{"report_id":"395cf56d-b98c-466e-b1ec-5c9b58bada34","version":6,"status":"done","tags":[],"date":"2026-04-30T11:12:45Z","url":{"schema":"https","addr":"ton-aml.shop","fqdn":"ton-aml.shop","domain":"ton-aml.shop","tld":"shop"},"ip":{"addr":"104.21.55.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fragment.com/","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"title":"Fragment","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ton-aml.shop","fqdn":"ton-aml.shop","domain":"ton-aml.shop","tld":"shop"},"ip":{"addr":"104.21.55.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T11:12:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-30","alert":"Hunting_JS_WebAssembly","trigger":"fragment.com/js/tgsticker.js?31","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"fragment.com","ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-04-16","domain_rank":42460,"first_seen":"2015-12-20T07:45:42Z","last_seen":"2025-09-27T18:49:04.761288Z","alert_count":1,"request_count":21,"received_data":2350676,"sent_data":10593,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-26T22:44:19.904703Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ton-aml.shop","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-30T11:12:47.909623Z","last_seen":"2026-04-30T11:12:47.909623Z","alert_count":0,"request_count":2,"received_data":6160,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-29T18:56:38.20947Z","alert_count":0,"request_count":2,"received_data":137475,"sent_data":810,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"config.ton.org","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2003-11-13","domain_rank":0,"first_seen":"2025-10-03T21:27:24.901658Z","last_seen":"2026-04-24T06:01:46.07969Z","alert_count":0,"request_count":35,"received_data":523039,"sent_data":15489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ton-aml.shop/","fqdn":"ton-aml.shop","domain":"ton-aml.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd7bcbd4173c8a8c9a696f0b1398974f","sha1":"cf7d318186ce19130ef96ff828234d865960581b","sha256":"36d01396800434b83932cd271c2fe495fc86a6ca3d44e61f188a814023a34c45","sha512":"19687b9db21fad6079dc67e6a468cc4a078cdd89b0de2150914ffafc5ea75dca10cce640e064890f6545c40b963fcebcaeafce6cb0e99bf21f08e02b8882c483","ssdeep":"","tlshash":"3a317c6f6ca3251505b321b94b4ba100b277e06b398ddc90be1c4b106f29a2ea567fc9","size":1750,"data":"","first_seen":"2026-04-30T11:12:53.376669Z","last_seen":"2026-04-30T11:12:53.376669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/tgsticker.js?31","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1400a5f5bb460526b907b489c84ac96a","sha1":"1cdb62d2b39eff966e96a476f72704bc86591036","sha256":"42d42f23d7276824168808093be0f20e3e53673718c79349cc22da88f58d3e23","sha512":"dbb06fc723613a892ac5466d4592839b93cd9504b68e7fafa17827d46404cd7a662d5df04faac08c30c3052958335458301fe9c5b26b1caddd8da914db11cec3","ssdeep":"192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd","tlshash":"29b2ef4d49ab6165a423703dbb6f410632348007790ede30f90de768af9992f16b6fed","size":24604,"data":"","first_seen":"2023-04-05T01:47:42Z","last_seen":"2026-06-23T08:00:17.60864Z","times_seen":1258,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-30","alert":"Hunting_JS_WebAssembly","trigger":"fragment.com/js/tgsticker.js?31","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/jquery-ui.min.js?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f644590544c37aedea1b99bf99c09e6","sha1":"e5adf7a0b1c8cefe9b30e3ca8e21b2191509330f","sha256":"5225dec09dab116b5790bf3242694766254b6f844cf78e89ebc750f675bdcb46","sha512":"7277469ce789571a83ab8a1a4d051b8af381bb6301b5fe97197ce718da8addf50e16c382b9982232d2989c1eae09fadfdcdd6ff5361222eeae4470d2f33574cf","ssdeep":"1536:CPua844bxcytfiWLOpoqrauzoKQ7eSXOVXQ1UnCjjv8wvSH/NPdX1YnFf2qZZ1Jy:mvUtLLOVevjSHVQnAqn1Jy","tlshash":"6ca3d79df200353291dbe328146b1a0e62379249b705849cb43ccdeead7de59617bfb8","size":98751,"data":"","first_seen":"2025-08-28T14:01:30.240029Z","last_seen":"2026-07-22T05:46:31.395181Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"467da3068bbe825cc65511e9e71446ff","sha1":"1d6d4ce71443fe50b7eafe871f5e4ff812ac1dda","sha256":"cab2be12ea33a406733ebe1ea5a175e22713108eb378e4e5dd717afb007170b1","sha512":"9bb03c3ad3460aa928a1e06ed9ca130b1d77f805ac23880ee25dc723e439803a7c17b17f2c3f2a28472680d2c1f30e76b054e4143dbf62fe21f56fdb05b279b2","ssdeep":"","tlshash":"f2b09b1005351c5da84f058d23bb694dd4955a755c6515486e1a1db147d84071a55560","size":125,"data":"","first_seen":"2023-03-09T05:49:21Z","last_seen":"2026-07-23T13:16:11.081297Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ton-aml.shop/landing-assets/anti-inspect.js","fqdn":"ton-aml.shop","domain":"ton-aml.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbe01a901464b330ae7b7b98a60579ec","sha1":"2f016cc21b866f5238b1e1efd6d31a66286190b0","sha256":"275b4e59738747195f8179f84e283e0d2d241d8dc17867769614ff4080331977","sha512":"c604866d9b86d584e1373b11a1480465ecf3b793f14842d9e029c0506ff17a2b4ab86f2d79469fc723d71b248243cea85765b22b6e978139c43482ca78070e93","ssdeep":"","tlshash":"8b419aed30e331605377a02f0eefe528b63385270867c65075d8c9a96fa16748772e85","size":2254,"data":"","first_seen":"2026-04-30T11:12:53.342852Z","last_seen":"2026-04-30T11:12:53.342852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/jquery.min.js?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-23T14:37:07.569279Z","times_seen":54868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/qr-code-styling.js?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fbf550420568629d8f11da920ba8c4f","sha1":"83905ff9fd5b571fd515530e93483bd2d3ed3fdb","sha256":"f566ce33cfa9cc1280ca6ec6dff8665ca6f5f33ac34f271e5bd4ec4b2c64cc99","sha512":"35961c1088fd183b738c938a1992089a3b27618f7f487001def59d8bef9599771c83643d1dc8673785e814416cb147e570346a7c7ee9b2dfc174a0445f219287","ssdeep":"768:etCsgE0ZZenz8j8GvzV2Wqz1ZZUmtwf06IXWYJqQJfdC6gbbkwGlreMj:etp8bewj8G7qz/v6bl6MYjj","tlshash":"8453f8b9f28070a6ab53a6f2403f000bb239f9296606856ce735c5da58fc9c5553ff78","size":65571,"data":"","first_seen":"2023-03-09T12:34:38Z","last_seen":"2026-07-19T12:11:12.7259Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?23","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-06-29T16:20:15.623033Z","times_seen":2919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-22T14:01:04.133438Z","times_seen":2722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/bootstrap.min.js","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77aeb757ff46e5cda25eeb2650157866","sha1":"d8263e06fce773d308724296e984781c3497a137","sha256":"b5e930df6a2976d5df996e18b347e091756699ea32716dc53d0e1c0fd814c526","sha512":"4195c7938ecbb7db60eee50819afc6c16bb8643fb335ed53e86ab4632c6d44c5a3583cc66b761f9268b79631f8f5de000db87619b28332c5318fb21448db9da4","ssdeep":"768:bj1zN4lbZGIcrJBI9mRiufVuY/7suvNCopjaxPK:w99mRicNCoVj","tlshash":"15e2864ab270316003dff1a5515b0a0e7235aa3de607806c78b9d9f22db9c49727bf79","size":32013,"data":"","first_seen":"2023-03-09T12:34:38Z","last_seen":"2026-07-21T22:33:48.965416Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/main-aj.js?73","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de82b186861a2e86e222ef20068c7943","sha1":"31ad3f9d468d1d2ba51d82ed861181ecff55c222","sha256":"e9aff364f3e8e256d572492d398d10587d25f00f7008aa2428d4bd1ccef77fcd","sha512":"329ec131c5c3c1b0cc1d00ad81823c2f2d7d0db90cc6a75f494e3bacbf9f2f410d9ece30316cd6c39d4a0a9441fe8154667874d535df806e7d323b6e8c104ea5","ssdeep":"384:BAkTVm3J1Jx1c/vxTQGv30C4q+RYFmN/kPn4ocCBnefSQ2AVD:BpEgXv3F6Km7Cden2AVD","tlshash":"5d03634d39e3312a55bb717d8baf510832b18403710ece14bd4ca7855f95928ebeafe8","size":38816,"data":"","first_seen":"2026-04-29T19:32:42.875585Z","last_seen":"2026-07-19T22:57:53.192718Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/tonconnect-ui.min.js?8","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a7d2b95b356649034b154c544129613","sha1":"01e60a636743ef044658e39a5e72de0892d8d15f","sha256":"bbd171213cd16b0c681485232cce6d46d2dcd1fa42810244b9c6f8ef8027b5f0","sha512":"fbec8799670d546b77e0a2d73b54a8d3bffbb585c31f786ce7bd4ff7746ed1e253addf52c1e331c0f62c242a7d630440d37b3c001fd9a91b657dfb70c8bbe48a","ssdeep":"6144:Ud2NiDQ8Rz+LVMx+pwbZC3MRJqNylm+AbxDuybdghgFd5AnMAc+3VtY6mnv5x8TY:b1GK3Mg7xD0hkwn1c1","tlshash":"c5842adab3c6b160279747d554774511f3391cba380d84a8fb6c888a3f709c8927bbb9","size":381031,"data":"","first_seen":"2025-09-20T05:14:32.75539Z","last_seen":"2026-04-30T11:12:53.368886Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35a8e3befc4e103a8d68a3f8783afacb","sha1":"67ccfb9316974bc94d4113e57241f0570c31d582","sha256":"ee0899d942f089c8583613422bed6e49d17670b2b53239f70ae814eceaede6a1","sha512":"1383fc2ecc822851ce3a457d2309d6fa54c50a34da68b7affdcd91268e9a6851821ef9e94e1061aa5b5888e638bceeb6ddcb82081aa873122e43c692d8041029","ssdeep":"","tlshash":"3ab092499a94a03f40eda2a18b4882