131241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@400;500;600;700\u0026family=Inter:wght@400;500;600\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 06 Sep 2026 13:08:51 GMT\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17705,"size_decoded":1714,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"55b41478f85c04a2336784972e627547","sha1":"31779c27ea0289270e260b050b134b7316daccbc","sha256":"8aba6aab33c9e43e7301a593d345a935fbba717efa2426a699987a5fb739846c","sha512":"7a5cffd31f8002ce0e638443c09027e6e8a84b55511e03f976d9b709682b486ae244d63a0664a9b56d185a38aa9e95261ae89c010b20dc4387d1520a4b0b2501","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlgG+7p3ZAXYjG9Up3qnXfWx/GiZC4GRZ:vXuM0pxOGCDDgRt","tlshash":"5482dc92002ba500eb571cc233cfbe36bd8e60466085d5b99ffe1c899ceec66536476d","first_seen":"2025-12-19T21:02:50.44404Z","last_seen":"2026-09-06T13:09:32.203919Z","times_seen":34,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":36,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.410Z","timestamp":1788700131410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355044\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-07T01:13:50.665974Z","times_seen":278169,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.422Z","timestamp":1788700133422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db479ebc656bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221963,"size_decoded":31376,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4a78bc9512578c318933d47acc0ced58","sha1":"4130eb6e3076e703f047425dcd74247d908197c6","sha256":"9738e51b739f61e762d6ef9724312c29fc307fe6381e80601a6730da833fb63c","sha512":"9949a0fff9a6bd5b9c10b56aec4de29b25f9e7e1599fb8f08fa6ac9d8ff0f5fd67206903f9f5676be3bf09176ab08968a31371bd4f3eca309529e2ae6fcf3128","ssdeep":"1536:pbinZhimNX3XFQ5Luj5ygGWudQT6bjzeFedG:pWnZhimNnOCVB3udQCjzeFedG","tlshash":"bd24656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-04T14:40:16.088644Z","last_seen":"2026-09-06T20:31:41.218444Z","times_seen":20,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/53a5da74ed.js","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.511Z","timestamp":1788700131511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET /53a5da74ed.js HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\netag: \"0c3709fa6de4bfc609b5ce1dba68f86a-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1VDC0CJCTXTP1GPDXZ2Y4ZB\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wg48KwSthfpAXFSzbQ2UpxxrJ5D%2BNJBQTkAL%2FK91mvKQO1Bn2F5EUjiNGdYDfFRYOP4S%2FL1WUkrZEyB4prWeXtk68N1aOAUI1WITipyfuwsJxJFeCTJNtau3cVBpvV3urfNV3z3KdXmhZ2LAdgfu4lEITQ%3D%3D\"}]}\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a36db46dfc1c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5733,"size_decoded":3214,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5733), with no line terminators","md5":"66578bfd5484c7a67c3a37998a411fec","sha1":"8b38dfe016de4b05decc87ed19588b5d78ad9703","sha256":"f2c5819ee275e624fc48b96c9bbf022d38729d0fd9463336963b446ef864d4a4","sha512":"97d67ac9270d57dfd7df8a7e65a1ecbcc63e54616617493415091d5fdd32d596c331e6aec3eeb72af5be8456d971b01b81e64b45bcbef99d80e07e5c4b57349b","ssdeep":"96:bdqmAd0L/CZUMW0v7FYQkMJk/7p/MxEO1jDfLFyP6QcZYnLCBVYW6wPlVli/0asc:bdg2QUMW05YQk9zpm/1fLsPBcWLCawtA","tlshash":"61c165806dc574d617928b37751eb4eaf76bf59e1806040bea00bcd076b0925dacfb74","first_seen":"2026-09-06T12:51:32.711491Z","last_seen":"2026-09-06T13:09:32.20735Z","times_seen":2,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:52.019Z","timestamp":1788700132019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"bosK0Nlj8PJfp00ROtXk\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:08:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gksmww5L7HJuRYGHmnfWu1zQV2cysLq0TljJQgnGsSINIrf7zTH3X85jcpoytJxQmvDGxjRaG5UMToKIPvwjzOKNJ5z9j9wlA0eueB8BOf1xZZ5Y23Ies13wN87u\"}]}\r\ncf-ray: a36db4724da8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7696,"size_decoded":3553,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cc1880d73800cef1c0c095721132f7","sha1":"ab58ef4bdd36b322dfb313316bf577766e6ddf3b","sha256":"9e7f78618f70a8ea9d073f916cc769be9648b767646516d41e196316e4e8ce79","sha512":"d303a6acf072eba7cefd24dc8a0ada80ce21508be485b3c7cd67d51524c4360e0e7becd1aa162107b4c1362d84479e4d081736c8203e1a738555a85688df06f1","ssdeep":"192:xpBLaCbBlrlEz5vXJAkbJTdBE9SsLFvHk7ovi3tNerebZPR+ZIXDXfw:rBLaCbBlrlEdvukbJbKFvHk7ovi3tNlG","tlshash":"40f136137492b44a01da077e765c57e6c4a6da19ea9ac40ef388dde8b0dd8937e0c6f0","first_seen":"2026-09-06T13:09:32.212454Z","last_seen":"2026-09-06T13:09:32.212454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.164Z","timestamp":1788700133164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db4786ba856bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226103,"size_decoded":32039,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"da5c294223583d817be04852e8dea0d8","sha1":"13da547314cb135f32e5681804bbdf2fe3513c1b","sha256":"402bf8ceb9dc8949c84c87c2e55bd338ad7331295699bf32068e8f81a4d8ffa6","sha512":"fef32abdff84629a28263834c9879e8ca740a0fbd520aba9eb28174b85aa023bf5aed17c2a18fb16c79c207bdcd892fd611f7251a64a8e94357b62263d9d9463","ssdeep":"1536:TKFTcsEIpeYEW9FaLYSG+DZHixh1BsNJxZv1M6Rg:2FTcsTpeYZ9Fatixh1B+JxZv1c","tlshash":"4c24446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-04T14:40:16.083112Z","last_seen":"2026-09-06T20:31:41.254715Z","times_seen":20,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":80,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.310Z","timestamp":1788700133310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0Sqy5WBbir5JSYHagaXKHJ2k%2FHzxD7DhCMC9SmV9ssIDyZsKV3jn6MkN6aaFq%2BlDO4Zw2dSVS%2F%2B4gfQepFNYAIRjPlDFzCNKslMdILa3RlDUGVVqnBfOxPcDXOY\"}]}\r\ncf-ray: a36db4793f7e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T01:14:13.095467Z","times_seen":18320423,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prominent-licence-anywhere-true.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"prominent-licence-anywhere-true.trycloudflare.com","domain":"prominent-licence-anywhere-true.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:08:59.921Z","timestamp":1788700139921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /assets/index-f2H8W9Sl.js HTTP/1.1\r\nHost: prominent-licence-anywhere-true.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a36db4a28e310b41-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49971,"size_decoded":37382,"mime_type":"application/javascript","magic":"data","md5":"0878a59877e35ea9a46f94d9fabb03dc","sha1":"ee4065b3586fb2375b435be5e09ed03acee35abb","sha256":"59c7d2596b774438e6ad0f36d20c2ee4ad54953654a14a5616c5ad8b66ba0615","sha512":"11b8567cb4d138528f5e19482b11bf1332242b43a717ae4e5f069e54f905a337577922dc148dc786704785ca525fa1ab0e2bd33a6b622a570d388750904a724a","ssdeep":"768:hEmJ9uKRXOIhP0ioZxtL+2OeN8e+pMNKbmWQZTiqsuA2hJf8NCu2Ct:hEmiI6vNpOPQB9FLEJ2Ct","tlshash":"cd23e1e5643102390674ab70395a0acdf9748ba659ecdb4ed152c0a4ebe539f08efe70","first_seen":"2026-08-31T08:03:52.525654Z","last_seen":"2026-09-06T20:31:41.250869Z","times_seen":40,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.075Z","timestamp":1788700140075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prominent-licence-anywhere-true.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 06 Sep 2026 13:09:00 GMT\r\ncf-ray: a36db4a39aeb0b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":756,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-06T20:31:41.236503Z","times_seen":158,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.232Z","timestamp":1788700140232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a36db4a47af40b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381242,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-06T20:31:41.235699Z","times_seen":157,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.231Z","timestamp":1788700140231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a36db4a47af30b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3878,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-06T23:31:18.42143Z","times_seen":811,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/assets/routes-C7LWKtch.js","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.249Z","timestamp":1788700131249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET /assets/routes-C7LWKtch.js HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nage: 1085\r\ncache-control: public, max-age=31536000, immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\netag: \"4c46d4c20c386e9445a2fd3d6e7c79e6-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1VCAVGD8DVR9NV82SCBSYEZ\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdlSH0ND1vLN5%2BY%2FoEdiIfioi3ia7njPAWAXw2Q%2FgZ549kkzro6dNgyunS6CEosF9tWMOpcQLkgWi8jpqVBlE5uRU%2BqOVVyg3h6QprBQelBAQJSrBRMOeNKJic9H7Nw7Px0a7%2BRxbwXIfBq9dGc2qtXEIQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a36db46c5bc8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":64282,"size_decoded":18144,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51888)","md5":"b8e4e79f302a43016c6eee306af63cba","sha1":"6ab9542aa61acee81e42a7506add0d2410b871e1","sha256":"42dee54b16c072d417524862ab2f95454f78b414d2d9585c7493ae0940c80623","sha512":"a36e1eba5150d26896684d45b989842f57e7b4f7c99ccf74cbf9b6d67e5043faa2945b43a8e062337731bbc67cc3bd143371835b5b3c241cce73c45e6042aa9e","ssdeep":"1536:jBsdo/AcIZebx/c64Jysq7v/FsdvPoeFVsXa1C79:iZe/gPRFga1C79","tlshash":"0b532b05b01426bc793f8711fa8de75ce536a640cf0b8919f2491432e7f5be93a62f49","first_seen":"2026-09-06T12:51:32.70764Z","last_seen":"2026-09-06T13:09:32.223643Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.blockrazor.xyz/","fqdn":"bsc.blockrazor.xyz","domain":"blockrazor.xyz","tld":"xyz"},"ip":{"addr":"104.26.9.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.907Z","timestamp":1788700131907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockrazor.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 14:29:49 GMT","end":"Mon, 30 Nov 2026 15:29:46 GMT"},"fingerprint":{"sha1":"BF:A7:CF:69:4A:8F:5E:19:97:36:77:60:70:C3:29:09:7C:B3:FE:7B","sha256":"84:DE:36:40:3E:D9:51:36:9C:B9:B6:86:04:E7:BB:22:3F:76:1C:44:3C:13:F7:C1:EB:D3:7E:6F:31:C2:00:81"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.blockrazor.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 13:08:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 111\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8l4qWf7SSEaGJ8meUE4y3pDbH1CYuHKMI4UmRdNd2x8YZFv8SuPHNRXl2X8o4nW1WxPCH604pa9biyLSsGu7Z6jWw6Dt%2B5OKzaT3lp5srJoZLbQxcrjkw%2Ba6ltUQrKnfryj8Hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cflb=04dTobhzpbRFs8k4dBST9RCRvZ4aM42wPoMSdfqPib; HttpOnly; SameSite=Lax; Path=/; Expires=Sun, 13 Sep 2026 13:08:52 GMT\r\nserver: cloudflare\r\ncf-ray: a36db470dec5a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cflb","value":"04dTobhzpbRFs8k4dBST9RCRvZ4aM42wPoMSdfqPib","quoted":false,"path":"/","expires":"2026-09-13T13:08:52Z","raw_expires":"Sun, 13 Sep 2026 13:08:52 GMT","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__cflb=04dTobhzpbRFs8k4dBST9RCRvZ4aM42wPoMSdfqPib; HttpOnly; SameSite=Lax; Path=/; Expires=Sun, 13 Sep 2026 13:08:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":860,"mime_type":"application/json","magic":"JSON text data","md5":"7275fdfff05cbccfba1abef632564d09","sha1":"43d0e7fbbe545cdc162430cf8a52a9b96ac8bf4c","sha256":"13ebb32817c5ecf09a64719660044ec05e5ad395adfd95a8364003ac143df7be","sha512":"0ce4178ed1dc968eaeed8a4910d9291fbcf1e402d29c69b13975eeb44835dc5e6a2171b033d0dd45b577e526c1f971bc874be47b1c15d6da653f42bc9b42ac4a","ssdeep":"","tlshash":"5ad012f4130b4b71d0ac4c44904472012121be8909c00e82080c0c8011842421725121","first_seen":"2026-08-31T08:18:25.340841Z","last_seen":"2026-09-06T13:09:32.225339Z","times_seen":17,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"bsc.blockrazor.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.380Z","timestamp":1788700133380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db479abbc56bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":28153,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cbb3e9738efdc29fae1a59370c6b129a","sha1":"d559ae13eef8fc3ae911e6819ca204431393bde2","sha256":"0bea0e4ebda09ba8e5a95a4e572852c1b76377a63c56c9e0be188db6b3ad96e1","sha512":"4c80d5440c46e66cfe5ef0eb1dc9a5a47fe66a9d7b6238168680cb0fa65a4f8d3230c198cfd825f194c230b5daaa346346205b86159aadd4419d6587b76f707a","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9jP:Gu+4PCuielkAnaK/p9jP","tlshash":"50f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-04T14:40:16.065256Z","last_seen":"2026-09-06T20:31:41.216241Z","times_seen":20,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.469Z","timestamp":1788700133469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db47a3bc956bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190541,"size_decoded":31783,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2606aa6754a6961ce920da8ad1667277","sha1":"cf83189cfda4fbcaa1cb29e3ce08a8ed95e8dc61","sha256":"b01cfb7782ae40d68b5d4ac41b1da623d65d90e8422686c20fd918804bfb247c","sha512":"154cc1a7e7cfa699acca680f501c8a8e56e7a3690260b7cd31d94c41542f616cee6143bad3a523680bd6f9dd6b023c8f1ece8d0d8cdb8eaf7a9c770dd22e69c2","ssdeep":"1536:a3HtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8yn:OvRWzd3T7waCU15Br9LmWn","tlshash":"1514536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-04T14:40:16.080443Z","last_seen":"2026-09-06T20:31:41.246246Z","times_seen":20,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.228Z","timestamp":1788700140228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a36db4a47af10b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10660,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-06T23:31:18.349282Z","times_seen":675,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.405Z","timestamp":1788700131405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:30 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355041\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-07T01:15:42.870991Z","times_seen":31556,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":43,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/gemini-svg.svg","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.507Z","timestamp":1788700131507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET /gemini-svg.svg HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSg%2BVostGOnvqN1JlUdGlfRaN9DzeLQHaqSIqD7x5o5dhAPupkOAIFGi87FzBXkrKPq2Tbk%2FfMCjk8sD0%2BanPLjYsBlp3kvcCNCGItG2WIpBBp0A9vS%2Bgv3iqNsDw70dEtBrJsYsA0W6pQ%2Fq3t70I%2Fw%2FWg%3D%3D\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M1VCAW5KEETBRN2S56W3Y7XK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"1ce6485c7a675d5f3c4e6d2154786432-ssl\"\r\ncf-ray: a36db46dfc1b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":944,"size_decoded":1345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be99c1152279137c4f9c085fa3d2ca36","sha1":"75a83faa502ac71bd25290b072db92a275394127","sha256":"58a56e9546dcb86feb86c48959be4676a5530085c0c634a9d47ffce509bd02bd","sha512":"fc15f87b944e3e75cc5bef8a4594acca4933d33d66f437b4843bb574f45fba3d2b8f35ff75083dd68d93c84106439f0b78c6e9aae86cf8305dc848f6f5036aba","ssdeep":"","tlshash":"b311ebe86afe1142c4009329cb7db5b16a9fa0ce0b444457b85c1d143e6d9b54ff3aa8","first_seen":"2026-09-06T12:51:32.715864Z","last_seen":"2026-09-06T13:09:32.233442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:52.426Z","timestamp":1788700132426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"bosK0Nlj8PJfp00ROtXk\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:08:52 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GFDcydEdBsTXamBioNdI2UgC%2Bbzhoa4mw0LiFLhw%2B%2Fu7S5c41USQ8vTp%2Bnkw8jE3a%2Fmasja34JOsqslf%2BcukrABUPXAjM%2FXOSlMscZgy9leJujB1Fs0e8QZBkWj\"}]}\r\ncf-ray: a36db473fdd2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041237,"size_decoded":803566,"mime_type":"application/javascript","magic":"data","md5":"064ab486b7335f20fc5221c49ddbd09f","sha1":"f379fab5bcb0d039da0ba2c4827474c3902c866c","sha256":"938ebc9b82bfa4b56e42b4fc1aa465e8bf13bebfa9044aa03181a685fd987515","sha512":"b44438915d6fce405c758bb25620398532cef8bec42b9747ccaf33b5eeb8acd06cf5640a46690ad99344e102b63fac7ee98a7a49a922fc9c7e0e99ab8cfa0b99","ssdeep":"24576:6VTiIfGuotwwb/gR68UWPbf1vuKo0Epy4nbfOWKa6:ki/j/W1uppXT6","tlshash":"3e25f2994c338265669c03f47c5f1b883ea86becd098a77b9432d0f676c16af10d7876","first_seen":"2026-08-31T08:03:52.550373Z","last_seen":"2026-09-06T13:09:32.235003Z","times_seen":36,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.295Z","timestamp":1788700133295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db4791baf56bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165117,"size_decoded":27933,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"084f8e33d6f96d2fc02d27cf2d4337a4","sha1":"ff7b69f9fb7afdb586070742f0cb2869ab1d5495","sha256":"bc650c279e0f543c44dacf7218fe745f2d6622c012ae865942eed796f631b48a","sha512":"9800e8cfde36a422d745bd27039b8c43aca4804e6e0ddad8e22bab8dcf31ada4508eea053e262e73a1fda1836a49f7ebdeb38c730a00d70bc85913b8a2e8b9cb","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF11z50/na5u49QmqgpeV:ZFVz06UZgEx8e1z50/nEqg4V","tlshash":"01f3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-04T14:40:16.08615Z","last_seen":"2026-09-06T20:31:41.234919Z","times_seen":20,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtpN05kMktETXBUcU12cHNYazVFd28zZmFudVE5bTUxa0FBRDY5VU1HSzFhcSIsInN1YiI6Ijk0M2FkYzAzNjNjZjMwNzgyMTk3NWY2YzI4MDcyMWEwMTg5YWE5NzkzNjgxOTRlNzM1OTk4ODhlODE2ZTU2N2EiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4ODcwMDE0MCwiZXhwIjoxNzg4Nzg2NTQwfQ.wu_tETEjJYFBzhrmzMQLPRqAgCU2fzAOUoPzCR9BH6ZeBcEmY3lVXLum2oPVrFdKiuA_TDhBuyHArh8SPNLfBw\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"63.181.205.193","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.757Z","timestamp":1788700140757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtpN05kMktETXBUcU12cHNYazVFd28zZmFudVE5bTUxa0FBRDY5VU1HSzFhcSIsInN1YiI6Ijk0M2FkYzAzNjNjZjMwNzgyMTk3NWY2YzI4MDcyMWEwMTg5YWE5NzkzNjgxOTRlNzM1OTk4ODhlODE2ZTU2N2EiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4ODcwMDE0MCwiZXhwIjoxNzg4Nzg2NTQwfQ.wu_tETEjJYFBzhrmzMQLPRqAgCU2fzAOUoPzCR9BH6ZeBcEmY3lVXLum2oPVrFdKiuA_TDhBuyHArh8SPNLfBw\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: n0625pvLYiG+OoHJmoMOTQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 06 Sep 2026 13:09:01 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: vlc2WXPe5o9f685lZ/0DZ6kQiuo=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T01:14:13.095467Z","times_seen":18320423,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":0,"dns":361,"connect":378,"send":0,"wait":24,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/assets/index-BW23yRkP.js","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.247Z","timestamp":1788700131247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET /assets/index-BW23yRkP.js HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nage: 1085\r\ncache-control: public, max-age=31536000, immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\netag: \"42d0cfb17560af0434f0edd72fb406db-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1VCAVEZBFR9BF03YB8586A5\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onm1ElJ3JdbmJ1hn%2B6dZ4L%2BzP2Mt%2Bc5Q2QWSPkx%2BJCW4sq1onxZTq0FnlLwyzzKL4mjzpTMFbHA0kunJSgVS3YnZCYgxgJuAKHk2AAtwUrE6gQR3zyLlMe1ZWrElBziGdbPyJ2MCZ4S2shPmb9veV0m7zQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a36db46c5bc6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":430216,"size_decoded":129452,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44052)","md5":"e26f8d071807f9df5adc70a7213d2dc7","sha1":"e420ac21e7ae3c368c3c0feba9b17aeec136be1b","sha256":"e8757adc0ff7a4b0b07460ed2eb1f7f7ea46d27530df324cec170cf0e9f63974","sha512":"7780e7dc3e93b1e14ff9d3d824924c8afc87b480d7da32682b53df711f6039f01910ec7b2333fe4c68c018e63f33ded7dadb0f57c17bfee29c954c22ea2bfe55","ssdeep":"6144:NuG09D2dcncE2kgrXtSx/kNsQ1hLyouRwCYKex37KRqkP5hLw:UtbgrX0kNPmM37gqWW","tlshash":"f9945cf83295b5224bd792b6506f0006f3352867280d4424b274edef7ab588991fbff9","first_seen":"2026-09-06T12:51:32.718591Z","last_seen":"2026-09-06T13:09:32.245519Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.408Z","timestamp":1788700131408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355044\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-07T01:13:50.665974Z","times_seen":278169,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":18,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:52.021Z","timestamp":1788700132021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:08:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjD2lAR3F9WN7inXHYnZSZ5m%2BfPhOiejZ2g0KJdksKpU0mhPDH%2Bwxf2li8aHdSKUWa%2BjaOON51edQY2%2F1LYe6dax%2FFpQSHaOvpXy8ydymHkgAgVYBb2mQcZMCxXj\"}]}\r\ncf-ray: a36db4713d8c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T01:14:13.095467Z","times_seen":18320423,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":5,"connect":10,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:52.428Z","timestamp":1788700132428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:08:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhcJGowUTXrbRlkTSdJOHh0zs332oj8UIRM1Gdk8dIpA7XdOxG9Z%2BeBvFaFxQHzABOWc4DBqbc6rdoaU9D45aOHfC8Pjlc89%2FDGktFqpYYmK9Ylg6Rbp3%2FKK%2BhzZ\"}]}\r\ncf-ray: a36db473bdc9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T01:14:13.095467Z","times_seen":18320423,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.339Z","timestamp":1788700133339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db4796bb756bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183287,"size_decoded":29634,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"08198d8027fdb51cee113a04eeb4cda2","sha1":"b757ce29faf10f04166d8f35e2e3b9c8d55f9919","sha256":"2cc9e97ef9205c6181d1818282bdac6f17a619d9f6f6c6f4db7d90baea502bcc","sha512":"e7f3da5f3ac759a5e4b3a69fd6ed5fbec884b91b53dbdb9c87712d299c5cd3ae3a68827b6850102f67a6b7dfdd70401ba804ecb6543b214ed4959ecd25c3a144","ssdeep":"1536:wD6iwBGG/XRyNxQpuCpnEZB2sfPEzW6+0ASgSzrH:wD6DgXQpuC8PEM9SLH","tlshash":"7b04526e8b04de662fb25388d15cf9eca15ee117c9ce5ca2e2f1cf3440bc5b7215219a","first_seen":"2026-09-04T14:40:16.064057Z","last_seen":"2026-09-06T20:31:41.243055Z","times_seen":20,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.522Z","timestamp":1788700133522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a36db47a8bd756bb-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1081\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Sun, 06 Sep 2026 12:50:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59588,"size_decoded":10694,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1bb304c8cd695a7324d65bdb8c5f253d","sha1":"9b0dba616abafb477342cd08da8980ebd9096f80","sha256":"24ea61be437c2056d6eb6feb1bdc1a85e8ffc7c94fc0ab3756bc0e0b786906cd","sha512":"75928944af226eba43a08e85b213291e56d1c7e0951b2048b24ecf8f645e6eb75e585049a3ee30b3fe1555b5326690cb4e90680d90902f4dffe9b297759c27a5","ssdeep":"384:oNWHp+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW96Q4yMup8:7JcEv+U1lryV6w+5WCI8","tlshash":"0e43746b8f14ee762bb213cd115c79eca24f2117cdca9cf6e2d1cf1440b4af6216619a","first_seen":"2026-09-04T14:40:16.076796Z","last_seen":"2026-09-06T20:31:41.253238Z","times_seen":20,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T13:08:49.987Z","timestamp":1788700129987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 13:08:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nage: 0\r\ncache-control: no-cache\r\ncache-status: \"Netlify Durable\"; fwd=bypass, \"Netlify Edge\"; fwd=miss; fwd-status=200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nnetlify-vary: query\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-nf-request-id: 01M1VDBYZH000S3KQ3CP3VGV6M\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06GKYoCqM37fcz0m8th0LCjJ084LaTLhh7C0s2GXvh%2FLx%2FJUeh0QDZB%2F8NMZCUhcltDPQv0GO%2FSz2FpI16mLK%2BSp9rurt0%2FtdWKZjf16kRR4i4YEnZeQrY5fQOpKcbrhKdnnEw1H5JGItsBYTpNbwQeqLA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a36db464dce90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22960,"size_decoded":6846,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"668cffdb32eac082a5b902d67c6d77dd","sha1":"88d2f1e8299eae4248df8fc6b7ef5805184a8f96","sha256":"afcb9c04ed3010b4b606107bba48b34235a334939f484eb836b490b8e91ec041","sha512":"123395b61d5bb868484b0a731d1e600e2b094798d2efbd2f456adad379dbe12eafd3b2021fb82d43534371322f66752a33bdb588c5f4c928adaef5cfa69d6bea","ssdeep":"384:c2C4SV9HCHumnZT/AbERK73ifdUhQI4B1x/O6VYt26LCVi2DeD8sDdMS4hT:c2yV9HCOOZT/AqsCdcQI49Yt26LCVi2H","tlshash":"c6a288302250313f93a789bcf2a1b76971bf8799d617c91873fc42571bdacd6c9216a0","first_seen":"2026-09-06T13:09:32.269256Z","last_seen":"2026-09-06T13:09:32.269256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":53,"connect":1,"send":0,"wait":571,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/.netlify/scripts/hud?variant=public","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.252Z","timestamp":1788700131252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET /.netlify/scripts/hud?variant=public HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nage: 4457\r\ncache-control: public,max-age=60,stale-while-revalidate=600\r\ncache-status: \"Netlify Edge\"; hit; ttl=31531543\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\netag: \"57b66bb840f16f1e2e5b3d8cf745275a-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-nf-request-id: 01M1VDBZYS03GP1E0WY9YWXS6F\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5cyLqh1pAkgFFOCJ8tWsEIvMHM%2Fy3%2FUyoqwXC7PtysdvXSJI5wNTVIWsf5p%2FPLHvJ9m227heusvw5G0cCU378vEklPr8sAOGCUniasP%2BpBhHYkrh9OgYQSCPz%2F1tWN1tuJPjC6FjO%2BY7VLewHeLjiEA0A%3D%3D\"}]}\r\ncf-ray: a36db46c5bca120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":33737,"size_decoded":10769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1428)","md5":"7434e7cef2321312287197bf3202f104","sha1":"822a53f0a37ff6a66e4c5832264b4e8a70cb8738","sha256":"5725e74637e875b18a3579f03036242fb760ddb46cf6c9e9d4eacfc7e9ba4e28","sha512":"9ae832734fa072239df5653536ba87e7afa6dd7e3596ffbc423da2a00ad1fc39cf4e2169398968b592b8038260dd69bf9a3ee5d073fa647ae95c1329285aa8d4","ssdeep":"384:FxZ3X6N7zEc5X5pQb2UJyHK7kor1Q7QQOoSDDd4gwrIjZnIHSC:FxeD+2pBopRnxC","tlshash":"bbe21ab3d3a1153d5027c2be6beba26a31354063f107c900fe6d63944f92896a5bb7cc","first_seen":"2026-08-20T15:00:24.663946Z","last_seen":"2026-09-07T00:54:22.377898Z","times_seen":139,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.412Z","timestamp":1788700131412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355044\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-07T01:13:50.665974Z","times_seen":278169,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":34,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.blockrazor.xyz/","fqdn":"bsc.blockrazor.xyz","domain":"blockrazor.xyz","tld":"xyz"},"ip":{"addr":"104.26.9.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.909Z","timestamp":1788700131909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockrazor.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 14:29:49 GMT","end":"Mon, 30 Nov 2026 15:29:46 GMT"},"fingerprint":{"sha1":"BF:A7:CF:69:4A:8F:5E:19:97:36:77:60:70:C3:29:09:7C:B3:FE:7B","sha256":"84:DE:36:40:3E:D9:51:36:9C:B9:B6:86:04:E7:BB:22:3F:76:1C:44:3C:13:F7:C1:EB:D3:7E:6F:31:C2:00:81"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.blockrazor.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://secure.chainalysis-recovery.help/\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJgSHNPUUWSw5cJNuEpyGzNZy065zO1%2Biou7B%2F0M4gyPcy%2BbxOAcZG8%2FK8cEVR5GUB4UcaJje6aT8yxNqgRnROnXcuWZSyczuNfCF%2BNDzYieciiMvU0V69Ao1QET9StAlBMwVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cflb=04dTobhzpbRFs8k4dBST9RCRvZ4aM42wPoMSdfqPib; HttpOnly; SameSite=Lax; Path=/; Expires=Sun, 13 Sep 2026 13:08:51 GMT\r\nserver: cloudflare\r\ncf-ray: a36db4708e0ca0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cflb","value":"04dTobhzpbRFs8k4dBST9RCRvZ4aM42wPoMSdfqPib","quoted":false,"path":"/","expires":"2026-09-13T13:08:51Z","raw_expires":"Sun, 13 Sep 2026 13:08:51 GMT","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__cflb=04dTobhzpbRFs8k4dBST9RCRvZ4aM42wPoMSdfqPib; HttpOnly; SameSite=Lax; Path=/; Expires=Sun, 13 Sep 2026 13:08:51 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":857,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T01:14:13.095467Z","times_seen":18320423,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":44,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"bsc.blockrazor.