680ab6464278eb2820e4cc489456e1cd87a5e8bb","size":129,"data":"","first_seen":"2026-04-30T11:12:53.37802Z","last_seen":"2026-04-30T11:12:53.37802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-07-23T04:46:18.247476Z","times_seen":78297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/jquery-ex.js?22","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09783ea523d1c187eda46224169437f3","sha1":"6330e9f30132557045cdb76fc203afbc1481dd50","sha256":"6e8ff691b2dae9181cdb4dce18bb519606e6279c72ef37c70a3239d7567ab034","sha512":"c44e345fbf40f67a5974f68eea7b7827b9ada58e824940ad231c54e91c4e85e939c052c26209139ac4df007c37b96cef0d07dbf90cf1494f26b571c0cd0b0aed","ssdeep":"768:XH0tC4ENssyP76Dr7HEpdCBOpt9LZkdXO:3hNryEEpdx1V","tlshash":"7353315978e32162a0b7707e5e9f8148b3399407940cce50fe2c57d16f90938a6fabed","size":65498,"data":"","first_seen":"2025-06-18T11:43:42.395736Z","last_seen":"2026-05-26T03:44:02.479717Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4756b1757e95b8187fda5fdac0e791af","sha1":"ea599a3d3a7e2e274aa55827febe1578846f3a15","sha256":"36f492f0ee3ed1dc1f2be6bfc388b9673cf4c5fb0a599c7b9ecc29d6948a55c0","sha512":"6d39fba1cc915d721628a092c68f1151da579d97671972e566b04c65eaff0779a6f373eef8206dc83f0a0c35d0014ef63d1a053a9d0c405af606945ad2ac77c1","ssdeep":"","tlshash":"adf09e9db1f355bb043b702bc27f8d20b2e7580b034eeb48e0a917802e3854f02de419","size":656,"data":"","first_seen":"2026-04-30T11:12:53.378904Z","last_seen":"2026-04-30T11:12:53.378904Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/auction.js?102","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3fbb5f01bc91bb7278fa95fcfbd779c","sha1":"bf324839e3b96999fb7c849e0f55a3e1fce881aa","sha256":"42115c8b54fb6efd48014e31811ec9b8eff919973611bf5f8528ddc010779631","sha512":"f776c31c57bf9000a1407560acd4753848a9e0e8be80094d730c83a6a4130b46e322b3faa54d7b7ea278a821d95f6473cef214eecdcf2eeff42e7ce189c25ce4","ssdeep":"3072:zevmenRTlTspHTlksPWmP2lcN/E7U6oF9ptVnmFdMv50xSvsLuaeNroplBNKpNgn:zevznRTlTYksxP2lcN/E7U6oF9ptVnmN","tlshash":"7f04a34d78f32456a97b303d5fbf442532b2d407a50ede20fa6c12816f29c1ca5adbe9","size":180153,"data":"","first_seen":"2025-12-02T11:57:42.991356Z","last_seen":"2026-04-30T11:12:53.353695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"config.ton.org/assets/tonhub.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonhub.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 55132\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-d75c\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 91\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:10:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-f3a569160a7e7824a422ac386f9b6458-5beaded0a7e8afbc-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"2fee343f7186afe4fb4d313b974019e9","sha1":"8ddc2316409184cc4b7e5c92191c329217f60e9f","sha256":"0571664b9059e4571a007acc4c523c275cf008cbb9ee96d56934d54d5ca845f6","sha512":"70ebc03c8093604560561fabe864542cc40ccd1540634b024d57ceb0b6d0dfafffebb8620355caa823debd157b0c879c8fe3cafeb631ff25e631c3ab0d8e7fd5","ssdeep":"1536:DjbrTlVNHKUAaRU82bWa4YLS9IB+zFH+5pSrS:DnNHKiq82bW/eYIY1+5pSe","tlshash":"98330165f221113a8721c9287a1f1e6b1cc1393b88aeed3252239b6ed845d610fc39b3","first_seen":"2025-11-22T11:30:21.502499Z","last_seen":"2026-07-20T01:24:15.916977Z","times_seen":399,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":21,"dns":1,"connect":8,"send":0,"wait":19,"receive":9,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T11:12:21.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: stel_ssid=362f93721047d44e30_7969719206630291612; expires=Tue, 20 Apr 2027 13:44:48 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=2,cfOrigin;dur=116\r\ncontent-encoding: br\r\ncf-ray: 9f461c671c381a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825941,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (829)","md5":"4d79b48ad29d9514aae434af45052a0a","sha1":"254f66a024b11b6f75a008c1740d1397245eb629","sha256":"735aebd356b7c56d0fccfa5ad4191fa81d5f5c8b3983ec796664386c0b62b1d6","sha512":"7a49dd95a8ebba9ed83fc3ed1f25eb959706bef16d876f9fb3b7b19d582fe3d6592c830ae11f6a33f4da492b5e6d9b7ed2d235ad1226e3a015a6c756a1287173","ssdeep":"3072:/TFT5yWUYdPdjDzaxZbwg/du6avg38fVHiI62SXtjzt8wJUup0vXiNmu+sZ7u2WW:uPB","tlshash":"0405d034b5f0212a81d7b5c17a3cabeb7fe1ea4bc597025432ac4b914fabcd29d07845","first_seen":"2026-04-30T11:12:53.337227Z","last_seen":"2026-04-30T11:12:53.337227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":48,"dns":34,"connect":2,"send":0,"wait":162,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/wallets-v2.json","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /wallets-v2.json HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fragment.com/\r\nOrigin: https://fragment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: application/json\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Apr 2026 17:55:33 GMT\r\netag: W/\"69e7ba15-5674\"\r\ncache-control: public, max-age=180\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 108\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:10:35+00:00\r\ncontent-encoding: gzip\r\ntraceparent: 00-cdc42a6beec189ca8f674043325a66c9-7def240ae9174260-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22132,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c28116db71c9f932a0427ec6cc0aac6b","sha1":"2f0e17c7e6d5a93b4bd14c84ab7f6e020699a8a3","sha256":"e759674319918eaa041c737db70d03666a707672f5d42d4b67742cf6ad958e71","sha512":"e9d1237dd66cb764a70e7c493ea971e37002f044bf0970226c8d6c37f4027d48fb520da7282cf2c10dd26677625481ad16cca704ed1191474c5da662a0ddbf43","ssdeep":"192:kRWpwKMv4irypxGHf7Dv29yRYX9y4pqB8NRbpp/KlI+JaG5kXPJiGRkpSC6RUppC:kRQ4gHlaR3eHm9pO","tlshash":"91a2f3a7c6385c67025561f4b89a2286f211028bccd0bd6df74c489c9facdaf14b779e","first_seen":"2026-04-24T06:01:56.079486Z","last_seen":"2026-06-13T00:59:55.527738Z","times_seen":113,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":185,"dns":111,"connect":8,"send":0,"wait":10,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/img/TelemintLogoSprite3.svg","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /img/TelemintLogoSprite3.svg HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Oct 2022 13:51:39 GMT\r\netag: \"6357e9eb-810a\"\r\nexpires: Mon, 04 May 2026 08:31:02 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 9681\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c7419601a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce19b221afaedcb025cd712e28cd5a6f","sha1":"ad4dafd0500647ba3065d78d6a6db7be5a93346b","sha256":"22b0f4cd3a3ee55394ee0fbd92659f755dbbcebb9451cf077248dfd097d080cc","sha512":"83dbde6578c42a94ea01e0ed6f8f32bba22ef3cbc9610483b5b4c0465b7ebf9f6d2694c26566155b12d20a222a9b4ab3586a24bf135dcdd7d58553864c34fd70","ssdeep":"384:/W0YKaVZmW7rCuG0H8U54PbxHo0Ot4jLRNh5O84ql8yBWwmwKKTF5d6q6AUka5bF:WKLJ0c9Pb20xjLRpOpyuGrQ3FCJG3","tlshash":"a4e283e8823461f88c93cbe8ef75657155ada0ec07e9035d9624c3147a8aee4f188d9c","first_seen":"2025-08-01T21:25:21.273474Z","last_seen":"2026-04-30T11:12:53.339015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/uxuywallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/uxuywallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2006\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-7d6\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc20\r\nage: 213\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-1f005bf03ff9640970b9f2aa336df30c-9bd0582b703c073b-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"341b60fd079e8dbd6019ba142d4d2b78","sha1":"1b6ff34914394c495bcc6c2e4e7aedf5313668d0","sha256":"e411f1b732b3ab0aa8a503ec3e26f9f60c2b8617beca17967bf81115de56b217","sha512":"2b95e6895292db780caa0e60a2477bc50e17252e46f8b831c14e15ffec6965040f6602b3b9008a4b28d7230f9ede3b121e7bc606aa8ab1ce93c7afd8e40f7c63","ssdeep":"","tlshash":"24410ae34268dc2cd4670ef6e8bab5c8877620cc6a30550a9d62a0ae108344deb1e3d5","first_seen":"2025-11-22T11:30:21.525633Z","last_seen":"2026-07-19T10:25:02.459432Z","times_seen":398,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fragment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f461c6c4af0b503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-07-23T04:46:18.247476Z","times_seen":78297,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":22,"dns":1,"connect":3,"send":0,"wait":16,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/okxwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 50253\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-c44d\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 91\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:10:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a270436f2dc9b64ce626448651b22fd3-eb418c58ea417eb4-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cb9159c1e2edd95e3a1aa12a3fd6c19b","sha1":"9478e1695f1e905cc7eae54768e895683348b484","sha256":"c5d0323a3d22fa19a7b31663ef57e66bb2ee14feacd110386d77da70510f2ae0","sha512":"884c20e6550acd343bcb8a4300a3706b4bd8db2d3b8a65a65dae59fec3dbbc882ef47fa9f43a3cca0c70554c1fc3176b99ddde1b5091596fc5584adb7753a3bf","ssdeep":"768:h7kYcFW8PletzHHsDYV5aurztuvndxlTgftq0iZs2mLG3+TSrnZ7cGee2mKU/9De:hU7mHMD/uUvn3pgf80iiLG3qGeme97","tlshash":"3633029bff6b7cc60d6110d30d28079b960a9146ec70dc97e406552b1bd8b82b7dfb61","first_seen":"2025-11-22T11:30:21.534651Z","last_seen":"2026-07-20T01:24:15.931795Z","times_seen":399,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/css/font-roboto.css?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:21.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-1816\"\r\nexpires: Sun, 03 May 2026 04:24:54 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 110847\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c68ba6b1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c706681409217a14a24c7e2deb8cf423","sha1":"08b443fe5bc6a223a9de08fb56282365b1d13857","sha256":"84b97b3fa8847b64c6d3833561e4b3146530577171e85ad226578a087db70974","sha512":"2520a5417426cea58972529b3776713958ff259cc8467ebafbe291bd040e27195054c4133f4a9518d78da38ddf4f7cdac64da0813da33bbe707ad13af5baa7c1","ssdeep":"192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t","tlshash":"53d18b40485a6000eb871cd677cf7e3abd8e55053042c576effd14a8adebc269368b4e","first_seen":"2023-05-29T15:15:29Z","last_seen":"2026-07-23T13:16:10.859107Z","times_seen":19117,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/koloweb3wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/koloweb3wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 9346\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-2482\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:12:23+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-0bb38497d8b46b10223c259350c401d4-750f94eb256d0a17-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"f446d0b0b827dc92763198290f6d1913","sha1":"04594a5bf79e05ce7877e4f71c7900d7fe01f0d1","sha256":"835ac69b7fcb8a385ab079c693ee6a2c40a0185932816448de9067e132e548c1","sha512":"ae8496a514ffe87c754ab51530eec863d0980b87876bacfe98dff71835d68f936e2372f4e0675e374bf3285e57775aed390c3391978b6846b06a7b32a758a401","ssdeep":"192:oK2RPyVPVwevy1jvZpWZqXYTNsQFia/QX3mTnVBMTk8WAC:oFdyVNwnjvZsoXsNvFias38nzVx5","tlshash":"60129f81b6d20209e7bf62db2ec9bbc254a7ad374c39917e1b55e08138f14b681c5dc7","first_seen":"2025-11-22T11:30:21.47152Z","last_seen":"2026-07-19T10:25:02.445906Z","times_seen":398,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ton-aml.shop/landing-assets/anti-inspect.js","fqdn":"ton-aml.shop","domain":"ton-aml.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ton-aml.shop/","date":"2026-04-30T11:12:21.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ton-aml.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 17:44:54 GMT","end":"Tue, 28 Jul 2026 17:44:53 GMT"},"fingerprint":{"sha1":"0D:F1:88:AF:55:8C:BA:9C:EC:87:4D:B1:3E:44:DA:51:60:A1:4A:85","sha256":"0D:BD:92:A5:37:BD:E8:96:D5:82:36:34:7D:89:AF:3F:63:43:F0:05:48:73:38:CE:7F:12:C6:CC:DF:C2:B3:85"}}},"request":{"raw":"GET /landing-assets/anti-inspect.js HTTP/1.1\r\nHost: ton-aml.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Apr 2026 06:55:20 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 30 May 2026 11:12:21 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5Dhz%2Bx4937WYV4exqU2CFQ0mz%2FiUIoXg9VTbeSX5Pra2rWcX1U7Aen5NQ%2FfbVOe1iguYGAyI8Ew%2BhErjM43HWT0ONZA5GA4WaDdkSs3JwurX3th5N37HaT960UwCFk%3D\"}]}\r\netag: W/\"69f2fcd8-8ce\"\r\ncontent-encoding: br\r\ncf-ray: 9f461c64dc317131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bbe01a901464b330ae7b7b98a60579ec","sha1":"2f016cc21b866f5238b1e1efd6d31a66286190b0","sha256":"275b4e59738747195f8179f84e283e0d2d241d8dc17867769614ff4080331977","sha512":"c604866d9b86d584e1373b11a1480465ecf3b793f14842d9e029c0506ff17a2b4ab86f2d79469fc723d71b248243cea85765b22b6e978139c43482ca78070e93","ssdeep":"","tlshash":"8b419aed30e331605377a02f0eefe528b63385270867c65075d8c9a96fa16748772e85","first_seen":"2026-04-30T11:12:53.342852Z","last_seen":"2026-04-30T11:12:53.342852Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/jquery.min.js?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/jquery.min.js?1 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: \"5a05e7c6-1762a\"\r\nexpires: Sat, 02 May 2026 07:07:12 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 187509\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a681d1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95786,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-23T14:37:07.569279Z","times_seen":54868,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/img/TelemintLogoSprite1.svg","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /img/TelemintLogoSprite1.svg HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Oct 2022 13:51:39 GMT\r\netag: \"6357e9eb-7bd5\"\r\nexpires: Thu, 30 Apr 2026 22:19:17 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 305586\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c7419581a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31701,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a1468639e135ea289fdf064ed426fba","sha1":"191390eaa77ef652d479b4ba0deb0cfb1ebcb0f7","sha256":"5f1fe6469138403bc08dd1e9e42f036b033f6b63afb5944a3b40039b39c0c65a","sha512":"4abd2e3de81be48b2a1fcdb69ab142c75aaf87724dc6b9447c79430d609932b34fb1f4412ddf0a5b57e1b1571fd9dda520b71faf5b71fd7bf4949a4445a617e0","ssdeep":"384:mBj4scngRdBTgKrgFAZoCcncgESt49xj78x7MezeLUee8p1KJg0/usMZZKJL1zpe:ycWBsKAAacgkLCYZ9sgI1/GsK/+A","tlshash":"a0e2a5d95334b2f5cc8387e8df75147424aeb0fd4aa643acc6a8c310668aed9f158d9c","first_seen":"2025-08-01T21:25:21.367441Z","last_seen":"2026-04-30T11:12:53.344494Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/img/TelemintLogoSprite2.svg","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /img/TelemintLogoSprite2.svg HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Oct 2022 13:51:39 GMT\r\netag: \"6357e9eb-7dc5\"\r\nexpires: Fri, 01 May 2026 13:31:17 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 250865\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c74195c1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32197,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17a2624c6574c5d47a6acda1719cbdbb","sha1":"b9f1d8f57b62731aa72c36345f36b3561798355f","sha256":"d0542d81d5230f79dfdff5db5f10bf24ad8ffbf561f395b3c0395e546011a890","sha512":"0aa6d261a0380ec7ba281114c9e06ae3529a479eeded6c88538ff25b507c1e53184eb4965305d43c1ee2c9304d6edf51a5a0d3766a9bb169f1c84c8722cb02eb","ssdeep":"768:CdvuXIVatmZ9+cj5fH8ig1G10I9ArLHeHyUQOD6972fTqc480k:fIxz8eHtL","tlshash":"c7e2b6d9437862f5888347f8df7524b068bfb0ed4ae6871c9a68c3102656ee8f1d8d5c","first_seen":"2025-08-01T21:25:21.37063Z","last_seen":"2026-04-30T11:12:53.345403Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonkeeper.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-504\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-891a7f3d85c32cd13541f326f6fe6d6a-5eeac0d7fe38ffea-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-07-20T17:26:09.354034Z","times_seen":980,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":23,"dns":0,"connect":8,"send":0,"wait":24,"receive":4,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/echoootonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/echoootonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 56008\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-dac8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:12:23+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a803c4997038df8ae9f4be28d3ba01fb-b3fe2e6ea654bb4d-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0045354563623ba7033b82568a35011b","sha1":"d30a9a2cba690a17b513a8cc91edc1166f807213","sha256":"b795fde982e92cc1ba959c241406c4708c085481ead3d10f56dee883cb4742f8","sha512":"3a2f5a407d92e20d81bd44b566edbe377f7ae52e53d8167fc601204dfbe7ff2563abd6d05ce2693d6ace7441f930dc6a7de4a114877ef762b02aecaef0298afb","ssdeep":"1536:ONwl6IKG8c33My8czUrOrqIHc2XkV79P2uIZ998V+1EYG6:D6IKenMy8cYItHSV7jIZj8V+1T","tlshash":"4b4301dabdcc4f123ff773d7e0094366ee4872492732543801de65c62668b6679fa148","first_seen":"2025-11-22T11:30:21.508458Z","last_seen":"2026-07-19T10:25:02.422651Z","times_seen":398,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/css/bootstrap-extra.css?2","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:21.