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:53.309Z","timestamp":1788700133309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 14:56:24 GMT","end":"Tue, 24 Nov 2026 15:54:49 GMT"},"fingerprint":{"sha1":"F1:E8:88:03:E3:44:52:F4:4F:2C:5D:24:13:E0:6E:31:8B:4C:9A:93","sha256":"CF:FB:D3:B4:0C:5C:1D:8B:FD:60:82:C0:91:48:34:F6:F7:7C:22:85:A5:D4:5D:CD:03:90:49:79:08:01:D9:4C"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secure.chainalysis-recovery.help/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 656ccfaa3f40ff674bbff0e00cbd6ba4\r\nContent-Length: 1316\r\nOrigin: https://secure.chainalysis-recovery.help\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:08:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84JeSHBTtCViLhBVGnGzZfegAK%2B9bOvTr0jPR7r5Tv2xr2B28yfK6rAiGAb4P8EatY8oLMA5t%2BQfaLnkhxohckbeXrjH4ZNmHMn7NWdRSeFiD2gsER8CmL%2Fg2KVO\"}]}\r\ncf-ray: a36db4799f86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":959,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e278af9e42975ea36f3347b5592d67db","sha1":"a8191ef42bc736682ce4e64351f8354c504afd94","sha256":"a34d3e7ad15df4c492a0aa91957ad3ab728a65556330a474fa27ec3eb076fbac","sha512":"6611ac41e7c2f71643c9a5cba55bc6a45a75ef837ddfecc2f7ae11638a591ba0d1097501895bd01c2284d8ce5dd36cae9280c174e23dc0fe1dbccef2d9fbfd91","ssdeep":"","tlshash":"a5d02b0410ad520dd0433200b6a63b9e823f9ef7f03388fe9847491115282c9da52c91","first_seen":"2026-09-06T13:09:32.277515Z","last_seen":"2026-09-06T13:09:32.277515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.229Z","timestamp":1788700140229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a36db4a47af20b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5161,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-06T23:31:18.434227Z","times_seen":813,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prominent-licence-anywhere-true.trycloudflare.com/?host=https%3A%2F%2Fsecure.chainalysis-recovery.help\u0026href=https%3A%2F%2Fsecure.chainalysis-recovery.help%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-06T13:09:00.383Z","timestamp":1788700140383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prominent-licence-anywhere-true.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 13:09:00 GMT\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a36db4a56afd0b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":698,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-06T23:31:18.437253Z","times_seen":804,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.chainalysis-recovery.help/assets/styles-ByfRI2fn.css","fqdn":"secure.chainalysis-recovery.help","domain":"chainalysis-recovery.help","tld":"help"},"ip":{"addr":"172.67.209.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secure.chainalysis-recovery.help/","date":"2026-09-06T13:08:51.237Z","timestamp":1788700131237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainalysis-recovery.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 16:46:23 GMT","end":"Wed, 25 Nov 2026 17:45:03 GMT"},"fingerprint":{"sha1":"16:1B:FE:24:13:03:10:38:C0:C2:3D:3D:94:54:B1:AA:76:78:EF:3E","sha256":"72:5B:39:E9:56:FD:9F:68:3C:3A:98:B0:ED:70:D4:20:EF:25:A9:87:2F:DD:70:03:74:6A:80:25:7B:8C:1A:8F"}}},"request":{"raw":"GET /assets/styles-ByfRI2fn.css HTTP/1.1\r\nHost: secure.chainalysis-recovery.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secure.chainalysis-recovery.help/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nage: 1085\r\ncache-control: public, max-age=31536000, immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 13:08:51 GMT\r\netag: \"9fe8795287d8353f76d7411c315bfd46-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1VCAVF9VFW1PV71VX0E17MH\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xshBWacvfdYEo6lO7G3Pc1SsP764CCJtW%2BgYJNIgxpw%2B%2BbrmrAf1TD0AeMIWN9hHvwmqOgOOiVnxNO%2FEckrGDavMnojakvb66bVPRrJMSLyPQo5NmAY5qQQki8S0J2YyarB5i1lt8WTdSKgQrxqlIMBDGg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a36db46c4bc3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76139,"size_decoded":13068,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65470)","md5":"1939467e322be5dda5edf697004e3d25","sha1":"d0a683d9a7f7e89b6dbc38aa67f9a200f88693fc","sha256":"8b1017eba853b5295eebfbb2a58ca29815ce61245ba05535044af43eb8cd01ac","sha512":"abd89ea5f291100ad557a43d456e2a7cd82c22bd535c7e23534ba444ee1bbc6ebc66886929d30602fd7e31e2e3a6497f5d50760b788c32dbfec0302c765e9db4","ssdeep":"1536:qFDITh+1M3IyXXUwJ1mfAULxa1SsMq+WDhXX782TX8z26GVYzKd38WLCS988R98R:eDITh+1SIyUwJ1mfzLOMq+WDhYeXS","tlshash":"5373f894b229e53f7c33a4f5938cb88c9119b0c0dd3546e8fe52722256c7bf1ad6b614","first_seen":"2026-09-06T12:51:32.713231Z","last_seen":"2026-09-06T13:09:32.292011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}