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /css/bootstrap-extra.css?2 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: \"5a05e7c6-11648\"\r\nexpires: Fri, 01 May 2026 13:12:19 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 252002\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c68ba721a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71240,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540)","md5":"4ce4e0ec4bdc168e56fc8341af7fb0a0","sha1":"48d139cebabb47c3bb3a1ff5fe78b5f435254405","sha256":"6342d16a93416b5e826f6d0e0e930ef033efb682851ae46270f3c4f5b4a1c194","sha512":"e1fa878f55f16221768baf4ed0ecab7f689a0b990435254af73d56088f66c4bf3863d3343a28d7313d305c38f4d0991b574ba5f2727969cf061cabc99c352a70","ssdeep":"768:VevMAUBt+CsvPAez8WeLsluohINLmmblmYNpubWx/sUKMHjEyrgOqTodWIlKy03s:4vsfiEdVg9TvxFCDw1Dr9IZpTfR","tlshash":"e36361d8b57424843222d0d53506cd43b70ca183e46fedb9f7e5359cabc82969ab36cb","first_seen":"2023-05-26T14:13:06Z","last_seen":"2026-07-19T22:57:53.206782Z","times_seen":86,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/css/auction.css?96","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:21.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /css/auction.css?96 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 23:09:13 GMT\r\netag: \"697d3a19-31c92\"\r\nexpires: Fri, 01 May 2026 13:14:09 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 251892\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c68ba771a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"285963bd6cc5484e4337f35db696e64f","sha1":"0dc814e9653cdac04b7466163621f7fd90dc9f9f","sha256":"ddf15598d038280571c11f814acbb04b1f1796ac98fed660fd6346a2dd0598c6","sha512":"24c0d76f1be402773138dca6c10af66b95994dbe2f45bc109cb64d38330b69a1d96d8ea3a6f9187746339acb78d61991438159c1fc5a2176facb41fab503a5bb","ssdeep":"1536:fOf8Fa3bmhJYC0bieU9rxvnRVqgB9E5XCnTlMbBu3NvY9y/1TiqLd8rbHxJWsmjJ:fvKiewlb3EN0lsa5HuZqwEuY","tlshash":"f914979d66722b05b8375037e29a370e6329ed43ee09dd79fbd2200c9fc4a98e16175c","first_seen":"2026-04-30T11:12:53.348Z","last_seen":"2026-04-30T11:12:53.348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/bootstrap.min.js","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: \"5a05e7c6-7d0d\"\r\nexpires: Thu, 30 Apr 2026 18:14:28 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 320273\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a68221a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32013,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31650)","md5":"77aeb757ff46e5cda25eeb2650157866","sha1":"d8263e06fce773d308724296e984781c3497a137","sha256":"b5e930df6a2976d5df996e18b347e091756699ea32716dc53d0e1c0fd814c526","sha512":"4195c7938ecbb7db60eee50819afc6c16bb8643fb335ed53e86ab4632c6d44c5a3583cc66b761f9268b79631f8f5de000db87619b28332c5318fb21448db9da4","ssdeep":"768:bj1zN4lbZGIcrJBI9mRiufVuY/7suvNCopjaxPK:w99mRicNCoVj","tlshash":"15e2864ab270316003dff1a5515b0a0e7235aa3de607806c78b9d9f22db9c49727bf79","first_seen":"2023-03-09T12:34:38Z","last_seen":"2026-07-21T22:33:48.965416Z","times_seen":168,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/tgsticker.js?31","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/tgsticker.js?31 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Mar 2023 11:31:32 GMT\r\netag: \"64242194-601c\"\r\nexpires: Fri, 01 May 2026 13:40:49 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 250292\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a68421a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1400a5f5bb460526b907b489c84ac96a","sha1":"1cdb62d2b39eff966e96a476f72704bc86591036","sha256":"42d42f23d7276824168808093be0f20e3e53673718c79349cc22da88f58d3e23","sha512":"dbb06fc723613a892ac5466d4592839b93cd9504b68e7fafa17827d46404cd7a662d5df04faac08c30c3052958335458301fe9c5b26b1caddd8da914db11cec3","ssdeep":"192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd","tlshash":"29b2ef4d49ab6165a423703dbb6f410632348007790ede30f90de768af9992f16b6fed","first_seen":"2023-04-05T01:47:42Z","last_seen":"2026-06-23T08:00:17.60864Z","times_seen":1258,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-30","alert":"Hunting_JS_WebAssembly","trigger":"fragment.com/js/tgsticker.js?31","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetwalletlite.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgetwalletlite.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2008\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-7d8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 213\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-28c1d8052b0d2db269ca10f3166dba7a-64b0626652a492c4-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"09790056c70e889c7f74f91a9222bc01","sha1":"26194deadd44d9a00ca48ae053924b76656e885a","sha256":"e85acd2f35d2deb9726a0db27737b931b600fd4bad9b73b3009be6ece7fcbefb","sha512":"b71f8a277680fc9cba3c8a4a272b21b8b157714a31ebaa7fd8f8dc8639ee872948dff4af3f0af395b2cebbc75f15ff7ebfbe9fa5ac87e363afc8c11eb69399d3","ssdeep":"","tlshash":"6941b6835134d5fc3e5b3826800b8f1f51ab1607d1d26455c77b98381f73ce96662b2b","first_seen":"2025-11-22T11:30:21.492928Z","last_seen":"2026-07-19T10:25:02.391252Z","times_seen":398,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/safepalwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/safepalwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-2df\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-c7c21829e325ff629598ffd275e71dce-0cd03b8ea683f9f7-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-07-20T17:26:09.391422Z","times_seen":1061,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/fonts/ProductSansRegular.ttf","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /fonts/ProductSansRegular.ttf HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/css/auction.css?96\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/ttf\r\nserver: cloudflare\r\nlast-modified: Sun, 02 Oct 2022 16:57:45 GMT\r\netag: \"6339c309-a09c\"\r\nexpires: Sat, 02 May 2026 06:57:49 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 188073\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a0ef51a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41116,"size_decoded":0,"mime_type":"application/ttf","magic":"TrueType Font data, 13 tables, 1st \"GPOS\", 7 names, Microsoft, language 0x409, type 1 string, Product SansRegular1.009;GOOG;ProductSans-RegularVersion 1.009;PS 1.000;hotconv 1.0.88;makeotf.l","md5":"eae9c18cee82a8a1a52e654911f8fe83","sha1":"49bdf6c2dc3ca0c772da5bc3d10ff5da23badee3","sha256":"b34cbb71d75b84eb4925f51e050249f65fb3e3550133aba0a4c161c6820aec82","sha512":"0995619ecb4358f272f8066a3905d89785717885d43ad2893bdbe9b34859729cbe1a66d7eb31222106c3770448a2367dd551af9bdc72b4d9fa8398a68832f64f","ssdeep":"384:3tMkfedP9JjpnuoPLsVIZoxTO1Grw7vdg4C0MdNOaBq2ifRyn9G5+UnzAzurldoI:qPvpuoPLsAk16Fgln9G5uzuzoVKqgt","tlshash":"1503e901f752f90ed01b663c9ec2d3720eb6b618eeed039ef6468bf9584e6c09906354","first_seen":"2023-05-17T21:48:35Z","last_seen":"2026-07-19T13:27:11.520648Z","times_seen":199,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/jquery-ex.js?22","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/jquery-ex.js?22 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Apr 2025 12:56:27 GMT\r\netag: \"67f51cfb-ffda\"\r\nexpires: Fri, 01 May 2026 23:06:33 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 216348\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a68331a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3504)","md5":"09783ea523d1c187eda46224169437f3","sha1":"6330e9f30132557045cdb76fc203afbc1481dd50","sha256":"6e8ff691b2dae9181cdb4dce18bb519606e6279c72ef37c70a3239d7567ab034","sha512":"c44e345fbf40f67a5974f68eea7b7827b9ada58e824940ad231c54e91c4e85e939c052c26209139ac4df007c37b96cef0d07dbf90cf1494f26b571c0cd0b0aed","ssdeep":"768:XH0tC4ENssyP76Dr7HEpdCBOpt9LZkdXO:3hNryEEpdx1V","tlshash":"7353315978e32162a0b7707e5e9f8148b3399407940cce50fe2c57d16f90938a6fabed","first_seen":"2025-06-18T11:43:42.395736Z","last_seen":"2026-05-26T03:44:02.479717Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/jquery-ui.min.js?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/jquery-ui.min.js?1 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 12:46:06 GMT\r\netag: \"68b04f8e-181bf\"\r\nexpires: Fri, 01 May 2026 13:40:49 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 250292\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a68351a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98751,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32250)","md5":"6f644590544c37aedea1b99bf99c09e6","sha1":"e5adf7a0b1c8cefe9b30e3ca8e21b2191509330f","sha256":"5225dec09dab116b5790bf3242694766254b6f844cf78e89ebc750f675bdcb46","sha512":"7277469ce789571a83ab8a1a4d051b8af381bb6301b5fe97197ce718da8addf50e16c382b9982232d2989c1eae09fadfdcdd6ff5361222eeae4470d2f33574cf","ssdeep":"1536:CPua844bxcytfiWLOpoqrauzoKQ7eSXOVXQ1UnCjjv8wvSH/NPdX1YnFf2qZZ1Jy:mvUtLLOVevjSHVQnAqn1Jy","tlshash":"6ca3d79df200353291dbe328146b1a0e62379249b705849cb43ccdeead7de59617bfb8","first_seen":"2025-08-28T14:01:30.240029Z","last_seen":"2026-07-22T05:46:31.395181Z","times_seen":248,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/auction.js?102","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/auction.js?102 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Oct 2025 10:03:17 GMT\r\netag: \"68ef7165-2bfb9\"\r\nexpires: Mon, 04 May 2026 08:12:29 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 10792\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a683f1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e3fbb5f01bc91bb7278fa95fcfbd779c","sha1":"bf324839e3b96999fb7c849e0f55a3e1fce881aa","sha256":"42115c8b54fb6efd48014e31811ec9b8eff919973611bf5f8528ddc010779631","sha512":"f776c31c57bf9000a1407560acd4753848a9e0e8be80094d730c83a6a4130b46e322b3faa54d7b7ea278a821d95f6473cef214eecdcf2eeff42e7ce189c25ce4","ssdeep":"3072:zevmenRTlTspHTlksPWmP2lcN/E7U6oF9ptVnmFdMv50xSvsLuaeNroplBNKpNgn:zevznRTlTYksxP2lcN/E7U6oF9ptVnmN","tlshash":"7f04a34d78f32456a97b303d5fbf442532b2d407a50ede20fa6c12816f29c1ca5adbe9","first_seen":"2025-12-02T11:57:42.991356Z","last_seen":"2026-04-30T11:12:53.353695Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/fonts/ProductSansBold.ttf","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /fonts/ProductSansBold.ttf HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/css/auction.css?96\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/ttf\r\nserver: cloudflare\r\nlast-modified: Sun, 02 Oct 2022 16:57:45 GMT\r\netag: \"6339c309-d8fc\"\r\nexpires: Fri, 01 May 2026 13:09:41 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 252160\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c69fee21a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55548,"size_decoded":0,"mime_type":"application/ttf","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 7 names, Microsoft, language 0x409, type 1 string, Product SansBold1.009;GOOG;ProductSans-BoldProduct Sans BoldVersion 1.009;PS 1.000;hotconv 1.0.8","md5":"dba0c688b8d5ee09a1e214aebd5d25e4","sha1":"e07e7ff0ec27cb309c74e5a8df2fb9ad16288f72","sha256":"8dbeee804c249634fd860cae932f54afe759de8c17c136995fcae57c24348cf9","sha512":"36a17661f2878e9c6cd057bfa3b0d7558a5a38437af8c84547454c958795d689de32a944fdcbe65af015d18f198e71eacdd26151a8c218565fc67f4271dd8727","ssdeep":"768:QzuzoVKqgSS79/cHnqVo/LiydQMn0xVrj+1mnKDUiDqE0e5:SvuZpCLSVrcd","tlshash":"e0432b5e73073648d3b3bcbc6ae3f2b10ea7b51a1b9a435f714a06ba440e381b255785","first_seen":"2023-05-18T08:16:51Z","last_seen":"2026-07-12T20:57:04.159932Z","times_seen":106,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/mytonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/mytonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-1295\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-4c803a8221a5b3dcfbde2bd4e8de9842-3358748ba188a9f9-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":22,"dns":1,"connect":8,"send":0,"wait":20,"receive":6,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/imtoken.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/imtoken.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 43029\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-a815\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-9e8ea9e755e92d6cc14031798fe9afd6-47fc901706bb408a-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cc556604e6bf887247f1bd52fc469c15","sha1":"bf52b5632265a357c8326781f25368723d02b7fc","sha256":"891316e4bfbce4e5dc444e414488869743fefdd68b7e5b50867cf67666c0dd10","sha512":"1aa2cdcdf851d9ef454a17fc884f14380ed1ae23bc4990c7b7c1a2eca6e120cfa6e9a415a2a1804e3d57e19f10074178a2fe0fee9c3cd3441f758ae360f6416b","ssdeep":"768:VqtrC4tzWxSI/N3jrFHcQDoz6hwaP9aCkirQqgWc7HxahU:VqtuUzOSE3FHpDoz63sAraWc8hU","tlshash":"6913f1fecfbf94d4849409a826909283cba94768ac8831e9015ed78fd04db735ee50f9","first_seen":"2025-11-22T11:30:21.472624Z","last_seen":"2026-07-19T10:25:02.45703Z","times_seen":398,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/css/bootstrap.min.css?3","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:21.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /css/bootstrap.min.css?3 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: \"5a05e7c6-a61b\"\r\nexpires: Fri, 01 May 2026 13:14:09 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 251892\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c68ba6d1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-07-23T04:05:33.962251Z","times_seen":68126,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgettonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgettonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 805\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-325\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc10\r\nage: 213\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-78d8614b8070b43a88ddb712ebd706c2-2fc6ac34aaf35ed6-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"e3234b49342c8b98e1bc18701f14697b","sha1":"a586c5d69f22119f46e774cbbdc1cb3bb6bed9c4","sha256":"8f269136c30e6b880e03e3f6db1501c4023f8b8d1cd4ae841aed85ec1501bc61","sha512":"73a189fed61c6c60fa71206a0ad48962d330878fab88579e3153c4251ee9fdb40ba1f43f8f876c74c2849bc24ae4bf78adeda37751e4153a5540060fa6b2e714","ssdeep":"","tlshash":"070166854312d45eff1b8d3a0031d7d097a559f6c236a8a86bff152b1e3140c66db391","first_seen":"2025-11-22T11:30:21.50347Z","last_seen":"2026-07-20T01:24:15.893852Z","times_seen":399,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":20,"dns":0,"connect":8,"send":0,"wait":24,"receive":3,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/binanceweb3tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/binanceweb3tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1607\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-647\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc14\r\nage: 105\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:10:38+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-3548091265c0851a7e7b1eb6c53e1612-3d3296a876ae2a39-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"292e89cefe60c940848daaf7ab58e11b","sha1":"07d3ede03ae361212cd9c7d0f91cf9edf3c8583c","sha256":"0cf1b71e664487b9bbfade7ff380f3c7388f22ff82b2331cd1326c5242f2c5a5","sha512":"f3410481b475b54a5d6a2b2ef1bd6bf8963ffa10e003d575e0a6233c2e5d701a826fa86dcd52057b7bbbb15ec12e2f2e92d9bdec5e725eb35633419f73cd15ab","ssdeep":"","tlshash":"4131eacf35170ed3ce765b56babe0c736d89157033ca2845527d25c55406d0c43cb462","first_seen":"2025-11-22T11:30:21.504787Z","last_seen":"2026-07-20T01:24:15.93101Z","times_seen":399,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":19,"dns":1,"connect":17,"send":0,"wait":18,"receive":5,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/hot.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/hot.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 45772\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-b2cc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc10\r\nage: 60\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:11:23+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-1ec1ef761d68fabd61d620df4ca0b5ef-f43ad392ab1d5c70-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"e0c38efe88759bb68b5c92d1aacc16a7","sha1":"4210f53af06a80b16d33ef2e91ea36da1ca4a18b","sha256":"e76b11422e3b828486011d5dd9bd915a430f4eee4adcd886d3c2ea0cd22af212","sha512":"9b3c5c58b7c8a96b6e6263f34db1799096305d64565a8e1a91b3ea682f30b7415718475d478cf5b5927e2014b1baf3e234e063329f96eaf824562e530defd30f","ssdeep":"768:bi4+80cr13Z6pTZ3DvnfO4J+JjxrcxB0iRXPClWJbHCN8MUwvQliqmXH41M+KZ/r:biVSr1sbTvfPaixB0iR/OYbHCNZUyee7","tlshash":"5d2302c35f518748ade59b4e8fa28464d27fe999b3417fc20948eac0c219e54fb428de","first_seen":"2025-11-22T11:30:21.526783Z","last_seen":"2026-07-19T10:25:02.352767Z","times_seen":398,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper_pro.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonkeeper_pro.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 18520\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-4858\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc15\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-f88f426fadfde46bb9bf5e4ec19a2b91-233d86c3db727e25-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3c952c0c19268d9ede72dba2b327d99c","sha1":"1b1e98ee3538963e3dc9089746386d6acf397e80","sha256":"2d0ab9711dbced8b88b2f207a139e623641ddb8c40e375cfa888016d32aa01ca","sha512":"e3bd01ffedf9d33530a5e5246cee26f8a54e17423861d6b595952024e9c6baecac67fa4d7f1250103cc46ae83428c82403cdff7751a665c760e01ab50b551af4","ssdeep":"192:uiYxYUIKZ50p++PRy145vrPXZNAvccFB6B6EfkpFcLYp29BTW8q2dqojHOX9k9uL:u9EKMn4SjXrA0cYjLYStPHMw/NfIBN/","tlshash":"af82d01622a3994d2f79a9f8ee25fa38344102dd5fdab8d9cdd6c0ce184ca64e533c61","first_seen":"2025-05-19T03:10:12.400525Z","last_seen":"2026-07-20T17:26:09.395474Z","times_seen":947,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ton-aml.shop/","date":"2026-04-30T11:12:21.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Mon, 04 May 2026 11:12:21 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-22T14:01:04.133438Z","times_seen":2722,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":198,"dns":0,"connect":21,"send":0,"wait":42,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/xtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/xtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 6673\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-1a11\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 31\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:11:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-c991d1405353632f4e15e58c45488c58-2ab7ba3da500b6f4-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"3cdb7697d40d42ba9183cfec43e867cc","sha1":"5f99574ff04392bae80c5c23f5892972ebb71e23","sha256":"d52abdfbc9303922359179dae6503455e022175e2b559edd7b53b5c797bcfec9","sha512":"3169c2a3895844ff32f42a70ff7ae781826e6469d7dce457ce5b6f2e0a386f8b3fcc71fb9daa8a7d678157d7a1d19b99ccf372ddea3c86c4d8efeb827deb9064","ssdeep":"96:UscWJioWzrqf2mWHxBYp4JSFrEtVGWDg3mWQpILYmyBgPLotkw3enAEVJzs1:UgwoWZjxuWOotVGuTpuYmyFtkwuAEm","tlshash":"7cd15b93cb111271e97d46b108a35b208fcad67134a757123b78a638eee6641b093f94","first_seen":"2025-11-22T11:30:21.524252Z","last_seen":"2026-07-19T10:25:02.400751Z","times_seen":398,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ton-aml.shop/","fqdn":"ton-aml.shop","domain":"ton-aml.shop","tld":"shop"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T11:12:20.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ton-aml.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 17:44:54 GMT","end":"Tue, 28 Jul 2026 17:44:53 GMT"},"fingerprint":{"sha1":"0D:F1:88:AF:55:8C:BA:9C:EC:87:4D:B1:3E:44:DA:51:60:A1:4A:85","sha256":"0D:BD:92:A5:37:BD:E8:96:D5:82:36:34:7D:89:AF:3F:63:43:F0:05:48:73:38:CE:7F:12:C6:CC:DF:C2:B3:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ton-aml.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BbwcCghDbwMrjplV6BdhLeo0mfY%2BvxLpMvu3WPXx%2Bu1gi%2FRknMR14X5wPL64AtwwKy4IPp4AXRjYcmGsS3doIyUEztIfjGOcj4IZn%2FdTlRbgzad%2Fdcnf1y%2FZGKFFQA%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f461c629a5e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2468,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"3125e79e2c9b770eef04685b8c274eed","sha1":"1f020ba60ee7b04d1e63c0f93bb0bcc4c8d936b6","sha256":"f80fd57f505568d18b507c4c6a5fe96bdb9772f8c7891eb2dc432c2b3cde7d04","sha512":"38a61e404bc14d519eee587d876fdbdfa340b486a4c82990f97145d1793f7f4fc65b30e2e2cfbd520d992e31d475df13e53b87ccfe5a9049a9be5d99c019681c","ssdeep":"","tlshash":"3f5100ae5cf3541501b320a60b47f10475a3e067b649c940bd9c4b149f5ab6ea9b3fc9","first_seen":"2026-04-30T11:12:53.360196Z","last_seen":"2026-04-30T11:12:53.360196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":39,"dns":29,"connect":1,"send":0,"wait":210,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/qr-code-styling.js?1","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/qr-code-styling.js?1 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Oct 2022 18:06:37 GMT\r\netag: \"634eeb2d-10023\"\r\nexpires: Sat, 02 May 2026 02:26:12 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 204369\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a68371a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"7fbf550420568629d8f11da920ba8c4f","sha1":"83905ff9fd5b571fd515530e93483bd2d3ed3fdb","sha256":"f566ce33cfa9cc1280ca6ec6dff8665ca6f5f33ac34f271e5bd4ec4b2c64cc99","sha512":"35961c1088fd183b738c938a1992089a3b27618f7f487001def59d8bef9599771c83643d1dc8673785e814416cb147e570346a7c7ee9b2dfc174a0445f219287","ssdeep":"768:etCsgE0ZZenz8j8GvzV2Wqz1ZZUmtwf06IXWYJqQJfdC6gbbkwGlreMj:etp8bewj8G7qz/v6bl6MYjj","tlshash":"8453f8b9f28070a6ab53a6f2403f000bb239f9296606856ce735c5da58fc9c5553ff78","first_seen":"2023-03-09T12:34:38Z","last_seen":"2026-07-19T12:11:12.7259Z","times_seen":16,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/dewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/dewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 42298\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-a53a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 60\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:11:23+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-540f6e1ebf5d0a6881e8b49fcdcfffda-73b30482d5801258-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"34717c55f237500cb1400c90bcdebb01","sha1":"81848e39f29d0b944f283453ee1659c6c8a22723","sha256":"364eacdfeee2020e26d196aac612ac93cc8aa3ebc707d02ca57e9aacaaef541b","sha512":"732e94a9ab2004ec2f473c87d9beeed448e48b431176e698ea9c6f0c63d06057689c90c485fb0387988e9331367cafaaea40d2ab8e4104e108dcaab5bbc2fbe6","ssdeep":"768:YfrDuKY1eR4xH9a+jbGg6oRrWP6AnW4KIH0L2kApMJiDr9eTzddSA3PuWhwST:YfrBY1XxH9vbGsWPZlH06kSMJE9eNdVz","tlshash":"3d13f2b2e8c6c6ae8452a8e24d9eb4af0c457db622a53f19c405f44b5f74d27321fc1b","first_seen":"2025-11-22T11:30:21.476583Z","last_seen":"2026-07-19T10:25:02.45241Z","times_seen":398,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/miraiapp_tg.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/miraiapp_tg.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 14743\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-3997\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a267f2e6bbd6dbff6313633df663000d-02fe224d1574d50a-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"4183f4114e1e2fb9f436d5ff9b7debc6","sha1":"c11f74163dc7a56bfb2e9adec8e34b35413a27b7","sha256":"0e9842f97a85f5a3317ae59868dd7a98c706ac325249ace72b3511db7a6ce0c0","sha512":"69a2c21046972f4d38ea697aa5d85e7e5c3305b450292b47a017a0ba4bdcd72f4f8563a4965c9849d311ba8499cee43d41a5924ff0177b0687a7783267b9c406","ssdeep":"384:fx2yKuzEkkTr9SfDDm8JH0o/CgLcjTZEEAPSdn:fx2yKuzjkTrM/H0o/CnjT6EAqdn","tlshash":"6862c047856cdce7d0a16dfdf3e9beb71e73063475a64004a3ae0af1eab2b400687016","first_seen":"2025-11-22T11:30:21.467365Z","last_seen":"2026-07-19T10:25:02.443226Z","times_seen":398,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/architec_ton.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/architec_ton.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 16202\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-3f4a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-d63810bb5c8ae4b85d359250817e7025-c16ea22c09c1fabf-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"247af337378ab26527a7e001e772a863","sha1":"e5555ce55b512c99db267178c0b6776408e29531","sha256":"562fb3c02d160472278ce219266068aee29ced8b152695a66ba519ef6dc66b90","sha512":"dc562e28b94ccdfae6763b225d96b023d65a692476df4946c8131168c1d682deb990a4dbc289e8e6aa009ede05b56ab7324deb1ac96fab75f894048bc55f92e1","ssdeep":"192:eYEWkPbfZhkY8WlA82HMVGvl94k4BFgS599ARP8NdG743LVSCBUF0G7VtvBuImVe:2PzZH8Eaf4TH5gtL7wVSZWM0ImJ5E","tlshash":"4072bf6ce55034b7a1cadd9421ec480a4e319c0ad6ba4cd87b8de484cfdcade0c9d6ca","first_seen":"2025-11-22T11:30:21.470356Z","last_seen":"2026-07-19T10:25:02.340246Z","times_seen":398,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/defiway.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/defiway.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 20702\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-50de\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-6104aa233ccf38e5a8d2ca759b0f35e8-b3b4bc65229e5e87-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"6fe8902e9f84eca83e2d0f9c3aa0caf1","sha1":"3273f7b3cc278a24398aeef31157f92ed1851b50","sha256":"26019945f9a28a6f088ceb7f89ec093553618735b300cfd930bc9083f2a097e2","sha512":"dfefdd71c4a1dd66b96342be3c094a5908c6222fb1c307159123b48f5b78404cb608f4f9e1ab2377613f8f64968357f615ad2e277ddfcbb81c663fe87dcb05e5","ssdeep":"384:k23WSXzaKK4C2lCU6t7GOfhWF4NjaS0H3A:lXGN4CcCldG+WF4N+w","tlshash":"0e92e04400af6a2f1f6bd02deb845092a5569ef22d158834bfcb82c7d6d833d98986dd","first_seen":"2025-11-22T11:30:21.496351Z","last_seen":"2026-07-19T10:25:02.490659Z","times_seen":398,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/sparx.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/sparx.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 12031\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-2eff\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:12:23+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-9da32e0bf283be29b4ba2bba9ffe3a5e-2860bcce5998d2a4-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"350d95923ef7019d8c78aa10e3dcc84c","sha1":"f2dd0e01a18a84ac6310bb609df5a3a52c2cd35b","sha256":"d380702b04582bb035eb3e5ebfb4cb99b1944447fed694d759e5b87cb0502b17","sha512":"ac6a84ea2bcb39b631b3eada1b91042c58f3b9650e8bfd52c5f7a473b5b2651a03c2ed3bbc0fa281710f11feff2a0d7924a47f770d95fecd553e543f0b61a3e5","ssdeep":"192:wS4DQJ05f0IFbka5nldHEujoV152XcyLNH7L1GflxCNH/slQvlgmk7uoHWIaLbog:XiXf0i1fHpjuHGx9ilx06QvAu3IaL0zk","tlshash":"b0428ede615d3ac9e13a13f537db186b2e9723bec012b29d29137f160e7a00a9572c5c","first_seen":"2025-12-24T06:30:42.004317Z","last_seen":"2026-07-20T17:26:09.366848Z","times_seen":499,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/walletverse.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/walletverse.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4155\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-103b\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a8223d4f25d008363ae79372da052bf5-e6eb75efb286345f-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"af7432346baa91a90edc1f7b6197969b","sha1":"5998d0f926d3b7c715ad7b93152a0e1b1a5cb26d","sha256":"8212198573b964deb675eebd3876b38cb548e9f4d0eeb2ced8d0358e83e41c93","sha512":"7a11b76aa000f4513931e85aa6c4916870ae50a91c0aba9d39a6a8f5d5a54e5d4a53ff4690fd77a5ae20399ea8c49ca716d9ebfa4a8982ddf6e967952e23a818","ssdeep":"96:wSGkKj777777NpsR/wKY877IzC/957FnLYFReCcJqpyUXj7777770:wS4j777777NpS977395F8TeNJqpyUz7Y","tlshash":"8d81b57a5cfb4a60b7dd424396ee86ebd2235082ae442192d762fbc7723c31ed743150","first_seen":"2026-04-10T04:42:01.113297Z","last_seen":"2026-07-19T10:25:02.487935Z","times_seen":196,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/telegram_wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/telegram_wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-5f15\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-70e6ee936ddc0980bccc5400be4834de-eb021d68474888d7-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-07-20T17:26:09.378603Z","times_seen":827,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":16,"dns":1,"connect":8,"send":0,"wait":10,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/gatewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/gatewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 6751\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-1a5f\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 31\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:11:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-9c9eab39277cadfc134d4b7868c76f7c-ff2685ef8ce35a88-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"851d63e4f663bfecd0370dfcdb0ba69b","sha1":"de014e7a7df805557a65d9d58fb4e70224799e61","sha256":"6e84eb43cd2faeb5037e32b4b2e2aec1b417bd32dfee397de90918bcbef561b1","sha512":"5e2f2434179f71ecc5ba2b689a7359df2d723254bbc08c29512b87b5e85e25ebf756f661964cd82058becea038846870359b4fe72ac76c9a8ec5e55ca4a5cf9c","ssdeep":"192:FSzHxFMOKxw3uBeLUr7iMgf4v4LVrjfQNCG3:kzHxFM7guBguia+rs","tlshash":"b4d19fc4a398933dc95e61cb3ed36b939f829614632462267fb5353124f215cbeb8372","first_seen":"2025-11-22T11:30:21.512015Z","last_seen":"2026-07-19T10:25:02.35815Z","times_seen":398,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-150a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc14\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-ae5b11144a3a1b4912bac6b6d2822c69-5ef7be66c608701a-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-07-20T17:26:09.38907Z","times_seen":1003,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/nicegramwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/nicegramwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3587\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-e03\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-c2e4910f463e367dcc7b50e47ad02d01-1a2113adbc231202-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"87ca5b77ce1e13cff2867ae76f509c4d","sha1":"50b7941c8c1d6bc3bb13e42512a80ea71cbd2ce5","sha256":"e57a5da21f4f8fe1f226c957f00d69e1d64da4764b4305f58795df6a8084c591","sha512":"7f76188cb2109ded78ad61ef55c9973c622c468ebb3cdc81cad453fdba94f6dcdd49e776240476b70ec62611f65dd3523c0de69d8dc774b7f085add684d45ef5","ssdeep":"","tlshash":"9f715ba33754e78bc5cf0b73cdb55e829f294082dfca5449748d98938b41b922a8b602","first_seen":"2025-11-22T11:30:21.507445Z","last_seen":"2026-07-19T10:25:02.456398Z","times_seen":398,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/stower.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/stower.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1177\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-499\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc20\r\nage: 213\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-555bfb07c223650128eaa05427d04979-542ca5df33e10fb2-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"ba10312a7edfd843d07db405f85466cd","sha1":"4895c058b4a79d59c311b75e713afaa39b3438e5","sha256":"82af2f35eb72c1e59c0327c284e608660dc6bfcd0ae83cbbef14157f242e668a","sha512":"6d343f5f3a86c770c9277d16d8964def7724e6fc4e944524fdb8ee45cddcfef1cae5b1f09227734f4288387a42cb42f9a1165c4852f6a9f2b618c8b0a08ef930","ssdeep":"","tlshash":"37213ac402310db9bed23f64e08d0f97c831a1fb534237982fc098a843a9781a1c894e","first_seen":"2026-02-26T13:53:40.67362Z","last_seen":"2026-07-20T17:26:09.35544Z","times_seen":342,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/main-aj.js?73","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/main-aj.js?73 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Apr 2026 12:40:42 GMT\r\netag: \"69e37bca-97a0\"\r\nexpires: Sun, 03 May 2026 19:39:21 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 55980\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a68251a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (503)","md5":"de82b186861a2e86e222ef20068c7943","sha1":"31ad3f9d468d1d2ba51d82ed861181ecff55c222","sha256":"e9aff364f3e8e256d572492d398d10587d25f00f7008aa2428d4bd1ccef77fcd","sha512":"329ec131c5c3c1b0cc1d00ad81823c2f2d7d0db90cc6a75f494e3bacbf9f2f410d9ece30316cd6c39d4a0a9441fe8154667874d535df806e7d323b6e8c104ea5","ssdeep":"384:BAkTVm3J1Jx1c/vxTQGv30C4q+RYFmN/kPn4ocCBnefSQ2AVD:BpEgXv3F6Km7Cden2AVD","tlshash":"5d03634d39e3312a55bb717d8baf510832b18403710ece14bd4ca7855f95928ebeafe8","first_seen":"2026-04-29T19:32:42.875585Z","last_seen":"2026-07-19T22:57:53.192718Z","times_seen":10,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/js/tonconnect-ui.min.js?8","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /js/tonconnect-ui.min.js?8 HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Oct 2025 09:57:07 GMT\r\netag: \"68e4e3f3-5d067\"\r\nexpires: Fri, 01 May 2026 03:53:30 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nage: 285531\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9f461c6a683e1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a7d2b95b356649034b154c544129613","sha1":"01e60a636743ef044658e39a5e72de0892d8d15f","sha256":"bbd171213cd16b0c681485232cce6d46d2dcd1fa42810244b9c6f8ef8027b5f0","sha512":"fbec8799670d546b77e0a2d73b54a8d3bffbb585c31f786ce7bd4ff7746ed1e253addf52c1e331c0f62c242a7d630440d37b3c001fd9a91b657dfb70c8bbe48a","ssdeep":"6144:Ud2NiDQ8Rz+LVMx+pwbZC3MRJqNylm+AbxDuybdghgFd5AnMAc+3VtY6mnv5x8TY:b1GK3Mg7xD0hkwn1c1","tlshash":"c5842adab3c6b160279747d554774511f3391cba380d84a8fb6c888a3f709c8927bbb9","first_seen":"2025-09-20T05:14:32.75539Z","last_seen":"2026-04-30T11:12:53.368886Z","times_seen":18,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/img/fragment.ico","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"GET /img/fragment.ico HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Oct 2022 14:53:25 GMT\r\nexpires: Thu, 07 May 2026 05:59:57 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nage: 18745\r\ncf-cache-status: HIT\r\netag: W/\"635949e5-3aee\"\r\ncontent-encoding: br\r\ncf-ray: 9f461c704d471a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6eddbb5bbe0c7e3bfb51686167e13433","sha1":"36343a1eb9ff96f962ac29b186680ed8a676e920","sha256":"76c1ef41cea4e0a5f6bc7c79b574db4778203dea352b662c38538f69886d8aee","sha512":"c06f88215ec62d1620610cf2c9de3d1a978df5b61482d82942e8aaa4c7c0ef59cf4cf90f3b4a899fc5452b6d7ffce9f923c1ac2eef0bf8671c134e558e01f927","ssdeep":"96:jiDR++QhiaRCaRZlkobIDQ5tSGNcRZCqmpcxa3DzvOLBK/:jiDR++eRZR3JtdIa3P","tlshash":"7b628394d2120e82cb4c3df1c18b59c9ef2e5e4b896186273940f6f72db926fc75b121","first_seen":"2024-08-22T17:20:03.889173Z","last_seen":"2026-06-01T15:04:39.710102Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/okxtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1419\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-58b\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-19843934349b512f5847b75016a7eb5b-ff0daedf35f85a22-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit colormap, non-interlaced","md5":"eae57e6670b0935844d704d55c8a6c1f","sha1":"b48e9e4136e1686c69f95e8e3cdf406e857b4864","sha256":"88c1133276ed03cd0da7ae1b8e6e97b388ca84bb2aa40644f280b914ff11b8e8","sha512":"ad44608a7fccfadcd5c3cbf3d9dfb765e3305b784539880c30494f0b0d4bdfea7998dee5a66cbf44954651f08001276b496f674aa436f08e052066cb95997bfe","ssdeep":"","tlshash":"24212c4760c10c90fa75da758fe612629df61f348a54c4d82a52e37d141eae80eacb8f","first_seen":"2025-11-22T11:30:21.475658Z","last_seen":"2026-07-19T10:25:02.427673Z","times_seen":398,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/cactuslink.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/cactuslink.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2402\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-962\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a40cd6e9c0cc3f18aa9ba6c63eef0451-96edf82951ef93c0-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"9571ca461ce9dd8f0f042f28d3a1c27e","sha1":"d0eeaaf50dde6b257b1b04a67a9ff0330cfb36e7","sha256":"20c297ad923829fae31753cb8d1bb92f5955e117052f7eacc962b25c0f60dc2f","sha512":"d336ceff51fb4d0309bb95e2eebbd657f09d12ce577b0a3ca514837e32aabbb7bd3d888016eb4b6fa3fb70fed617e468d4a8127f9b2d749aa9f6400bb5498a38","ssdeep":"","tlshash":"ba412a430319bf3175e18a155b61978edf6ec89cdf2c48acf59b660a1915388aac26c8","first_seen":"2025-11-22T11:30:21.490083Z","last_seen":"2026-07-19T10:25:02.414043Z","times_seen":398,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tomowallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tomowallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 764\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-2fc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 213\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a2ff8af1ec20c3421ffb481e0254b0f2-f26094ddd7ffc576-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 82, 8-bit colormap, non-interlaced","md5":"591694f0be4f3e0593e9e8d9ea3aeb31","sha1":"911632556978f58f5f7299d7e8e659535aaebcc0","sha256":"0b338c2788aeccf2e2518d357fb136dffb28ad0f6312cd417c20ee382b9338db","sha512":"b389fe4083832ce8d6b886b658ce0d5a8a83c40e73e5f6d4d6fae76863734e887e3933cacda11b6cc5ddb10a7eed507f249f4e82e80aee04ece03bad7ce69730","ssdeep":"","tlshash":"f50175c69b3c484f4ce422c10796e0d89210c4710088a01abc9b48561a7c8ef3b5eb0e","first_seen":"2025-11-22T11:30:21.469469Z","last_seen":"2026-07-19T10:25:02.487304Z","times_seen":398,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tokenpocket.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tokenpocket.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 5985\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-1761\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 220\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:43+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a064589faa4bc6d3a4d9562cbee40c0c-10c7d58d0c078dad-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, interlaced","md5":"987444e9a03d1c96165134993befbf9e","sha1":"f10357bacad45366cb96605509f7d5ac4533ac35","sha256":"3dcd239d221b091127db2a3dd71d63f0885105b244ceb32962f9fca4dc2f6982","sha512":"1daa7d636e12964377287fd733a9c8d5fae5d28ef4fba8a68eb0d1d7f0c36868b76d9436b991588bf83c3311818c3ebad599111398cbb3538bbf77f9cb2b7abf","ssdeep":"96:mgpKD/yRZMOU/XHJBNt/8kBIU93p9MztPvzoAM8GqlSvQF0epLhExssssTsPHNsX:vRevz05U9DMztHzoJASvQF3pL+lsPtzs","tlshash":"3dc14cde48dbae57754e4b726b625319c1a543f6e0f2ce4b4d078a30797b6507433148","first_seen":"2025-11-22T11:30:21.530051Z","last_seen":"2026-07-19T10:25:02.476337Z","times_seen":398,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bybittonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bybittonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 6895\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-1aef\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 31\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:11:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a5e5840cda9dfee6ebb0513d74cf07c3-ed09109522da0350-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":6895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0916d8dc0fe322b83ad60dc4bc8260cf","sha1":"da3b21840b67b25f8997c32c7fddeda06fedb76e","sha256":"8268630cfca7e33f69b193ff30605e3916ed4ef5874513c42df54f0e8e78795d","sha512":"0cbcab0f6ae34cd6ee4aad3804498700f057bfac59d6663bde4146efeced10158d1e8af31daa7410b79b5d9024e37b02788202a1881bafb5c6bb902ad54acbe5","ssdeep":"192:FS49XMVkI8gQaDwnLJAmdbdySsAf/8F1O1l:k49XMVkIzQawqMsukFal","tlshash":"5de18e57f6d1153fa0af9da9b2ecff226861430a54e0d24f6d17c8d30e1b9173d1988a","first_seen":"2025-11-22T11:30:21.536065Z","last_seen":"2026-07-19T10:25:02.442538Z","times_seen":398,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetweb3.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgetweb3.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1176\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-498\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-94cfc9553e3d2b23a45ce1b3d98902c1-1de2cc68c840aecf-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"5d9631b0982fce76f8acc8c1c1f29e3c","sha1":"7e9d2c3adaf1a34c615c802c6ca5008ea9e46e5d","sha256":"da61705b68b0f898ebbf4416c74a0bbc94d98253af445b4b93f5498905d81111","sha512":"a00da5a594b804cf3bedf492e48b6f09287fd208c4e3b0c24b75808207ec66d264842b8ec528b6b56dfd1a698e0986c5e5d3794d0df10a8cad3bf0dc8c2707b1","ssdeep":"","tlshash":"2d2111ebcd5a11bf145b620a024b35d054b6d56f25028ecedf15287808075d6f6b6a87","first_seen":"2025-11-22T11:30:21.528379Z","last_seen":"2026-07-19T10:25:02.48485Z","times_seen":398,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/onekey.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/onekey.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1469\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-5bd\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc10\r\nage: 213\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-dfa34ed5a337933181da91bfdbc313d7-5bcde805dd108cc1-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"3630a1a80ed5fcbeeb9224e2b997d117","sha1":"25e3771b17938bcb89ff31bccd073a3e0b3b574f","sha256":"6df2ebc8dc341106bad5d235866f6c1851233231776786c16ffd2bcfafd47b57","sha512":"6c1eac4850a1741137d722d131b8f15ec363370398e511968ab663c733b5db501b111ef7a4be2a91885a7495fbc80ce8feced3f800ab9149b4368bbe12b476e7","ssdeep":"","tlshash":"8831529add12643fa5540670c77776e5ea760163b184ae4f4b030b342d5b1c2f977e80","first_seen":"2025-11-22T11:30:21.497762Z","last_seen":"2026-07-19T10:25:02.387804Z","times_seen":398,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/openmask.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/openmask.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4441\r\nx-id-fe: sto5-hw-edge-gc17\r\nx-shard: sto5-shard0-default\r\nlast-modified: Tue, 21 Apr 2026 17:55:28 GMT\r\netag: \"69e7ba10-1159\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc15\r\nage: 249\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-04-30T11:08:14+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-7c33ebd5d9a0c805f8338caa829e6d34-17b625bd0a6c1a14-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"ec081e53ad51c57d64e634569182acce","sha1":"4a4fb1ce3714e386197cc321460177367014fe58","sha256":"773c0248eae5d85ac71cf6f4e4cf4f57160e448a68178cac269c33badf4ffb8d","sha512":"b2e8d498747d61c8defb07867cc333429afae8abb90b082538d17e0c8a5ca8fc631efe1500834be01a40daf2896873f5fe7e1a26e21b598ff5931449fb426003","ssdeep":"96:DhV3jO9vXvgpAhSstqNNE2/F6/d0O1256XClGogKDDvc+x9:DXC9vvgKzqNNE296/OO1Gb0ovDvc+n","tlshash":"80917dced641c49fe92241e2ce7fbdd21d15ee29c804768032aa11254df711e6bd609e","first_seen":"2025-11-22T11:30:21.537023Z","last_seen":"2026-07-19T10:25:02.486697Z","times_seen":398,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?23","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:22.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-widget.js?23 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 30 Apr 2026 11:12:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Mon, 04 May 2026 11:12:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-06-29T16:20:15.623033Z","times_seen":2919,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":112,"dns":1,"connect":22,"send":0,"wait":21,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fragment.com/cdn-cgi/rum?","fqdn":"fragment.com","domain":"fragment.com","tld":"com"},"ip":{"addr":"104.20.26.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fragment.com/","date":"2026-04-30T11:12:23.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fragment.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:25 GMT","end":"Thu, 23 Jul 2026 19:44:24 GMT"},"fingerprint":{"sha1":"B0:CF:A0:C1:4F:BC:73:4A:CD:00:AE:5D:7D:7B:55:94:E4:E9:4B:24","sha256":"3A:CA:C3:CB:5C:25:F2:80:EF:E0:9D:8B:D3:45:41:D5:D4:09:90:46:59:D7:8E:B3:B1:37:9D:7F:E2:4A:5F:FD"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: fragment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 639\r\nOrigin: https://fragment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fragment.com/\r\nCookie: stel_ssid=362f93721047d44e30_7969719206630291612; stel_dt=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 30 Apr 2026 11:12:23 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://fragment.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9f461c74ec031a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T14:50:59.77475Z","times_seen":17478622,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}